Security – Page 1756 – Computer Security Articles

Over the past few months we have seen a lot of malware activity around the Netcore vulnerability, so we decided to take closer look at its exploitation. The following screen shot shows attack traffic captured through Wireshark. Figure 1 Figure 2 shows a quick enumeration of the sample. (There are different versions of the sample for several architectures. We chose to analyze the MIPS one) Figure 2 My analysis shows that this sample is a variant of the Gafgyt family, with some changes which I will discuss in detail later in this…

MalwareBytes Security

January 20, 2017 admin

Understanding the basics of Two-Factor Authentication

With data breaches resulting in leaked passwords occurring almost daily, two-factor authentication has become an essential tool in the security toolkit.

Categories:

Tags: 2fa authentication mfa Multi-Factor Authorization passwords Pieter Arntz sso token totp two-factor authentication

(Read more…)

Kaspersky Security

January 20, 2017 admin

Meitu – the app with all the permissions

Why does a ‘make-over’ app require your location, private data and your phones IMEI number? Something’s not right.

Security TrendMicro

January 20, 2017 admin

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of January 16, 2017

I thought I was going to start a riot earlier this week. The Major League Baseball Hall of Fame was set to announce their 2017 class and my favorite player of all time was on the ballet again. His career statistics are those that many professional baseball players dream of (449 home runs and .540…

QuickHeal Security

January 19, 2017 admin

DDoS attacks spreading through ‘GodMode’ exploit – CVE-2014-6332

We have recently observed an increase in the exploitation of the famous ‘GodMode’ exploit of the vulnerability CVE-2014-6332. The reliable proof of concept (POC) or exploit code for CVE-2016-6332 is readily available on the Internet. This makes it easy for attackers to integrate the exploit in various campaigns. They just…

The post DDoS attacks spreading through ‘GodMode’ exploit – CVE-2014-6332 appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.

Security TrendMicro

January 19, 2017 admin

Trend Micro TippingPoint® Named a Leader in 2017 Gartner Magic Quadrant for Intrusion Detection and Prevention Systems (IDPS)

Trend Micro TippingPoint has been named a Leader in the Gartner 2017 Magic Quadrant for Intrusion Detection and Prevention Systems (IDPS). With improvements in both Completeness of Vision and Ability to Execute from previous years, we believe that placement in the Leaders’ quadrant illustrates the positive progress we’ve made since the acquisition of TippingPoint in March 2016…

MalwareBytes Security

January 19, 2017 admin

Verified Twitter accounts compromised, get busy spamming

Verified Twitter accounts tend to be a little more secure than those belonging to non-verified users due to the amount of extra hoop jumping required to get one of those ticks in the first place. A number of security requirements, including providing a phone number and setting up 2FA, are all things a would-be verified Twitter user needs to do. Unfortunately, things can still go wrong…

Categories:

Tags: social media spam sponsored tweets twitter verified Verified Twitter

(Read more…)

MalwareBytes Security

January 19, 2017 admin

Malwarebytes Labs Blog Comment Safari

Today we’re looking at some comments on our blogs we got from spammers who apparently don’t look too closely at which site they’re at before they hit “Send”.

Categories:

Tags: 419 Illuminati nigerian scam spam spammers

(Read more…)