Computer Security Articles – Page 1047 – RSS Reader for Computer Security Articles

Credit to Author: William Tsing| Date: Wed, 11 Mar 2020 15:44:33 +0000

How do you spot the unicorn cybersecurity vendors amongst the bad apples? We show MSPs the ins and outs of vendor vetting.

Categories:

Business

Tags: cybersecurity vendors enterprise managed service providers MSP risk management SOC SOC teams vetting cybersecurity vendors vetting security vendors

Independent Krebs

March 17, 2020 admin

U.S. Govt. Makes it Harder to Get .Gov Domains

Credit to Author: BrianKrebs| Date: Sat, 07 Mar 2020 15:01:21 +0000

The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity published research suggesting it was relatively easy for just about anyone to get their very own .gov domain. In November’s piece It’s Way Too Easy to Get a .gov Domain Name, an anonymous source detailed how he obtained one by impersonating an official at a small town in Rhode Island that didn’t already have its own .gov.

MalwareBytes Security

March 17, 2020 admin

Rocket Loader skimmer impersonates CloudFlare library in clever scheme

Credit to Author: Jérôme Segura| Date: Tue, 10 Mar 2020 15:46:13 +0000

URLs can be deceiving, but the one used to mimic CloudFlare’s Rocket Loader in the latest Magecart attack takes it to a whole new level.

Categories:

Threat analysis

Tags: HTTPS JavaScript Magecart skimmer skimming

Independent Krebs

March 17, 2020 admin

The Case for Limiting Your Browser Extensions

Credit to Author: BrianKrebs| Date: Tue, 03 Mar 2020 15:39:53 +0000

Last week, KrebsOnSecurity reported to health insurance provider Blue Shield of California that its Web site was flagged by multiple security products as serving malicious content. Blue Shield quickly removed the unauthorized code. An investigation determined it was injected by a browser extension installed on the computer of a Blue Shield employee who’d edited the Web site in the past month. The incident is a reminder that browser extensions — however useful or fun they may seem when you install them — typically have a great deal of power and can effectively read and/or write all data in your browsing sessions. And as we’ll see, it’s not uncommon for extension makers to sell or lease their user base to shady advertising firms, or in some cases abandon them to outright cybercriminals.

MalwareBytes Security

March 17, 2020 admin

A week in security (March 2 – 8)

Credit to Author: Malwarebytes Labs| Date: Mon, 09 Mar 2020 20:07:46 +0000

A roundup of the previous week’s security headlines, including the introduction of a new series on child identity theft, an examination of law enforcement’s cybersecurity woes, a progress check on our stalkerware initiative, and more coronavirus scammers on the prowl.

Categories:

A week in security

Tags: a week in security awis cathay pacific coronavirus exploit gdpr malware microsoft Mobile phishing round up security TESCO week in security zynga

(Read more…)

The post A week in security (March 2 – 8) appeared first on Malwarebytes Labs.

MalwareBytes Security

March 17, 2020 admin

International Women’s Day: awareness of stalkerware, monitoring, and spyware apps on the rise

Credit to Author: David Ruiz| Date: Mon, 09 Mar 2020 15:00:00 +0000

For International Women’s Day, Malwarebytes is measuring the impact of our own campaign to raise awareness and protect users. These are the numbers on stalkerware, monitoring, and spyware apps.

Categories: