Computer Security Articles – Page 1520 – RSS Reader for Computer Security Articles

Credit to Author: Pieter Arntz| Date: Fri, 14 Dec 2018 16:00:00 +0000

SMB vulnerabilities have been so successful for criminals that they’ve been used in some of the most devastating ransomware and Trojan attacks of the last two years. Learn how they work and how your organization can protect against them.

Categories:

Tags: EternalBlue EternalChampion EternalRomance exploits NSA tools ShadowBrokers SMB vulnerabilities vulnerabilities

(Read more…)

The post How threat actors are using SMB vulnerabilities appeared first on Malwarebytes Labs.

MalwareBytes Security

December 17, 2018 admin

Compromising vital infrastructure: the power grid

Credit to Author: Pieter Arntz| Date: Thu, 13 Dec 2018 16:00:00 +0000

How are we doing at protecting the vital infrastructure of our power grid and its components against physical and cyberattacks?

Categories:

Tags: backup blackenergy blackout crashoverride cyberattacks dragonfly nrc Nuclear OPEC power grid renewable energy sandworm stuxnet

(Read more…)

The post Compromising vital infrastructure: the power grid appeared first on Malwarebytes Labs.

Microsoft Security

December 17, 2018 admin

Zero Trust part 1: Identity and access management

Credit to Author: Alex Weinert| Date: Mon, 17 Dec 2018 17:00:45 +0000

In part one of our series, Ill define Zero Trust and then will discuss the first step to enabling a Zero Trust modelstrong identity and access management.

The post Zero Trust part 1: Identity and access management appeared first on Microsoft Secure.

Microsoft Security

December 17, 2018 admin

Step 2. Manage authentication and safeguard access: top 10 actions to secure your environment

Credit to Author: Debbie Seres| Date: Mon, 17 Dec 2018 17:00:23 +0000

This series outlines the most fundamental steps you can take with your investment in Microsoft 365 security solutions. We will provide advice on activities such as setting up identity management through active directory, malware protection, and more. In this post, we explain how to enable single sign-on (SSO) in Azure Active Directory (Azure AD) to manage authentication across devices, cloud apps, and on-premises apps, and then how to set up Multi-Factor Authentication (MFA) to authenticate user sign-ins through a mobile app, phone call, or SMS.

The post Step 2. Manage authentication and safeguard access: top 10 actions to secure your environment appeared first on Microsoft Secure.

Microsoft Security

December 17, 2018 admin

Microsoft AI competition explores the next evolution of predictive technologies in security

Credit to Author: Windows Defender Research| Date: Thu, 13 Dec 2018 19:00:54 +0000

Predictive technologies are already effective at detecting and blocking malware at first sight. A new malware prediction competition on Kaggle will challenge the data science community to push these technologies even furtherto stop malware before it is even seen. The Microsoft-sponsored competition calls for participants to predict if a device is likely to encounter malware

The post Microsoft AI competition explores the next evolution of predictive technologies in security appeared first on Microsoft Secure.

Security TrendMicro

December 17, 2018 admin

This Week in Security News: Security Predictions and Malware Attacks

Credit to Author: Jon Clay (Global Threat Communications)| Date: Fri, 14 Dec 2018 18:20:36 +0000

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the span of categories for Trend Micro’s 2019 Security Predictions. Also, learn about a new exploit kit that targets home or small office routers which attacks…

The post This Week in Security News: Security Predictions and Malware Attacks appeared first on .

ComputerWorld Independent

December 12, 2018 admin

Android security audit: An easy-to-follow annual checklist

Credit to Author: JR Raphael| Date: Wed, 12 Dec 2018 13:35:00 -0800

Android security is always a hot topic on these here Nets of Inter — and almost always for the wrong reason.

As we’ve discussed ad nauseam over the years, most of the missives you read about this-or-that super-scary malware/virus/brain-eating-boogie-monster are overly sensationalized accounts tied to theoretical threats with practically zero chance of actually affecting you in the real world. If you look closely, in fact, you’ll start to notice that the vast majority of those stories stem from companies that — gasp! — make their money selling malware protection programs for Android phones. (Pure coincidence, right?)

To read this article in full, please click here

Independent Krebs

December 12, 2018 admin

Scanning for Flaws, Scoring for Security

Credit to Author: BrianKrebs| Date: Wed, 12 Dec 2018 19:25:14 +0000

Is it fair to judge an organization’s information security posture simply by looking at its Internet-facing assets for weaknesses commonly sought after and exploited by attackers, such as outdated software or accidentally exposed data and devices? Fair or not, a number of nascent efforts are using just such an approach to derive security scores for companies and entire industries. What’s remarkable is how many organizations don’t make an effort to view their public online assets as the rest of the world sees them — until it’s too late.