Computer Security Articles – Page 1525 – RSS Reader for Computer Security Articles

Credit to Author: Naked Security| Date: Thu, 29 Nov 2018 10:56:30 +0000

El gobierno de Estados Unidos ha acusado a dos ciudadanos iraníes por haber lanzado uno de los mayores ciberataques utilizando el ransomware conocido como SamSam ocasionando más de 30 millones de dólares en pérdidas a las víctimas y permitiendo a los presuntos ciberatacantes cobrar más de 6,5 millones de dólares en pagos de rescate. La […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/QcE5TtmFmes” height=”1″ width=”1″ alt=””/>

Security Sophos

December 10, 2018 admin

Microsoft parchea el problema de Outlook 2010

Credit to Author: Naked Security| Date: Wed, 28 Nov 2018 15:52:29 +0000

¿Qué pasa en Redmond? Justo unas semanas después de publicar un parche que borraba los ficheros de los usuarios, Microsoft “arregló” Outlook 2010 con el denomiado November Patch Tuesday El 13 de noviembre, Microsoft publicó una actualización de seguridad, KB4461529, que arreglaba cuatro vulnerabilidades de seguridad. Estos fallos podían permitir la ejecución de código remoto […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/tLugGRBa2Nw” height=”1″ width=”1″ alt=””/>

Security Sophos

December 10, 2018 admin

Técnicas cibercriminales – Informe de amenazas SophosLabs 2019

Credit to Author: Naked Security| Date: Tue, 27 Nov 2018 16:01:56 +0000

Los cibercriminales están teniendo éxito en evadir la detección en ordenadores Windows abusando de herramientas de administración legítimas que se encuentran frecuentemente en ese sistema operativo. Este es uno de los puntos fundamentales del Informe de Amenazas SophosLabs 2019, que explica cómo esta técnica pasó de ser poco utilizada a una de las más populares […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/JEBe1BPE9-I” height=”1″ width=”1″ alt=””/>

Security Sophos

December 10, 2018 admin

USPS ignoró un problema grave de seguridad durante más de un año

Credit to Author: Naked Security| Date: Mon, 26 Nov 2018 14:37:15 +0000

El servicio postal de EEUU (USPS) ignoró un problema de seguridad que afectaba a millones de sus usuarios registrados en la web por más de un año hasta que el investigador que lo descubrió se lo mostró al famoso bloguero Brian Krebs. Según Krebs, el investigador anónimo lo contactó hace una semana con motivo de […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/zSjaB-fL1no” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

December 10, 2018 admin

Innovative anti-phishing app comes to iPhones

Credit to Author: Jonny Evans| Date: Mon, 10 Dec 2018 08:01:00 -0800

We’re always told never to click on a link we receive in an email in case doing so takes us to some dodgy phishing site where our account details are violated, but what if our email app warned us before we clicked malicious links?

Can this app offer you protection?

MetaCert isn’t fully available yet, but it does seem to be a promising solution that provides email users in enterprise and consumer markets an additional line of defence against clicking on malicious links received in email messages.

The solution emerged from the developer’s earlier work building an API to help app developers add a layer of security to WebView.

To read this article in full, please click here

MalwareBytes Security

December 10, 2018 admin

Something else is phishy: How to detect phishing attempts on mobile

Credit to Author: Jovi Umawing| Date: Mon, 10 Dec 2018 15:00:56 +0000

Phishing is more problematic on smartphones than on desktops. Not only that, approaches to handling phishing attacks on mobile are quite different because their techniques are also different. So, how can users sniff out a mobile phish? Let us count the ways.

Categories:

Tags: ad-networking phishing homograph attacks HTTPS iOS Mobile phishing phishing apps Punycode smishing Social Phishing unicode url padding vishing

ComputerWorld Independent

December 10, 2018 admin

Forbidden names, revisited

Credit to Author: Sharky| Date: Mon, 10 Dec 2018 03:00:00 -0800

Flashback a few decades to the glory days of online service CompuServe, when anyone could get an account — but not everyone could use their real names, according to a pilot fish in the know.

“You logged in with your account number, but to join a forum — a chatroom focused on a specific topic — you had to give a real name,” fish says. “The name on your billing record was the default.

“Of course there were fraudsters who used an official-sounding name to phish people for personal info and credit card data. So users were not allowed to have words like ‘billing’ as any part of their in-forum real name. This could only be overridden by the forum sysop. I was one.

To read this article in full, please click here

Security Wired

December 8, 2018 admin