Computer Security Articles – Page 1905 – RSS Reader for Computer Security Articles

Credit to Author: William “Bill” Malik (CISA VP Infrastructure Strategies)| Date: Thu, 04 Jan 2018 13:22:58 +0000

Two days ago, Graz University of Technology published a paper https://spectreattack.com/ describing a pair of attacks on common microprocessors. The underlying vulnerability affects Intel, AMD, and ARM processors. All contemporary microprocessors pre-execute instructions. In other words, the vulnerability bypasses address space isolation. Address space isolation has been a foundation for processor integrity since the 1980s….

QuickHeal Security

January 4, 2018 admin

What do we need to know about the CPU vulnerabilities Meltdown and Spectre?

Credit to Author: Quick Heal Security Labs| Date: Thu, 04 Jan 2018 13:02:09 +0000

What exactly is a vulnerability? A security vulnerability (also known as a security hole) is a security flaw detected in a product that may leave it open to hackers and malware. Using such vulnerabilities, attackers can exploit the affected system/product for their profit in various ways. What is an exploit? Exploits…

Kaspersky Security

January 4, 2018 admin

Two severe vulnerabilities found in Intel’s hardware

Credit to Author: Jornt van der Wiel| Date: Thu, 04 Jan 2018 10:35:01 +0000

Meltdown and Spectre: the two vulnerabilities that threaten every device on Intel, AMD or ARM processors

QuickHeal Security

January 3, 2018 admin

Android banking Trojan targets more than 232 apps including apps offered by Indian banks

Credit to Author: Bajrang Mane| Date: Wed, 03 Jan 2018 07:27:59 +0000

Quick Heal Security Labs detected an Android Banking Trojan that targets more than 232 banking apps including those offered by Indian banks. The malware is known as Android.banker.A9480. Like most other Android banking malware, even this one is designed for stealing login credentials, hijacking SMSs, uploading contact lists and SMSs…

Fortinet Security

January 3, 2018 admin

Prevalent Threats Targeting Cuckoo Sandbox Detection and Our Mitigation

Credit to Author: Floser Bacurio and Wayne Low| Date: Wed, 03 Jan 2018 17:45:59 +0000

In this blog post, we will discuss the history of sandbox detection. We will then unveil the malware families that KTIS has observed from spear-phishing emails that attempt to bypass the user-mode API hook in order to evade sandbox detection. And finally, we will share the mitigation method we use to harden the Cuckoo sandbox against this bypass technique.

Independent Securiteam

January 3, 2018 admin

SSD Advisory – Livebox Fibra (Orange Router) Multiple Vulnerabilities

Credit to Author: SSD / Maor Schwartz| Date: Wed, 03 Jan 2018 06:33:51 +0000

Vulnerabilities Summary The following advisory describes four (4) vulnerabilities found in Livebox Fibra router version AR_LBFIBRA_sp-00.03.04.112S. It is possible to chain the vulnerabilities into remote code execution. The “Livebox Fibra” router is “manufactured by Arcadyan for Orange and Jazztel in Spain” The vulnerabilities found in Arcadyan routers are: Unauthenticated configuration information leak Hard-coded credentials Memory … Continue reading SSD Advisory – Livebox Fibra (Orange Router) Multiple Vulnerabilities

ScadaICS Schneider

January 3, 2018 admin

Modernizing Government Technology Act (MGT) Will Help Fund DCOI

Credit to Author: Jeff Chabot| Date: Wed, 03 Jan 2018 16:15:33 +0000

Thanks to the efforts of Rep. Will Hurd, R-Texas, who introduced the bill, and co-sponsor Sen. Jerry Moran, R-Kan., the Modernizing Government Technology Act (MGT) was signed by President Trump… Read more »

The post Modernizing Government Technology Act (MGT) Will Help Fund DCOI appeared first on Schneider Electric Blog.

ScadaICS Schneider

January 3, 2018 admin

The Call for Sustainable Development

Credit to Author: Guest Blogger| Date: Wed, 03 Jan 2018 04:19:59 +0000

In the ever-evolving 21st century, where technical innovation is inevitable, countries are investing billions to foster solutions for persisting problems. The quest is further accelerated by the race among the… Read more »

The post The Call for Sustainable Development appeared first on Schneider Electric Blog.