ComputerWorldIndependent

Restricting Firefox to TLS version 1.2 makes browsing safer

Credit to Author: Michael Horowitz| Date: Thu, 13 Jul 2017 19:43:00 -0700

Although its common to think of a secure website as the opposite of an insecure one, the choice is not, in fact, binary. For a website to be truly secure, there are about a dozen or so ducks that all need to be lined up in a row.

Seeing HTTPS does not mean that the security is well done, secure websites exist in many shades of gray. Since web browsers don’t offer a dozen visual indicators, many sites that are not particularly secure appear, to all but the most techie nerds, to be secure nonetheless. Browser vendors have dumbed things down for non-techies.

Last September, I took Apple to task for not having all their ducks in a row, writing that some of their security oversights allowed Apple websites to leak passwords.

To read this article in full or to leave a comment, please click here

Read More
IndependentSecuriteam

SSD Advisory – OrientDB Code Execution

Credit to Author: SSD / Maor Schwartz| Date: Thu, 13 Jul 2017 06:49:26 +0000

Vulnerability Summary The following advisory reports a vulnerability in OrientDB which allows users of the product to cause it to execute code. OrientDB is a Distributed Graph Database engine with the flexibility of a Document Database all in one product. The first and best scalable, high-performance, operational NoSQL database. Credit An independent security researcher, Francis … Continue reading SSD Advisory – OrientDB Code Execution

Read More
IndependentKrebs

Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’

Credit to Author: BrianKrebs| Date: Thu, 13 Jul 2017 15:28:08 +0000

A greater number of ATM skimming incidents now involve so-called “insert skimmers,” wafer-thin fraud devices made to fit snugly and invisibly inside a cash machine’s card acceptance slot. New evidence suggests that at least some of these insert skimmers — which record card data and store it on a tiny embedded flash drive are — equipped with technology allowing it to transmit stolen card data wirelessly via infrared, the same technology built into a television remote control.

Read More
ScadaICSSchneider

Facing Pressure to Build Fast and Cut Costs, Data Center Owners Turn to Prefab and DCIM

Credit to Author: Greg Jones| Date: Thu, 13 Jul 2017 16:12:14 +0000

After attending the Datacloud Europe event in Monaco last month, my #1 take-away is that many of the technologies that have been promoted in the industry have become standard practice… Read more »

The post Facing Pressure to Build Fast and Cut Costs, Data Center Owners Turn to Prefab and DCIM appeared first on Schneider Electric Blog.

Read More
SecuritySophos

Sophos is a Visionary in the Enterprise Firewall Magic Quadrant

Credit to Author: Chris McCormack| Date: Thu, 13 Jul 2017 13:51:16 +0000

We’re excited to announce that Gartner has named Sophos a Visionary in the Enterprise Firewall Magic Quadrant for 2017<img alt=”” border=”0″ src=”https://pixel.wp.com/b.gif?host=news.sophos.com&#038;blog=834173&#038;post=40665&#038;subd=sophos&#038;ref=&#038;feed=1″ width=”1″ height=”1″ /><img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/NS-5mrNPC2o” height=”1″ width=”1″ alt=””/>

Read More
FortinetSecurity

Byline: Know Your Enemy: Understanding Threat Actors

Credit to Author: Anthony Giandomenico| Date: Thu, 13 Jul 2017 12:58:00 +0000

This is Part II of a series. Read Part I here. Sun Tzu wrote in his famous book, The Art of War, “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle.” In my previous article, “Are you Aware of Your Cyber Situation,” I discussed how important it is for you to understand your business as it relates to your digital…

Read More