QuickHealSecurity

PDF files with embedded docm files now deliver Jaff Ransomware

Credit to Author: Threat Research Labs| Date: Tue, 23 May 2017 11:30:45 +0000

Adding to the havoc created by the recent outbreak of the WannaCry Ransomware is a new entry to the list of encrypting ransomware called ‘Jaff’. Reportedly, this variant has been created by the authors of the Locky ransomware. The source of this ransomware is the Necurs botnet which is using…

The post PDF files with embedded docm files now deliver Jaff Ransomware appeared first on Quick Heal Technologies Security Blog | Latest computer security news, tips, and advice.

Read More
ComputerWorldIndependent

4 ways blockchain is the new business collaboration tool

Credit to Author: Lucas Mearian| Date: Tue, 23 May 2017 03:01:00 -0700

While blockchain may have cut its teeth on the cryptocurrency Bitcoin, the distributed electronic ledger technology is quickly making inroads across a variety of industries.

That’s mainly because of its innate security and its potential for improving systems  operations all while reducing costs and creating new revenue streams.

David Schatsky, a managing director at consultancy Deloitte LLP, believes blockchain’s diversity speaks to its versatility in addressing business needs, but “the impact that blockchain will have on businesses in various industries is not yet fully understood.”

To read this article in full or to leave a comment, please click here

Read More
ComputerWorldIndependent

Connecting with work from the road? Here's how to stay safe

Credit to Author: Ryan Francis| Date: Tue, 23 May 2017 03:00:00 -0700

Every company has workaholics who can’t leave their duties behind when heading out on vacation. They’re kind of worker who, if the hotel doesn’t have Wi-Fi, will rush to the closest coffee shop or eatery to stay connected, check email and jump onto a video conference call.

Those are the kinds of insecure wireless networks that make IT security managers nervous. 

And for good reason. Public Wi-Fi networks at cafes and coffee shops are open to, and can be accessed by, anyone, according to mobile security vendor iPass. They require neither security keys and passphrases nor firewall protection. That leaves  employees vulnerable to man-in-the-middle attacks.

To read this article in full or to leave a comment, please click here

Read More
ComputerWorldIndependent

5 ways to stop future global malware attacks

Credit to Author: Preston Gralla| Date: Mon, 22 May 2017 14:06:00 -0700

The global WannaCry ransomware attack, which crippled hospitals, government organizations, companies and individuals around the world, didn’t have to happen. It was no grand technological feat perpetrated by genius hacker masterminds. Instead, it took advantage of the lazy, patchwork way organizations handle security and the seamy roles that the National Security Agency (NSA) and big tech companies play in undermining security in the internet age.

And that, in fact, is a piece of good news. Because it means that stopping the next global malware attack needn’t be impossible. Here are five steps that can do it.

To read this article in full or to leave a comment, please click here

Read More
IndependentKrebs

Should SaaS Companies Publish Customers Lists?

Credit to Author: BrianKrebs| Date: Mon, 22 May 2017 20:53:32 +0000

A few weeks back, HR and financial management firm Workday.com sent a security advisory to customers warning that crooks were sending targeted malware phishing attacks at customers. At the same time, Workday is publishing on its site a list of more than 800 companies that use its services, making it relatively simple for attackers to chose their […]

Read More
IndependentKrebs

Private Eye Allegedly Used Leaky Goverment Tool in Bid to Find Tax Data on Trump

Credit to Author: BrianKrebs| Date: Mon, 22 May 2017 20:11:27 +0000

In March 2017, KrebsOnSecurity warned that thieves who perpetrate tax refund fraud with the U.S. Internal Revenue Service were leveraging a widely-used online student loan tool to find critical data on consumers that allows them to claim huge refunds with the IRS in someone else’s name. This week, it emerged that a Louisiana-based private investigator is being charged with using the same online tool to glean tax data on then-presidential candidate Donald J. Trump. A story today at Diverseeducation.com points to court filings in the U.S. District Court for the Middle District of Louisiana, in which local private eye Jordan Hamlett is accused by federal prosecutors of abusing an automated tool at the U.S. Department of Education website that is designed to make it easier for families to complete the Education Department’s Free Application for Federal Student Aid (FAFSA) — a lengthy form that serves as the starting point for students seeking federal financial assistance to pay for college or career school.

Read More
MalwareBytesSecurity

A week in security (May 15 – May 21)

Credit to Author: Malwarebytes Labs| Date: Mon, 22 May 2017 13:59:59 +0000

A compilation of notable security news and blog posts from the 15th of May to the 21st. We covered WannaCry, Privacy Awareness week, and what to do when you suspect stolen personal data.

Categories:

Tags:

(Read more…)

The post A week in security (May 15 – May 21) appeared first on Malwarebytes Labs.

Read More