Computer Security Articles – Page 2368 – RSS Reader for Computer Security Articles

Credit to Author: Agam Shah| Date: Fri, 07 Apr 2017 11:08:00 -0700

After 40 critical vulnerabilities on Samsung’s Tizen — used in smart TVs and smartwatches — were exposed this week by Israeli researcher Amihai Neiderman, the company is scrambling to patch them.

But Samsung still doesn’t know many of the bugs that need to be patched. It’s also unclear when Tizen devices will get security patches, or if older Tizen devices will even get OS updates to squash the bugs.

Beyond Samsung’s smart TVs, Tizen is also used in wearables like Gear S3 and handsets like Samsung’s Z-series phones, which have sold well in India. Samsung wants to put Tizen in a range of appliances and IoT devices. Tizen also has been forked to be used in Raspberry Pi.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

April 7, 2017 admin

U.S. lawmakers demand to know how many residents are under surveillance

Credit to Author: Grant Gross| Date: Fri, 07 Apr 2017 10:33:00 -0700

Two powerful U.S. lawmakers are pushing President Donald Trump’s administration to tell them how many of the country’s residents are under surveillance by the National Security Agency.

In a letter sent Friday, Representatives Bob Goodlatte and John Conyers Jr. asked the Office of the Director of National Intelligence (ODNI) to provide an estimate of the number of U.S. residents whose communications are swept up in NSA surveillance of foreign targets. Goodlatte, a Republican, is chairman of the House Judiciary Committee, and Conyers is the committee’s senior Democrat.

Committee members have been seeking an estimate of the surveillance numbers from the ODNI for a year now. Other lawmakers have been asking for the surveillance numbers since 2011, but ODNI has failed to provide them.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

April 7, 2017 admin

What C-level leaders need to know about cybersecurity

Credit to Author: Matt Hamblen| Date: Fri, 07 Apr 2017 10:04:00 -0700

Despite the scale and potential harm from cyber-attacks, there’s wide recognition that corporate leaders, especially boards of directors, aren’t taking the necessary actions to defend their companies against such attacks. It’s not just a problem of finding the right cyber-defense tools and services, but also one of management awareness and security acumen at the highest level, namely corporate boards.

“Our country and its businesses and government agencies of all sizes are under attack from a variety of aggressive adversaries and we are generally unprepared to manage and fend off these threats,” said Gartner analyst Avivah Litan, a longtime cybersecurity consultant to many organizations.

To read this article in full or to leave a comment, please click here

Independent Krebs

April 7, 2017 admin

Gamestop.com Investigating Possible Breach

Credit to Author: BrianKrebs| Date: Fri, 07 Apr 2017 16:57:11 +0000

Video game giant GameStop Corp. [NSYE: GME] says it is investigating reports that hackers may have siphoned credit card and customer data from its website — gamestop.com. The company acknowledged the investigation after being contacted by KrebsOnSecurity.

Fortinet Security

April 7, 2017 admin

In-Depth Look at New Variant of MONSOON APT Backdoor, Part 2

Credit to Author: Jasper Manuel and Artem Semenchenko | Date: Wed, 05 Apr 2017 08:58:18 -0700

In part 1 of FortiGuard Labs’ analysis of a new variant of the BADNEWS backdoor, which is actively being used in the MONSOON APT campaign, we did a deep technical analysis of what this backdoor of capable of and how the bad guys control it using the command and control server. In this part of the analysis, we will try to discover who might be behind the distribution of these files.

Fortinet Security

April 7, 2017 admin

In-Depth Look at New Variant of MONSOON APT Backdoor, Part 1

Credit to Author: Jasper Manuel and Artem Semenchenko| Date: Wed, 05 Apr 2017 08:58:03 -0700

Three weeks ago, FortiGuard Labs, along with @_ddoxer (Roland de la Paz), using VirusTotal Intelligence queries, spotted a document with the politically themed file name (Senate_panel.doc). This malicious RTF file takes advantage of the vulnerability CVE-2015-1641.

Kaspersky Security

April 7, 2017 admin

Protected: Risking data heartache: it hurts to lose the data you love

Credit to Author: Marvin the Robot| Date: Fri, 07 Apr 2017 16:25:43 +0000

There is no excerpt because this is a protected post.

Fortinet Security

April 7, 2017 admin

Q&A: It’s Time To Automate Security. Part 2

Credit to Author: John Welton| Date: Fri, 07 Apr 2017 07:37:56 -0700

What follows is Part 2 of a two-part interview with Fortinet’s James Cabe on the journey to security automation. Recognizing that most organizations are not prepared to make the jump to automation today, the following presents a realistic timeline to get from an intelligent network to truly automated, intent-based security, and a discussion of what that intent-based security will look like. What is the timeline for getting to automation and intent-based security? When we talk about the evolution of security, we talk about what it should…