8 steps to regaining control over shadow IT
Credit to Author: Ryan Francis| Date: Thu, 23 Feb 2017 12:17:00 -0800
Breaking and protecting devops tool chains
Ken Johnson, CTO of nVisium, and Chris Gates, Senior Security Engineer at Uber talk to CSO Online's Steve Ragan about working with devops tool chains.
Bruce Schneier and the call for "public service technologists"
Bruce Schneier, CTO of IBM Resilient on the increasing importance of technologist's presence in education and policy-making.
Police arrest man suspected of building million-router German botnet
Credit to Author: Peter Sayer| Date: Thu, 23 Feb 2017 09:06:00 -0800
Last year, someone turned a German internet service provider into a million-router botnet. German police think they will soon have the culprit.
The U.K.’s National Crime Agency (NCA) made an arrest on Wednesday in connection with the November 2016 hack on Deutsche Telekom. The agency said it arrested a 29-year-old man at Luton airport, acting on a European Arrest Warrant issued by the public prosecutor’s office in Cologne, Germany.
The German Federal Criminal Police Office (Bundeskriminalamt, or BKA), which led the investigation, said it had worked with British law enforcement officials to arrest the man, a Briton.
To read this article in full or to leave a comment, please click here
Mac ransomware on piracy sites
Credit to Author: Thomas Reed| Date: Thu, 23 Feb 2017 16:00:31 +0000
 | |
| February has been a relatively busy month in the world of Mac malware, and now it has gotten busier with the appearance of the second piece of ransomware ever to affect macOS. Categories: Tags: Adobe Premier ProAppleFindzipmacmacOSmalwareMicrosoft Officeransomware |
Did you order those iTunes movies? Nope, it’s just phishing for Canadian Apple users
Credit to Author: Lilia Elena Gonzalez Medina| Date: Thu, 23 Feb 2017 08:37:16 -0800
Over the weekend, we encountered an interesting variation of a phishing email targeting Apple users. The email contained an alleged receipt for five movies purchased from the iTunes Store that was so detailed that the user who received it, and who knows better, still almost fell for the scam. Figure 1. Phishing Apple email Similar cases were reported in 2015 by users in the UK and Australia, except in those cases the fake receipt contained songs and books, respectively. Last year, similar emails targeting users in the US were also reported,…
Read MoreEleven-year-old root Linux kernel flaw found and patched
Credit to Author: Lucian Constantin| Date: Thu, 23 Feb 2017 07:49:00 -0800
Linux system administrators should be on the watch for kernel updates because they fix a local privilege escalation flaw that could lead to a full system compromise.
The vulnerability, tracked as CVE-2017-6074, is over 11 years old and was likely introduced in 2005 when the Linux kernel gained support for the Datagram Congestion Control Protocol (DCCP). The problem was discovered last week and was patched by the kernel developers on Friday.
The flaw can be exploited locally by using heap spraying techniques to execute arbitrary code inside the kernel, the most privileged part of the OS. Andrey Konovalov, the Google researcher who found the vulnerability, plans to publish an exploit for it a few days.
To read this article in full or to leave a comment, please click here
How do I secure my social media profile?
Credit to Author: William Tsing| Date: Thu, 23 Feb 2017 14:00:07 +0000
 | |
| Quitting social media entirely can be unrealistic, or at least seriously unfun. So it’s important to take a moment to check out account settings before you start, to make absolutely sure you’re okay with the service’s default settings. Categories: Tags: how toInstagramLinkedInphishphishingprivacysocial mediaspamtwitter |