vulnerabilities – Computer Security Articles

The Microsoft Office threat landscape, and the technologies that help us catch related zero-day exploits, were the focus of this talk at the SAS 2019 conference.

MalwareBytes Security

Who is managing the security of medical management apps?

April 10, 2019 admin 101, Business, Data Privacy, health apps, healthcare, HIPPA, medical apps, medical management apps, vulnerabilities

Credit to Author: Kacy Zurkus| Date: Wed, 10 Apr 2019 15:00:00 +0000

Because medical records are such a lucrative data set, attackers often target the healthcare industry, seeking out and eventually finding the weakest link in the supply chain. That’s why it’s important for stakeholders to consider the broader implications of cybersecurity weaknesses in medical management apps. But who should be held responsible?

Categories:

101
Business

Tags: Data privacy health apps healthcare HIPPA medical apps medical management apps vulnerabilities

Kaspersky Security

Potential problems with third-party Web plugins

April 3, 2019 admin CMS, internet, news, plugins, Supply chain, vulnerabilities, web

Credit to Author: Sergey Golubev| Date: Wed, 03 Apr 2019 20:08:26 +0000

Do you use plugins on your website? Make sure they are updated regularly.

Kaspersky Security

MSPs as a threat vector

March 27, 2019 admin Business, MSP, ransomware, SMB, vulnerabilities

Credit to Author: Nikolay Pankov| Date: Wed, 27 Mar 2019 20:42:52 +0000

Attackers display active interest in MSPs, exploiting vulnerabilities to infect their clients with cryptomalware.

Kaspersky Security

RSAC 2019: Seeking the perfect patching strategy

March 26, 2019 admin Business, news, patches, RSA conference, RSA2019, RSAC, SMB, Updates, vulnerabilities

Credit to Author: Alex Drozhzhin| Date: Tue, 26 Mar 2019 12:37:56 +0000

Researchers at RSAC 2019 reported on the current vulnerability landscape and built a model that helps with effective patching strategy.

MalwareBytes Security

A week in security (March 18 – 24)

March 25, 2019 admin bandersnatch, bec. cdc spam, Business Email Compromise, center for disease control and prevention, cybersecurity, Education, Epic Games, Facebook, formjacking, gandcrab, google photos, iPhone, kiddle, learn4life, malicious app, NETFLIX, Network Security, Password reuse, phishing, privacy, security fatigue, Security world, steam, vulnerabilities, Week in security

Credit to Author: Malwarebytes Labs| Date: Mon, 25 Mar 2019 15:46:38 +0000

A roundup of cybersecurity news from March 18–24, including Facebook’s privacy pivot, password reuse, new research on hospital phishing attacks, infected iPhone apps, and more.

Categories:

Tags: bandersnatch bec. cdc spam Business Email Compromise center for disease control and prevention cybersecurity education epic games facebook formjacking gandcrab google photos iPhone kiddle learn4life malicious app netflix network security Password reuse phishing privacy security fatigue steam vulnerabilities

(Read more…)

The post A week in security (March 18 – 24) appeared first on Malwarebytes Labs.

Kaspersky Security

Hacking smart car alarm systems

March 18, 2019 admin cars, Internet of Things, IoT, Mobile Apps, smart alarm, Threats, vehicles, vulnerabilities

Credit to Author: Leonid Grustniy| Date: Mon, 18 Mar 2019 15:57:49 +0000

Systems designed to guard against car theft can be used to track, immobilize, and steal vehicles.

Kaspersky Security

CVE-2019-0797: Zero-day exploits keep coming

March 14, 2019 admin Business, CVE, Endpoint, exploit, SMB, vulnerabilities, windows

Credit to Author: Pavel Shoshin| Date: Thu, 14 Mar 2019 13:35:39 +0000

Our proactive technologies detected yet another Windows exploit that was used in APT attacks.

Kaspersky Security

Protecting workstations: How not to overblock

March 14, 2019 admin anomaly control, Business, Endpoint, machine learning, SMB, vulnerabilities

Credit to Author: Kaspersky Team| Date: Thu, 14 Mar 2019 11:00:59 +0000

To reduce the attack surface you can block many vulnerable features of software. The question is, how can you do that but not interfere with business-processes?

← Previous