TikTok Bugs Could Have Allowed Account Takeovers
Credit to Author: Lily Hay Newman| Date: Wed, 08 Jan 2020 10:00:00 +0000
As the social media app continues to gain popularity, security researchers are taking a closer look under the hood.
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
Author: admin
Open source is not a cure-all
Credit to Author: Nikolay Pankov| Date: Wed, 08 Jan 2020 17:09:43 +0000
A Chaos Communication Congress speaker reflects on whether using open-source hardware can solve trust problems in hardware.
Read MoreTransatlantic Cable podcast, episode 124
Credit to Author: Jeffrey Esposito| Date: Wed, 08 Jan 2020 16:52:56 +0000
On this podcast, Dave and Jeff discuss the changes to Ring’s dashboard, the FBI seeking help unlocking an iPhone, Travelex hit with ransomware, and more.
Read MoreApple’s wants privacy laws to protect its users
Credit to Author: Jonny Evans| Date: Wed, 08 Jan 2020 06:54:00 -0800
Your iPhone (like most smartphones) knows when it is picked up, what you do with it, who you call, where you go, who you know – and a bunch more personal information, too.
Information is power
The snag with your device knowing all this information is that once the data is understood than that information can be shared or even used against you.
Jane Horvath, Apple’s senior director for global privacy, appeared at CES 2012 to discuss the company’s approach to smartphone security.
INTERPOL Collaboration Reduces Cryptojacking by 78%
Credit to Author: Trend Micro| Date: Wed, 08 Jan 2020 14:40:55 +0000
Cybercriminals are often seen as having the upper hand over the “white hat” community. After all, they’re anonymous, can launch attacks from virtually anywhere in the world, and usually have the element of surprise. But there’s one secret weapon the good guys have: Collaboration. That’s why Trend Micro has always prioritized its partnerships with law…
The post INTERPOL Collaboration Reduces Cryptojacking by 78% appeared first on .
Read More
Threat hunting in Azure Advanced Threat Protection (ATP)
Credit to Author: Todd VanderArk| Date: Tue, 07 Jan 2020 17:00:53 +0000
DART was called into an engagement where the adversary had a foothold within the on-premises network, which had been gained through compromising cloud credentials. Luckily, this customer had deployed Azure ATP prior to the incident and it had already normalized authentication and identity transactions within the customer network.
The post Threat hunting in Azure Advanced Threat Protection (ATP) appeared first on Microsoft Security.
Read MoreTricky Phish Angles for Persistence, Not Passwords
Credit to Author: BrianKrebs| Date: Tue, 07 Jan 2020 21:35:40 +0000
Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file storage service. Anyone who takes the bait will inadvertently forward a digital token to the attackers that gives them indefinite access to the victim’s email, files and contacts — even after the victim has changed their password.
Read More