RSS Reader for Computer Security Articles
FortiGuard Labs recently discovered a social engineering email lure with a message delivered to a company in Ukraine. In part I of our blog, we will analyze the phishing email and provide an analysis of the embedded malware which contains an executable for GuLoader.
Credit to Author: Julia Glazova| Date: Wed, 25 May 2022 12:00:55 +0000
Third-party apps for Tesla, Nissan, Renault and other connected cars require access to an account with the manufacturer — that’s a security risk.
Read MoreCredit to Author: Pieter Arntz| Date: Wed, 25 May 2022 11:00:05 +0000
Google has issued an update for the Chrome browser to patch 32 security issues . One of the vulnerabilities is rated as critical, so install that update as soon as you can.
The post Update now! Multiple vulnerabilities patched in Google Chrome appeared first on Malwarebytes Labs.
Read More
Credit to Author: Enoch Root| Date: Mon, 23 May 2022 14:45:50 +0000
Apple, Google and Microsoft have announced support for a FIDO standard that seeks to replace passwords with passkeys.
Read MoreCredit to Author: Christopher Boyd| Date: Tue, 24 May 2022 14:44:47 +0000
We take a look at services claiming to offer verification of Instagram accounts, along with the many ways it can go wrong.
The post Instagram verification services: What are the dangers? appeared first on Malwarebytes Labs.
Read More
Credit to Author: Evan Schuman| Date: Thu, 26 May 2022 03:02:00 -0700
In a move that could have a major impact on enterprise penetration testing and other cybersecurity tactics, the US Department of Justice last Thursday reversed one of its own policies by telling prosecutors not to prosecute anyone involved in “good-faith security research.”
This is one of those common-sense decisions that makes me far more interested in exploring the original DOJ policy (set in 2014, during the Obama era).
The underlying law at issue is the Computer Fraud and Abuse Act, which made it illegal to access a computer without proper authorization. It was passed in 1986 and has been updated several times since then.
Credit to Author: Pieter Arntz| Date: Tue, 24 May 2022 13:00:55 +0000
US car producer General Motors says its Rewards platform was the victim of a credential stuffing attack last month.
The post General Motors suffers credential stuffing attack appeared first on Malwarebytes Labs.
Read More
Credit to Author: Lucas Mearian| Date: Thu, 26 May 2022 03:00:00 -0700
Pay for some IT professionals is failing to keep up with inflation, according to a salary survey by IT employment consultancy Janco Associates for calendar year 2021. But preliminary data indicates pay for tech workers could soon change drastically with job market in IT tight, and many companies eyeing major tech projects in the year ahead.
With inflation in the US running at about 8% over the past year, salary increases — even for IT execs — have failed to keep pace.
The mean compensation for all IT pros last year rose only 2.05%, with the median salary at $100,022 for those at large enterprises and at $95,681 for IT workers at mid-sized firms, according to Janco.