Independent – Page 155 – Computer Security Articles

Credit to Author: Ken Mingis| Date: Wed, 09 Jan 2019 03:00:00 -0800

Ok, so maybe blockchain isn’t ready yet to become the biggest new technology since the internet.

But the distributed ledger technology clearly made strides in 2018, when it was embraced by companies from Walmart to shipping bigwig Maersk to top tech venders like IBM, SAP, Oracle and Microsoft who see potential in blockchain-as-a-service. (Walmart’s vice president in charge of food safety, Frank Yiannas, compared his embrace of blockchain to a “religious conversaion.”)

To read this article in full, please click here

Independent Krebs

January 8, 2019 admin

Dirt-Cheap, Legit, Windows Software: Pick Two

Credit to Author: BrianKrebs| Date: Tue, 08 Jan 2019 15:00:33 +0000

Buying heavily discounted, popular software from second-hand sources online has always been something of an iffy security proposition. But purchasing steeply discounted licenses for cloud-based subscription products like recent versions of Microsoft Office can be an extremely risky transaction, mainly because you may not have full control over who has access to your data.

Independent Securiteam

January 7, 2019 admin

SSD Advisory – SME Server Unauthenticated XSS To Privileged Remote Code Execution

Credit to Author: SSD / Ori Nimron| Date: Mon, 07 Jan 2019 13:21:59 +0000

Vulnerabilities Summary The following advisory describes a vulnerability in SME Server 9.2, which lets an unauthenticated attackers perform XSS attack that leads to remote code execution as root. SME Server is a Linux distribution for small and medium enterprises by Koozali foundation. CVE CVE-2018-18072 Credit An independent security researcher, Karn Ganeshen has reported this vulnerability … Continue reading SSD Advisory – SME Server Unauthenticated XSS To Privileged Remote Code Execution

(Insider Story)

Independent Securiteam

January 6, 2019 admin

SSD Advisory – Apache OpenOffice Virtual Table Corruption

Credit to Author: SSD / Ori Nimron| Date: Sun, 06 Jan 2019 07:40:33 +0000

Vulnerabilities Summary The following advisory discusses a vulnerability found in Apache OpenOffice. The vulnerability lays inside the part that responsible for parsing documents, which contains has an overflow that let attackers take control over program execution. Vendor Response “We obtained a CVE number for the vulnerability you reported: CVE-2018-11790. The release will need to undergo … Continue reading SSD Advisory – Apache OpenOffice Virtual Table Corruption

ComputerWorld Independent

January 4, 2019 admin

Apple wants to stop you from using dangerous USB-C devices

Credit to Author: Jonny Evans| Date: Fri, 04 Jan 2019 07:16:00 -0800

Apple wants to make it harder for its customers to use cheap USB-C cables — and it’s for your own good.

The risks of USB-C cables

Cables are complicated, and that’s why friends don’t let friends connect cut-price or otherwise unverified USB-C cables to their systems — and soon, you won’t be able to.

Apple has warned its users to avoid using low-quality equipment for years. It was only in 2016 that it was revealed that hundreds of chargers at that time sold on Amazon and advertised as being made by Apple were in fact dangerous fakes.

To read this article in full, please click here

ComputerWorld Independent

January 4, 2019 admin

Apple wants to stop you using dangerous USB-C devices

Credit to Author: Jonny Evans| Date: Fri, 04 Jan 2019 07:16:00 -0800

Apple wants to make it harder for its customers to use cheap USB-C cables – and it’s for your own good.

These are the risks of USB-C cables

Cables are complicated and that’s why friends don’t let friends connect cut-price or otherwise unverified USB-C cables to their systems –and soon, you won’t be able to.

To read this article in full, please click here