Independent

ComputerWorldIndependent

NIST: In mobile authentication, think hardware, not software

Credit to Author: Evan Schuman| Date: Mon, 21 Aug 2017 03:00:00 -0700

Retail is in an awkward in-between stage when it comes to online security. In shifting their purchasing to online options, shoppers are using both desktop computers and mobile devices. Had they moved straight to mobile, authentication options would be numerous, including selfies and other biometric authentication such as fingerprints.

But the National Institute of Standards and Technology’s National Cybersecurity Center of Excellence (NCCoE) is trying to bolster security and authentication on desktops and mobile devices. It was spurred to tackle its Multifactor Authentication for e-Commerce project because of the realization that increased security in the physical world (with such steps as cards with EMV chips) means that thieves are going to start to focus more on card-not-present transactions.

To read this article in full or to leave a comment, please click here

Read More
IndependentSecuriteam

SSD Advisory – Polycom Memory Disclosure

Credit to Author: SSD / Maor Schwartz| Date: Sun, 20 Aug 2017 12:03:20 +0000

Vulnerability Summary The following advisory describe a Memory Disclosure vulnerability found in Polycom SoundPoint IP Telephone HTTPd server. Polycom is the leader in HD video conferencing, voice conferencing & telepresence enabling open, standards-based video collaboration. Increase the productivity of your phone calls and conference calls by making sure everyone can hear each other clearly and … Continue reading SSD Advisory – Polycom Memory Disclosure

Read More
IndependentKrebs

Carbon Emissions: Oversharing Bug Puts Security Vendor Back in Spotlight

Credit to Author: BrianKrebs| Date: Fri, 18 Aug 2017 17:38:57 +0000

Last week, security firm DirectDefense came under fire for over-hyping claims that Cb Response, a cybersecurity product sold by competitor Carbon Black, was leaking proprietary from customers who use it. Carbon Black responded that the bug identified by its competitor was a feature, and that customers were amply cautioned in advance about the potential privacy risks of using the feature. Now Carbon Black is warning that an internal review has revealed a wholly separate bug in Cb Response that could in fact result in certain customers unintentionally sharing sensitive files.

Read More