Independent – Page 376 – Computer Security Articles

Credit to Author: Lucas Mearian| Date: Thu, 15 Jun 2017 03:01:00 -0700

Researchers have created a device using off-the-shelf components that can sniff out controversial cell phone surveillance devices, known as IMSI-catchers or StingRays, used by federal and state law enforcement as well as hackers.

The International Mobile Subscriber Identity-catchers have not only been used to locate mobile devices but also to sometimes eavesdrop on users, send spam or upload malware, according to University of Washington (UW) security researchers.

“The threats remain the same when looking at enterprises: tracking and, under certain circumstances, eavesdropping are possible through this attack,” said Dionisio Zumerle, a Gartner research director for Mobile Security. “The attack requires technical expertise and equipment that was once hard to find; today it is easier and that is the main source of concern.”

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

June 13, 2017 admin

Microsoft resurrects Windows XP patches for second month straight

Credit to Author: Gregg Keizer| Date: Tue, 13 Jun 2017 15:22:00 -0700

Microsoft today followed May’s unprecedented release of security updates for expired operating systems, including Windows XP, by issuing another dozen patches for the aged OS.

The Redmond, Wash. company cited fears of possible attacks by “nation-states,” a label for government-sponsored hackers or foreign intelligence services, for the updates’ release. “In reviewing the updates for this month, some vulnerabilities were identified that pose elevated risk of cyberattacks by government organizations, sometimes referred to as nation-state actors, or other copycat organizations,” said Adrianne Hall, general manager, issues and crisis management, for Microsoft.

To read this article in full or to leave a comment, please click here

Independent Securiteam

June 13, 2017 admin

SSD Advisory – Iceni Infix Multiple Crashes

Credit to Author: SSD / Maor Schwartz| Date: Tue, 13 Jun 2017 11:18:28 +0000

Crashes Summary An independent security researcher has reported 36 different crashes in Iceni Infix. We decided to publish 1 sample out of the 36 crashes – if you want to get the remaining 35 crashes, please contact us via email ssd [at] beyondsecurity (dot) com. “Infix PDF Editor and Infix PDF Editor Pro is popular … Continue reading SSD Advisory – Iceni Infix Multiple Crashes

Independent Securiteam

June 13, 2017 admin

Security conferences – Survival guide 2017 Q4

Credit to Author: SSD / Maor Schwartz| Date: Tue, 13 Jun 2017 09:50:23 +0000

The security conferences “Survival guide” for 2017 Q4 is here! We have gathered the following information for you for each conference: Dates: Place: Link to official conference website: Ticket price: Lectures: Workshops: So let’s get started: Security conferences – Survival guide part 4 BRUCON Dates: 5 – 6 October 2017 Place: Aula Academica of the … Continue reading Security conferences – Survival guide 2017 Q4

Independent Krebs

June 13, 2017 admin

Microsoft, Adobe Ship Critical Fixes

Credit to Author: BrianKrebs| Date: Tue, 13 Jun 2017 19:47:31 +0000

Microsoft today released security updates to fix almost a hundred security flaws in its various Windows operating systems and related software. One bug is so serious that Microsoft is issuing patches for it on Windows XP and other operating systems the company no longer officially supports. Separately, Adobe has pushed critical updates for its Flash and Shockwave players, two programs most users would probably be better off without.

ComputerWorld Independent

June 12, 2017 admin

What Microsoft owes customers, and answers to other 'WannaCry' questions

Credit to Author: Gregg Keizer| Date: Mon, 12 Jun 2017 12:57:00 -0700

A month ago, Microsoft took the unprecedented step of issuing security patches for Windows XP, an edition supposedly interred in Support Cemetery more than three years ago.

The decision to help aged personal computers running Windows XP — as well as also-retired Windows 8 and Windows Server 2003 — was intended to slow the spread of the “WannaCry” ransomware, which encrypted files on hundreds of thousands of PCs worldwide. The cyber criminals than tried to extort payments from the machines’ owners in return for unlocking the files.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

June 12, 2017 admin

For real Windows 10 privacy, you need the China Government Edition

Credit to Author: Steven J. Vaughan-Nichols| Date: Mon, 12 Jun 2017 11:19:00 -0700

Because Windows doesn’t make much money for Microsoft these days, the company decided, beginning in Windows 10, that snooping on users à la Google and Facebook could be profitable. But one country said enough was enough. It would stand up for its users’ “privacy.” That country? The People’s Republic of China.

Cough. Didn’t see that one coming, did you?

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

June 12, 2017 admin

IDG Contributor Network: Can Dell change endpoint security?

Credit to Author: Jack Gold| Date: Mon, 12 Jun 2017 09:15:00 -0700

Endpoint security is changing dramatically. It’s becoming clear that simply doing anti-malware the way it’s always been done with an add-on software program that scans for threats through signature comparisons as files are opened is not enough. The two major traditional AV companies, Symantec and McAfee, who championed this approach for many years, now have competition from next generation players like Cylance, who use predictive machine learning and AI approaches to evaluating and discovering new malware not easily detected through signature-only approaches. And processor suppliers like Intel, ARM, Qualcomm, etc. are getting into the act, designing-in trusted segments of their chips intended to become impenetrable vaults for protected execution of critical parts of the OS and apps. With newer sophisticated malware attacks, security must move beyond an outdated add-on only approach and into a multilayered approach that includes hardware, OS, layered software and network awareness.

To read this article in full or to leave a comment, please click here