Independent – Page 446 – Computer Security Articles

Vulnerability Summary The following advisory describes an Local Privilege Escalation vulnerability in NCurses, version 5.9. Credit An independent security researcher Dawid Golunski (https://legalhackers.com/) has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor Responses NCurses has released a patch to address the vulnerability. Thomas Dickey has also added the following statement “I don’t … Continue reading SSD Advisory – NCurses 5.9 Local Privilege Escalation →

Independent Securiteam

January 30, 2017 admin

SSD Advisory – IBM WebSphere Portal Cross-Site Scripting (XSS)

Vulnerabilities Summary The following advisory describes a Cross-Site Scripting (XSS) vulnerability found in WebSphere Portal version 8.0.0.1. IBM WebSphere Portal products provide enterprise web portals that help companies deliver a highly-personalized, social experience for their customers. WebSphere Portal products give users a single point of access to the applications, services, information and social connections they … Continue reading SSD Advisory – IBM WebSphere Portal Cross-Site Scripting (XSS) →

ComputerWorld Independent

January 30, 2017 admin

Police lost 8 years of evidence in ransomware attack

Police in Cockrell Hill, a community in southwest Dallas, admitted to losing digital evidence from as far back as 2009 after the department’s server was compromised with ransomware.

Cockrell Hill Police Department Chief Stephen Barlag said, “As a result, all bodycam video, some photos, some in-car video, and some police department surveillance video were lost.”

Immediately, the police blamed Russian hackers, but Barlag later told WFAA that experts told him it “more likely originated in Ukraine.” The official press release, however, states, “It is unknown for certain where the virus originated from.”

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

January 30, 2017 admin

Study: 62% of security pros don’t know where their sensitive data is

Ask organizations today about the value of data and you’re likely to hear it measured in terms of competitive advantage, customer experience and revenue generation. As Dante Disparte and Daniel Wagner put it in a December 2016 HBR article, data is “becoming a centerpiece of corporate value creation.”

To read this article in full or to leave a comment, please click here

(Insider Story)

ComputerWorld Independent

January 30, 2017 admin

How to remove malware

If you've found malware on your system, what should you do about it? This video walks you through the steps of getting the bad stuff off your PC.

ComputerWorld Independent

January 30, 2017 admin

Ransomware disrupts Washington DC's CCTV system

Around 70 percent of the cameras hooked up to the police’s closed-circuit TV (CCTV) system in Washington were reportedly unable to record footage for several days before President Donald Trump’s inauguration due to a ransomware attack.

The attack affected 123 of the 187 network video recorders that form the city’s CCTV system, The Washington Post reported Saturday. Each of these devices is used to store video footage captured by up to four cameras installed in public spaces.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

January 30, 2017 admin

Questions to ask your recovery vendor before you buy

At ShmooCon 2017, CSO's Steve Ragan chats with Marc Langer, president of Recovery Point, about the questions that many companies often miss when choosing a data recovery system or process.