Security Tools – Page 3 – Computer Security Articles

Researchers Quietly Cracked Zeppelin Ransomware Keys

November 17, 2022 admin A Little Sunshine, cybersecurity & infrastructure security agency, Digital Ocean, FBI, joel lathrop, lance james, ransomware, Security Tools, unit 221b, zeppelin decryptor, zeppelin ransomware

Credit to Author: BrianKrebs| Date: Fri, 18 Nov 2022 02:30:26 +0000

Peter is an IT manager for a technology manufacturer that got hit with a Russian ransomware strain called “Zeppelin” in May 2020. He’d been on the job less than six months, and because of the way his predecessor architected things,… Read More »

Independent Krebs

LinkedIn Adds Verified Emails, Profile Creation Dates

November 4, 2022 admin A Little Sunshine, employment fraud, Security Tools

Credit to Author: BrianKrebs| Date: Fri, 04 Nov 2022 21:09:52 +0000

For whatever reason, the majority of the phony LinkedIn profiles reviewed by this author have involved young women with profile photos that appear to be generated by artificial intelligence (AI) tools. We’re seeing rapid advances in AI-based synthetic image generation technology and we’ve created a deep learning model to better catch profiles made with this technology. AI-based image generators can create an unlimited number of unique, high-quality profile photos that do not correspond to real people. Fake accounts sometimes use these convincing, AI-generated profile photos to make their fake LinkedIn profile appear more authentic.

Independent Krebs

Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday

September 13, 2022 admin asheer malhotra, Cisco Talos, dustin childs, ios 16, jon munshaw, kevin breen, lily hay newman, lockdown mode, microsoft patch tuesday september 2022, pangu lab, safety check, Satnam Narang, Security Tools, Time to Patch, Trend Micro, xinru chi

Credit to Author: BrianKrebs| Date: Wed, 14 Sep 2022 00:23:45 +0000

This month’s Patch Tuesday offers a little something for everyone, including security updates for a zero-day flaw in Microsoft Windows that is under active attack, and another Windows weakness experts say could be used to power a fast-spreading computer worm. Also, Apple has also quashed a pair of zero-day bugs affecting certain macOS and iOS users, and released iOS 16, which includes a nifty new privacy and security feature called “Lockdown Mode.” And Adobe axed 63 vulnerabilities in a range of products.

Independent Krebs

Transacting in Person with Strangers from the Internet

September 9, 2022 admin internet purchase & exchange location, safeexchangepoint.com, safetradeoptions.com, Security Tools

Credit to Author: BrianKrebs| Date: Fri, 09 Sep 2022 12:40:03 +0000

Communities like Craigslist, OfferUp, Facebook Marketplace and others are great for finding low- or no-cost stuff that one can pick up directly from a nearby seller, and for getting rid of useful things that don’t deserve to end up in a landfill. But when dealing with strangers from the Internet, there is always a risk that the person you’ve agreed to meet has other intentions.

Independent Krebs

How 1-Time Passcodes Became a Corporate Liability

August 30, 2022 admin 0ktapus, christopher knauer, CloudFlare, data breaches, digitalocean, doordash, Group-IB, klaviyo, mailchimp, Matthew Prince, Security Keys, Security Tools, signal, sitel group, T-Mobile, teleperformance, twilio, Twitter, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Tue, 30 Aug 2022 14:53:39 +0000

Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the world’s largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a flurry of breach disclosures from affected companies, which are all struggling to combat the same lingering security threat: The ability of scammers to interact directly with employees through their mobile devices.

Independent Krebs

The Security Pros and Cons of Using Email Aliases

August 10, 2022 admin A Little Sunshine, alex holden, allekabels, data breaches, email alias, HaveIBeenPwned.com, Hold Security, rtl nieuws, Security Tools, Troy Hunt

Credit to Author: BrianKrebs| Date: Wed, 10 Aug 2022 15:10:59 +0000

One way to tame your email inbox is to get in the habit of using unique email aliases when signing up for new accounts online. Adding a “+” character after the username portion of your email address — followed by a notation specific to the site you’re signing up at — lets you create an infinite number of unique email addresses tied to the same account. Aliases can help users detect breaches and fight spam. But not all websites allow aliases, and they can complicate account recovery. Here’s a look at the pros and cons of adopting a unique alias for each website.

Independent Krebs

Microsoft Patch Tuesday, July 2022 Edition

July 12, 2022 admin cve-2022-22022, cve-2022-22029, cve-2022-22038, cve-2022-22039, cve-2022-22041, cve-2022-22047, cve-2022-30206, cve-2022-30221, cve-2022-30226, Dan Goodin, Greg Wiseman, immersive labs, kevin breen, microsoft patch tuesday july 2022, Rapid7, Security Tools, sergiu gatlan, Tenable, Time to Patch

Credit to Author: BrianKrebs| Date: Wed, 13 Jul 2022 01:02:49 +0000

Microsoft today released updates to fix at least 86 security vulnerabilities in its Windows operating systems and other software, including a weakness in all supported versions of Windows that Microsoft warns is actively being exploited. The software giant also has made a controversial decision to put the brakes on a plan to block macros in Office documents downloaded from the Internet.

Independent Krebs

Your Phone May Soon Replace Many of Your Passwords

May 7, 2022 admin A Little Sunshine, apple, FIDO Alliance, google, johannes ullrich, microsoft, Nicholas Weaver, sampath srinivas, sans, Security Tools, spycloud, steve bellovin, World Wide Web Consortium

Credit to Author: BrianKrebs| Date: Sat, 07 May 2022 13:31:17 +0000

Apple, Google and Microsoft announced this week they will soon support an approach to authentication that avoids passwords altogether, and instead requires users to merely unlock their smartphones to sign in to websites or online services. Experts say the changes should help defeat many types of phishing attacks and ease the overall password burden on Internet users, but caution that a true passwordless future may still be years away for most websites.