Elon Musk’s Twitter Buy Exposes a Privacy Minefield
Credit to Author: Lily Hay Newman| Date: Tue, 26 Apr 2022 19:54:55 +0000
The social network’s user data and more will soon be at the whims of the world’s richest man. Who’s worried?
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
Security
Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn
Credit to Author: Katie McCafferty| Date: Tue, 26 Apr 2022 16:00:00 +0000
Microsoft has discovered several vulnerabilities, collectively referred to as Nimbuspwn, that could be chained together, allowing an attacker to elevate privileges to root on many Linux desktop endpoints. Leveraging Nimbuspwn as a vector for root access could allow attackers to achieve greater impact on vulnerable devices by deploying payloads and performing other malicious actions via arbitrary root code execution.
The post Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn appeared first on Microsoft Security Blog.
Read MoreJamf adds network and endpoint security tools for enterprise Macs
Credit to Author: Jonny Evans| Date: Tue, 26 Apr 2022 07:46:00 -0700
Jamf has announced a series of significant updates to Jamf Protect, introducing a unique set of technologies designed to make enterprise devices more secure while also identifying and responding to incoming endpoint threats. The company also introduced, Jamf Trust, which aims to make this kind of security simple to use. (The latter is also available for Android and Windows.)
What’s new in Jamf Protect?
The big news for Mac security, Jamf Protect, now offers a comprehensive endpoint and network security solution, supplementing its existing protections with new tools for:
The US Saw a Spike in Child Sexual Abuse URLs in 2021
Credit to Author: Matt Burgess| Date: Mon, 25 Apr 2022 16:08:53 +0000
CSAM hosting in the United States rose 64 percent last year, putting the country second in the world, a new report found.
Read MoreIt Was a Good Month for Fighting Cybercrime—Don’t Get Comfortable
Credit to Author: Lily Hay Newman| Date: Wed, 20 Apr 2022 11:00:00 +0000
Even as police and tech companies get better at shutting down illicit operations, cybercrime is worse than ever.
Read MoreA $3 Billion Silk Road Seizure Will Erase Ross Ulbricht’s Debt
Credit to Author: Andy Greenberg| Date: Fri, 22 Apr 2022 11:00:00 +0000
In a twist, a massive trove of stolen bitcoins will repay the dark web market creator’s $183 million restitution.
Read MoreWhen it comes to data, resist your inner packrat
Credit to Author: Paul Gillin| Date: Fri, 22 Apr 2022 04:30:00 -0700
Human beings are natural pack rats, as evidenced by the 2.3 billion square feet of self-storage space that’s in use in the U.S. Fear of getting rid of stuff even has a name: disposophobia.
Keeping every pair of shoes your kids have ever worn isn’t a problem for anyone except those with whom you share living space.
But the same rules don’t apply to data.
All industries have records retention guidelines spelled out in compliance rules. They are usually strictly enforced for regulated companies, and firms that run afoul of them can be punished.
In a remote-work world, a zero-trust revolution is necessary
Credit to Author: Mike Elgan| Date: Fri, 22 Apr 2022 03:00:00 -0700
Last summer, law enforcement officials contacted both Apple and Meta, demanding customer data in “emergency data requests.” The companies complied. Unfortunately, the “officials” turned out to be hackers affiliated with a cyber-gang called “Recursion Team.”
Roughly three years ago, the CEO of a UK-based energy company got a call from the CEO of the company’s German parent company instructing him to wire a quarter of a million dollars to a Hungarian “supplier.” He complied. Sadly, the German “CEO” was in fact a cybercriminal using deepfake audio technology to spoof the other man’s voice.