Hackers Can Break Into an iPhone Just by Sending a Text
Credit to Author: Lily Hay Newman| Date: Wed, 07 Aug 2019 21:07:26 +0000
You don’t even have to click anything.
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
Security
How AT&T Insiders Were Bribed to ‘Unlock’ Millions of Phones
Credit to Author: Louise Matsakis| Date: Wed, 07 Aug 2019 20:51:25 +0000
One cybersecurity threat that’s proven difficult for wireless carriers to combat? Their own employees.
Read MoreWhy XDR Is A Big Deal, and Is Different from SIEM and Platforms
Credit to Author: Greg Young (Vice President for Cybersecurity)| Date: Thu, 08 Aug 2019 14:30:36 +0000
In Jon Clay’s post, he does a great job of explaining the evolution from EDR to XDR. In short, he explained that Endpoint Detection and Response (EDR) is great, but that having sources of information beyond endpoint is better. The ‘X’ in XDR is essentially ‘many’ or whatever we can add to provide a broader,…
The post Why XDR Is A Big Deal, and Is Different from SIEM and Platforms appeared first on .
Read MoreMany VPN apps on Apple’s App store can’t be trusted, researcher warns
Credit to Author: Jonny Evans| Date: Thu, 08 Aug 2019 05:50:00 -0700
I’m told Apple is at last looking into the privacy and security of free VPN apps made available across its platforms, following a report from researcher, Simon Migliano.
Who owns your VPN service?
The researcher has flagged up several concerns that really should be recognized by anyone choosing a VPN service from both the Apple and Google App Stores:
- Ownership: Migliano claims that almost 60 percent of the most popular VPN apps are actually owned (sometimes opaquely) by Chinese companies.
- Privacy: The researcher also found that as many as 77% of these VPN apps may have what he calls “serious privacy flaws”,including no privacy policy at all, generic policies with no mention of VPN or no detailed logging policy.
- Data protection: Migliano claims Apple is not enforcing its third-party data-sharing ban against VPN apps, with 80 percent of the top free VPN apps “in breach of the rules”, he said. Many are sharing data with third parties, he claims.
That last allegation is particularly concerning.
Almost half of tested free Android antivirus apps fail. That might prove very useful to IT.
Credit to Author: Evan Schuman| Date: Thu, 08 Aug 2019 03:00:00 -0700
One of the problems with enterprise mobile BYOD efforts is that corporate apps — and lots of corporate data, including sensitive intellectual property — must coexist on the same device with whatever employees choose to download on the personal side. That’s far from ideal, but even worse is if employees choose to download a second antivirus program. Unlike doubling up on most apps (two VPNs, two word processors, two email programs, etc.), antivirus programs often conflict and fight each other, generating false positives and other bad results.
Unlike two deadbolts on a door, doubling up on security not only doesn’t work with antivirus, it can actually sharply weaken security. This all assumes that both antivirus programs are professional, effective and well-intentioned. But that’s often not the case. There are quite a few free antivirus programs out there, and they are disproportionately the ones employees opt to download. After all, if the company has already installed a high-level antivirus on the phone, why would an employee pay to install a second? But a free antivirus program is much more tempting.
Microsoft relaxes telemetry rule for PCs managed with Windows Update for Business
Credit to Author: Gregg Keizer| Date: Wed, 07 Aug 2019 13:12:00 -0700
Microsoft has quietly relaxed a rule that prevented privacy-first organizations from managing the Windows Update for Business (WUfB) service using group policies.
With Windows 10 1903, aka “Windows 10 May 2019 Update,” which debuted in late May, organizations no longer are required to set the “diagnostic data level” for their devices to “Basic” or higher.
That diagnostic data level is a multi-step categorization of what Microsoft pulls from Windows devices and sends to its own servers. Also dubbed “telemetry,” the data harvesting is used by Microsoft for a range of tasks, notably deciding when a specific PC receives a feature upgrade.
A Boeing Code Leak Exposes Security Flaws Deep in a 787’s Guts
Credit to Author: Andy Greenberg| Date: Wed, 07 Aug 2019 19:29:03 +0000
One researcher’s discovery suggests troubling oversights in Boeing’s cybersecurity.
Read More13-Year-Old Encryption Bugs Still Haunt Apps and IoT
Credit to Author: Lily Hay Newman| Date: Wed, 07 Aug 2019 18:42:24 +0000
RSA encryption has been around for decades. Unfortunately, so have bad implementations that leave it less secure.
Read More