A Critical Device Hack, China’s Social Credit, and More News
Credit to Author: Alex Baker-Whitcomb| Date: Mon, 29 Jul 2019 22:25:39 +0000
Catch up on the most important news from today in two minutes or less.
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
Security
Microsoft Patch Alert: Welcome to the Upside Down
Credit to Author: Woody Leonhard| Date: Tue, 30 Jul 2019 09:33:00 -0700
This month, Microsoft Patch Land looks like a stranger Stranger Things Upside Down, where Security-only patches carry loads of telemetry, Visual Studio patches appear for the wrong versions… and we still can’t figure out how to keep the Win10 1903 upgrade demogorgon from swallowing established drivers.
As we end the month, we’ve seen the second “optional” monthly cumulative updates for all Win10 versions — the 1903 patch was released, pulled, then re-released — and fixes for Visual Studio’s transgressions. There’s a kludge for getting the Win10 1903 upgrade to work. And BlueKeep still looms like a gorging Mind Flayer.
Win7 Security-only patch brings telemetry
Those of you who have been dodging Windows 7 telemetry by using the monthly Security-only patches — a process I described as “Group B” three years ago — have reached the end of the road. The July 2019 Win7 “Security-only” patch, KB4507456, includes a full array of telemetry/snooping, uh, enhancements.
How the West Got China’s Social Credit System Wrong
Credit to Author: Louise Matsakis| Date: Mon, 29 Jul 2019 19:25:07 +0000
It occupies a spot next to ‘Black Mirror’ and Big Brother in popular imagination, but China’s social credit project is far more complicated than a single, all-powerful numerical score.
Read MoreMobile Menace Monday: Dark Android Q rises
Credit to Author: Gleb Malygin| Date: Mon, 29 Jul 2019 17:55:12 +0000
 | |
| The Android Q operating system is being developed with privacy and security in mind. We take a look at both, examining new features intended for giving users better control of their devices and data. Categories: Tags: Androidandroid Q betaAndroidQapp permissionsappsBetadeveloper’s cornerGoogleprivacysecurity |
The post Mobile Menace Monday: Dark Android Q rises appeared first on Malwarebytes Labs.
Read MoreA VxWorks Operating System Bug Exposes 200 Million Critical Devices
Credit to Author: Lily Hay Newman| Date: Mon, 29 Jul 2019 15:04:26 +0000
VxWorks is designed as a secure, “real-time” operating system for continuously functioning devices, like medical equipment, elevator controllers, or satellite modems.
Read MoreTrump’s Cyber Czar Is Back—and He Wants to Make Hackers Suffer
Credit to Author: Andy Greenberg| Date: Mon, 29 Jul 2019 11:00:00 +0000
Former White House top cybersecurity official Tom Bossert reveals his new startup, Trinity. Its focus: “active threat inference.”
Read MoreApple’s shock Siri surveillance demands a swift response
Credit to Author: Jonny Evans| Date: Mon, 29 Jul 2019 07:51:00 -0700
News that Siri records snippets of our conversations with the voice assistant isn’t new, but claims that those short recordings are listened to by human agents is– particularly in light of the company’s big push on privacy.
These are bad optics
I’m a passionate believer in the importance of privacy.
It isn’t only important in terms of preserving hard-won liberties and protecting public discourse, it’s also of growing importance across every part of human existence, for every school, medical facility or enterprise. History shows that the absence of privacy has a corrosive effect on society, turning family members against each other and dampening innovation.
Will XDR Improve Security?
Credit to Author: Jon Clay (Global Threat Communications)| Date: Mon, 29 Jul 2019 14:06:36 +0000
Cybercriminals and malicious hackers have been shifting their tactics, techniques, and procedures (TTPs) to improve their ability to infiltrate an organization and stay under the radar of security professionals and solutions. Moving to more targeted attack methods appears to be a mainstay among threat actors, which requires organizations to improve their visibility into the entire…
The post Will XDR Improve Security? appeared first on .
Read More