Security

ComputerWorldIndependent

Memory-Lane Monday: Even worse than you thought

Credit to Author: Sharky| Date: Mon, 15 Jul 2019 03:00:00 -0700

This government agency has cashiers’ stations for handling transactions with the public, and the treasurer’s office decides it needs new software to run those stations, according to a pilot fish in IT.

And there’s going to be one sign-on and password for all the stations, brag the higher-ups.

Bad idea, protest all the IT programmers and system administrators. For one thing, having a single user sign-on to the system will prevent tracking who is completing each transaction. They cite security, accountability and separation of duties, but their protests fall on deaf ears.

The vendor rep shows up one day, and he and the treasurer do a presentation for an audience that includes IT managers. The two sound excited, and a touch proud, when they tell everyone that the cashiers will sign on with the user ID “Cash.” They don’t share the top-secret password, though; that’s just for the cashiers to know.

To read this article in full, please click here

Read More
SecurityTrendMicro

This Week in Security News: Banking Malware and Phishing Campaigns

Credit to Author: Jon Clay (Global Threat Communications)| Date: Fri, 12 Jul 2019 15:17:02 +0000

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the banking malware Anubis that has been retooled for use in fresh attack waves. Also, read about a new phishing campaign that uses OneNote audio…

The post This Week in Security News: Banking Malware and Phishing Campaigns appeared first on .

Read More
ComputerWorldIndependent

Zoom fixes webcam flaw for Macs, but security concerns linger

Credit to Author: Matthew Finnegan| Date: Thu, 11 Jul 2019 11:51:00 -0700

Zoom released a patch this week to fix a security flaw in the Mac version of its desktop video chat app that could allow hackers to take control of a user’s webcam. 

The vulnerability was discovered by security researcher Jonathan Leitschuh, who published information about it in a blog post Monday. The flaw potentially affected 750,000 companies and approximately 4 million individuals using Zoom, Leitschuh said.

Zoom said it’s seen “no indication” any users were affected. But concerns about the flaw and how it works raised questions about whether other similar apps could be equally vulnerable.

To read this article in full, please click here

Read More