Security – Page 506 – Computer Security Articles

March 7, 2018 admin

Chinese, Russian hackers counting on Apache Struts vulnerabilities – a report by Quick Heal Security Labs

Credit to Author: Sameer Patil| Date: Wed, 07 Mar 2018 10:32:57 +0000

Apache Struts is an open-source CMS based on MVC framework for developing Java EE Web Applications. Apache Struts has been widely used by many Fortune 100 companies and government agencies over the years for developing web applications. But, websites built using a CMS constantly need to upgrade the CMS versions in their web application servers, because vulnerabilities…

Security Wired

March 6, 2018 admin

Pennsylvania Sues Uber Over Data Breach Disclosure

Credit to Author: Louise Matsakis| Date: Mon, 05 Mar 2018 22:52:00 +0000

Pennsylvania’s attorney general filed a lawsuit against the ride-hailing giant Monday for failing to disclose a massive hack for over a year—and may not be the last

Security Wired

March 6, 2018 admin

A 1.3-Tbs DDoS Hit GitHub, the Largest Yet Recorded

Credit to Author: Lily Hay Newman| Date: Thu, 01 Mar 2018 16:01:43 +0000

On Wednesday, a 1.3Tbps DDoS attack pummeled GitHub for 15-20 minutes. Here’s how it stayed online.

Kaspersky Security

March 6, 2018 admin

Bugs beware!

Credit to Author: Kaspersky Team| Date: Tue, 06 Mar 2018 17:41:30 +0000

Kaspersky Lab is expanding its successful bug bounty program to include rewards of up to $100,000.

Kaspersky Security

March 6, 2018 admin

GetContact: Find a contact or give your contacts away?

Credit to Author: Anna Markovskaya| Date: Tue, 06 Mar 2018 14:00:00 +0000

Harmless toy or a way to phish for personal data?

ComputerWorld Independent

March 6, 2018 admin

Feds move to secure mobile devices with machine learning, biometrics

Credit to Author: Lucas Mearian| Date: Tue, 06 Mar 2018 03:24:00 -0800

Amid the growing use of mobile devices for work by federal employees, U.S. defense and intelligence agencies are fast adopting biometrics and other alternative ways of computers, smartphones and tablets, according to a new report.

More than 90% of federal agency IT officials in an online survey said their organizations provide secure mobile access for work-issued devices, but less than 20% support workers’ personal devices to access most agency systems. Forty percent of those same officials voiced concern about securing personal devices, according to the online survey of federal government IT and cybersecurity officials.

To read this article in full, please click here

ComputerWorld Independent

March 5, 2018 admin

Get the February Microsoft patches applied, unless you’re using Win10 Fall Creators Update

Credit to Author: Woody Leonhard| Date: Mon, 05 Mar 2018 11:57:00 -0800

Granted, February’s patches from Microsoft weren’t as malevolent as January’s patches, but they still managed to knock out lots and lots of PCs. That said, if you can tiptoe around the problems, now is a good time to get the latest versions of the latest patches installed.

Problems with Win10 Fall Creators Update

The worst problem I see at this point involves clobbered USB connections on Win10 Fall Creators Update (version 1709) machines after installing the latest cumulative update, KB 4074588. To its credit, Microsoft has acknowledged the problem. But the only offered fix, a complex manual workaround, would drive a hardened MS-DOS junkie to drink.

To read this article in full, please click here

ComputerWorld Independent

March 5, 2018 admin

Scammers spoof Office 365, DocuSign and others | Salted Hash Ep 21

As phishing attacks evolve, hackers are using customization and targeted scams to ensnare users. Asaf Cidon, vice president, email security services at Barracuda, talks with host Steve Ragan about the ever-changing cat-and-mouse game of phishing.