RSS Reader for Computer Security Articles
Credit to Author: Lily Hay Newman| Date: Thu, 11 Jan 2018 22:36:54 +0000
After years of lingering questions about Skype’s commitment to protecting user data, it will soon offer end-to-end encryption to its 300 million monthly users.
Read More
Credit to Author: Louise Matsakis| Date: Thu, 11 Jan 2018 21:19:31 +0000
The House of Representatives Thursday strengthened spying powers authorized under Section 702 of the 2008 FISA Amendments Act.
Read More
Credit to Author: Woody Leonhard| Date: Fri, 12 Jan 2018 05:18:00 -0800
The headlong race to cover the Meltdown/Spectre debacle has claimed another victim. In a surprising move, Intel has raised a red flag about some of its firmware patches. What should you do? Wait.
Yesterday, Intel executive VP Navin Shenoy posted on the company blog:
We have received reports from a few customers of higher system reboots after applying firmware updates. Specifically, these systems are running Intel Broadwell and Haswell CPUs for both client and data center. We are working quickly with these customers to understand, diagnose and address this reboot issue. If this requires a revised firmware update from Intel, we will distribute that update through the normal channels.
Credit to Author: Peter Sayer| Date: Fri, 12 Jan 2018 08:24:00 -0800
Credit to Author: Cara West-Wainwright| Date: Fri, 12 Jan 2018 15:09:44 +0000
Last week, three interesting vulnerabilities popped up on the news and security feeds. Researchers disclosed CVE-2017-5753 and CVE-2017-5715, collectively known as Spectre, and CVE-2017-5754, known as Meltdown. These vulnerabilities take advantage of “speculative execution” of instructions performed by many modern microprocessors and can potentially allow an unprivileged attacker to read privileged memory allocated to the…
Credit to Author: Louise Matsakis| Date: Wed, 10 Jan 2018 23:30:53 +0000
A state-linked hacking group is once again trying to discredit antidoping investigators.
Read More
Credit to Author: Woody Leonhard| Date: Thu, 11 Jan 2018 09:38:00 -0800
As we rappel down the Patch Tuesday rabbit hole this month, Microsoft just announced that it’s going to start pushing its January Windows security patches onto AMD processors again. But it neglects to mention which ones. Per a late-night change to KB 4073707:
Microsoft has resumed updating the majority of AMD devices with the Windows operating system security update to help protect against the chipset vulnerabilities known as Spectre and Meltdown.
Credit to Author: William “Bill” Malik (CISA VP Infrastructure Strategies)| Date: Thu, 11 Jan 2018 14:01:44 +0000
Securing the Internet of Things is difficult. One reason is the Internet of things consists of three different groups of technology. Each group has radically different architectural constraints. Securing each group requires a distinct approach. IoT 0.9 The primitive group contains all legacy Operational Technology (OT) and Industrial Control Systems (ICS) that use some form…