❌ Tricky DoS Attack Crashes Mozilla Firefox ❌
📖 Read
via "The first stop for security news | Threatpost ".
There are currently no mitigations for the Firefox attack, a researcher told Threatpost.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Tricky DoS Attack Crashes Mozilla Firefox
There are currently no mitigations for the Firefox attack, a researcher told Threatpost.
🔐 Cisco: We've killed another critical hard-coded root password bug, patch urgently 🔐
📖 Read
via "Security on TechRepublic".
This time a 9.8/10-severity hardcoded password has been found in Cisco's video surveillance software.📖 Read
via "Security on TechRepublic".
TechRepublic
Cisco: We've killed another critical hard-coded root password bug, patch urgently
This time a 9.8/10-severity hardcoded password has been found in Cisco's video surveillance software.
🕴 Hacking Back: Simply a Bad Idea 🕴
📖 Read
via "Dark Reading: ".
While the concept may sound appealing, it's rife with drawbacks and dangers.📖 Read
via "Dark Reading: ".
Darkreading
Hacking Back: Simply a Bad Idea
While the concept may sound appealing, it's rife with drawbacks and dangers.
🕴 'Scan4Yyou' Operator Gets 14-Year Sentence 🕴
📖 Read
via "Dark Reading: ".
A citizen of the former USSR is sentenced to 168 months for running Scan4you, an online counter antivirus service.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
❌ Assessing the Human Element in Cyber Risk Analysis ❌
📖 Read
via "The first stop for security news | Threatpost ".
The human factor doesn't have to be an intangible when assessing cyber risks within a company.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Assessing the Human Element in Cyber Risk Analysis
The human factor doesn’t have to be an intangible when assessing cyber risks within a company.
❌ Google’s Forced Sign-in to Chrome Raises Privacy Red Flags ❌
📖 Read
via "The first stop for security news | Threatpost ".
Chrome users are now automatically signed into the browser if they're signed into any other Google service, such as Gmail.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Google’s Forced Sign-in to Chrome Raises Privacy Red Flags
Chrome users are now automatically signed into the browser if they’re signed into any other Google service, such as Gmail.
❌ Adwind RAT Scurries By AV Software With New DDE Variant ❌
📖 Read
via "The first stop for security news | Threatpost ".
The spam campaign mostly targets victims in Turkey and Germany.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Adwind RAT Scurries By AV Software With New DDE Variant
The spam campaign mostly targets victims in Turkey and Germany.
🕴 6 Dark Web Pricing Trends 🕴
📖 Read
via "Dark Reading: ".
For cybercriminals, the Dark Web grows more profitable every day.📖 Read
via "Dark Reading: ".
Dark Reading
6 Dark Web Pricing Trends
For cybercriminals, the Dark Web grows more profitable every day.
🕴 Microsoft Deletes Passwords for Azure Active Directory Applications 🕴
📖 Read
via "Dark Reading: ".
At Ignite 2018, security took center stage as Microsoft rolled out new security services and promised an end to passwords for online apps.📖 Read
via "Dark Reading: ".
Darkreading
Microsoft Deletes Passwords for Azure Active Directory Applications
At Ignite 2018, security took center stage as Microsoft rolled out new security services and promised an end to passwords for online apps.
ATENTION‼ New - CVE-2015-8298
📖 Read
via "National Vulnerability Database".
Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the (1) loginpassword, (2) loginusername, (3) zusatzlicher, or (4) groupid parameter to index.htm, or the (5) rxtec cookie to index.htm.📖 Read
via "National Vulnerability Database".
❌ Cybercriminals Target Kodi Media Player for Malware Distribution ❌
📖 Read
via "The first stop for security news | Threatpost ".
A recent cryptomining campaign shows criminal ingenuity.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Cybercriminals Target Kodi Media Player for Malware Distribution
A recent cryptomining campaign shows criminal ingenuity.
🕴 In Quiet Change, Google Now Automatically Logging Users Into Chrome 🕴
📖 Read
via "Dark Reading: ".
The change is a complete departure from Google's previous practice of keeping sign-in for Chrome separate from sign-ins to any Google service.📖 Read
via "Dark Reading: ".
Dark Reading
In Quiet Change, Google Now Automatically Logging Users Into Chrome
The change is a complete departure from Google's previous practice of keeping sign-in for Chrome separate from sign-ins to any Google service.
🕴 Fault-Tolerant Method Use for Security Purposes in New Framework 🕴
📖 Read
via "Dark Reading: ".
A young company has a new patent for using fault tolerance techniques to protect against malware infection in applications.📖 Read
via "Dark Reading: ".
Dark Reading
Fault-Tolerant Method Use for Security Purposes in New Framework
A young company has a new patent for using fault tolerance techniques to protect against malware infection in applications.
🔐 PCI compliance slipping for first time in 6 years, but IT remains on top 🔐
📖 Read
via "Security on TechRepublic".
According to Verizon data, only 52.5% of companies maintained full compliance with payment card industry standards in 2017.📖 Read
via "Security on TechRepublic".
TechRepublic
PCI compliance slipping for first time in 6 years, but IT remains on top
According to Verizon data, only 52.5% of companies maintained full compliance with payment card industry standards in 2017.
❔ Have You Received A Call To Replace Your Stripe-Only Card With EMV Chip Card Yet? ❔
📖 Read
via "Quick Heal Blog | Latest computer security news, tips, and advice".
Estimated reading time: 2 minutesIn case you have received a reminder from your bank asking you to replace your stripe-only card with an EMV chip card and you have no idea why this change is being implemented, then you are at the right place. As per recent instructions received from the Reserve Bank of India (RBI), it has become mandatory for banks to replace the existing stripe-only debit and credit cards with the EMV (Europay, Mastercard, Visa) chip cards latest by 31 December 2018. This holds true for all domestic and international cards even if their validity extends beyond 31 Dec 2018. In case you are worried about the extra charges for replacing your existing cards, then be rest assured that the banks are replacing the cards absolutely FREE of cost!! So, then why replace your stripe-only cards with the EMV chip cards? Enhanced Security Level The EMV cards or the Chip & PIN cards as they are usually called, use a higher level of storage technology and high standards of data encryption as compared to the magnetic stripe-only cards. For those of you who frequently use their stripe-only debit/credit cards for making transactions at stores, restaurants, etc., would relate to the fact that these cards require a simple swipe at the point of sale (PoS) device in order to complete a transaction. A chip-based debit/credit card on the other hand, requires you to enter the PIN in order to complete the transaction. This provides your card with an extra level of security for safeguarding your digital transaction. These chip-based cards are also effective for mitigating fraudulent PoS transactions, by mandating a second level of authentication in the form of PIN before completing any PoS transaction. While the EMV chip cards also have a magnetic stripe, what makes them secure is the fact that sensitive customer data is encrypted on the chip. This gives fraudsters a hard time to access critical customer information. Prevent Card Cloning Given the increased incidences of card cloning on a global level, the initiative to shift to only chip-based cards is the need of the hour. Card Cloning usually stems from magnetic stripe-only cards that contain static information which can easily be accessed, once the card is used at some ATM that already has a cloning device installed. An EMV chip-based card on the other hand contains dynamic information, which makes it difficult to clone information. The big question though remains to be, “Will this eliminate the risk of card skimming and cloning completely?” Well, the frank answer to this question is that while the scenario of physical card cloning can be eliminated to a great extent with the EMV Chip & PIN cards, the same cannot be held true when it comes to online transactions, as the risk of fraud will continue to exist. So, here are few simple tips to help you protect your cards from cloning or skimming when you swipe at the PoS: As far as possible, try using the EMV chip-based cards instead of magnetic stripe cards for making transactions at PoS since, the EMV cards are safer to use. Take care that the PoS machine is not connected to a cloning or skimming device or any other device that may seem suspicious to you. If possible, try to feel underneath the pin pad for an additional slot to insert a card or chip, especially if you are swiping at a new store. Keep a check on your account balance for fraudulent charges. In case of any suspicious activity, immediately report to your bank requesting them to block your card. The post Have You Received A Call To Replace Your Stripe-Only Card With EMV Chip Card Yet? appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.📖 Read
via "Quick Heal Blog | Latest computer security news, tips, and advice".
Quick Heal Blog | Latest computer security news, tips, and advice
Have You Received A Call To Replace Your Stripe-Only Card With EMV Chip Card Yet?
In case you have received a reminder from your bank asking you to replace your stripe-only card with an EMV chip card and you have no idea why this change is being implemented, then you are at the right place. As per recent instructions received from the…
⚠ Wendy’s faces class action over collecting staff fingerprints ⚠
📖 Read
via "Naked Security".
Two former Wendy’s employees want to know what the company does with employee fingerprints collected by biometric clocks.📖 Read
via "Naked Security".
Naked Security
Wendy’s faces class action over collecting staff fingerprints
Two former Wendy’s employees want to know what the company does with employee fingerprints collected by biometric clocks.
⚠ Woman hijacked CCTV cameras days before Trump inauguration ⚠
📖 Read
via "Naked Security".
The ransomware attack on DC's outdoor surveillance cameras came just a few days before the 2017 inauguration of President Trump.📖 Read
via "Naked Security".
Naked Security
Woman hijacked CCTV cameras days before Trump inauguration
The ransomware attack on DC’s outdoor surveillance cameras came just a few days before the 2017 inauguration of President Trump.
❔ E-commerce transactions: Tips to stay safe when shopping online ❔
📖 Read
via "Quick Heal Blog | Latest computer security news, tips, and advice".
Estimated reading time: 2 minutesToday’s new-generation customer has all the luxuries. At the click of a button (or a touch, on a mobile phone), they can buy literally anything they want. The arrival of online marketplaces like Flipkart, Amazon and thousands of other similar websites means that the basic premise of going out of the house to buy something has become so old-fashioned. From fridges to laptops to basic household items, these e-commerce websites can deliver the entire world to you, often as early as within a day. Of course, though, nothing comes for free. E-commerce websites certainly provide convenience but they bring their own dangers. If you are a customer, you should certainly not panic and completely stop shopping online. But it would be a good idea to practice some caution and keep the below tips in mind: Check the credibility of the website Many people have tried to take advantage of the craze of e-commerce. But not all these websites might be the most credible. Sometimes, hackers might set up an e-commerce website in the plan of getting the personal, financial information from tricked users. You should always check the website you are buying from. Before you place an order, check the website’s “About Me” page, search for it on the web or on social media. Its credibility should be ascertained before placing an order. Beware of obvious fakes We are all aware of the leaders of e-commerce, whether it is Amazon or Alibaba or Ebay or from an Indian perspective, platforms like Flipkart, Snapdeal, Jabong, etc. What unscrupulous hackers do is set up obvious fakes, which is also a form of phishing. These websites may be designed exactly like the original website with very minute changes (say, Amazin instead of Amazon). Unless a customer isn’t looking carefully, they may be tricked into believing it is the original website and inadvertently give crucial personal information. Take care of your financial information E-commerce websites require you to part with crucial financial information like your debit & credit card numbers along with personal details like home address and telephone numbers. Be very careful when providing these. It is a good practice to not allow these websites to store your personal data as in the advent of a hacking attack, criminals might get their hands on these details. Be wary of public WiFi It is a good idea not to indulge in shopping when you using a public WiFi network, say in a coffee shop or an airport. Public WiFis are notoriously unsafe and may not have inbuilt security guards. That means any personal information, including your credit card number, is vulnerable to be accessed by hackers who may have hacked into the network. Always do your due diligence Ultimately, it is the responsibility of the shopper to ensure that they are conducting their transactions in a safe environment. While websites also have some responsibility, it is your hard-earned money and hence it is important that you give some thought about that order you are making to ensure you are not tricked. Check the URL and see if it is “https” and not “https” as that means an insecure connection. Keep a track of your orders and ensure that you’ve received what you’ve ordered. Don’t be afraid to get in touch with a vendor, if required for any query. The post E-commerce transactions: Tips to stay safe when shopping online appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.📖 Read
via "Quick Heal Blog | Latest computer security news, tips, and advice".
Quick Heal Blog
E-commerce transactions: Tips to stay safe when shopping online
Today’s new-generation customer has all the luxuries. At the click of a button (or a touch, on a...
❔ Home network security: Do you really need it? ❔
📖 Read
via "Quick Heal Blog | Latest computer security news, tips, and advice".
Estimated reading time: 3 minutesWe may not realize it but it’s not just our phones that are smart. In an age of Internet of Things (IoT), there is a lot of hype and hoopla about the connected homes – a concept of houses which will be completely smart and connected. But what we often seem to forget that we already live in smart homes to a large extent. Think about it. Most homes nowadays have devices that are connected to each other and the Internet. Your phones, laptops, desktops are all connected to a WiFi router and maybe, even your smart TV too. All of these devices are interacting with each other to the extent that you can cast things from your phone to the TV if they are on the same network. The risks of a home network While all of this sounds exciting, it is also important to realize that it brings its own risks. Enterprises aren’t the only ones who have to worry about cybersecurity, with the rise of such home networks, it’s extremely important that even homeowners care as much about securing their networks as they do about its physical security. It’s important to be aware of the risks home networks can possess. Because individuals spent a majority of their time at home, they use the home networks to do a staggering amount of things online. E-commerce, paying bills, entertainment, social networking – you name it and it’s done on the network. That means there is a treasure trove of data out there which makes it a very appealing proposition for a cyber criminal. If anyone gets access to the network, they will able to use this data for a variety of crimes. They can use it to conduct identity theft, use your financial credentials to steal your money or just cause havoc by bringing down your home network. In fact, they can even learn your personal habits and use them against you, say to plan a theft at your house when you are away. Ensure that your home network security is much more secure by following a few simple tips: Wi-Fi passwords should be stronger – This is a no-brainer but again the most important. Most people changer their home WiFi passwords from the default one but keep it something simple which they can easily remember. Worse, they write it down somewhere to remember which can be disastrous if it falls in the wrong hands. Keep strong passwords for your WiFi and ensure you don’t share them with anyone. Router passwords should also be strong – This is not a no-brainer because this is something a lot of people don’t remember to do. Sure, keeping a strong WiFi password is good but even routers have their own login and password. Most of the times, people keep it as default as “admin” and “password”, something akin to inviting a cybercriminal with open hands to your door. Take the extra effort and put in a strong password for your router. Keep all devices on the network secure – The router may be secure but what about the devices that are using it to access the Internet. This includes your smartphones and laptops. Malicious software can easily affect one of these devices and then affect the entire network. Keep all your devices secure and updated. Use a firewall for your network – A firewall is an important step in keeping your network secure. Use one and keep it on the highest setting so that you are updated at any attempts at infiltration. Have a cybersecurity solution on all your devices – This goes without saying but in this age of cyberattacks, all your devices need to have a strong cybersecurity solution. Seqrite offers a range of solutions for laptops and mobiles for this very purpose. The post Home network security: Do you really need it? appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.📖 Read
via "Quick Heal Blog | Latest computer security news, tips, and advice".
Quick Heal Blog | Latest computer security news, tips, and advice
Home network security: Do you really need it?
We may not realize it but it’s not just our phones that are smart. In an age of Internet of Things (IoT), there is a lot of hype and hoopla about the connected homes – a concept of houses which will be completely smart and connected. But what we often...
⚠ AdGuard adblocker resets passwords after credential-stuffing attack ⚠
📖 Read
via "Naked Security".
AdGuard has taken the decision to reset all user accounts after suffering a credential-stuffing and brute-force password attack.📖 Read
via "Naked Security".
Naked Security
AdGuard adblocker resets passwords after credential-stuffing attack
AdGuard has taken the decision to reset all user accounts after suffering a credential-stuffing and brute-force password attack.
⚠ Users fret over Chrome auto-login change ⚠
📖 Read
via "Naked Security".
Users were complaining this week after discovering they'd been logged in to Google’s Chrome browser automatically, after logging into a Google website.📖 Read
via "Naked Security".
Naked Security
Users fret over Chrome auto-login change
Users were complaining this week after discovering they’d been logged in to Google’s Chrome browser automatically, after logging into a Google website.