Security

During Apple’s two-and-a-half hour WWDC keynote, we were treated to lots of great moments. Craig Federighi’s quip about how bloated iTunes has become. The introduction of iPadOS. And of course, the new Mac Pro. But the theme of the show was a familiar one: privacy. For the past several years, …

The National Security Agency is warning users that a recent vulnerability affecting Windows 7 and Windows XP systems is potentially “wormable,” meaning that it could be exploited and weaponized by malware. Microsoft issued an alert in mid-May about a Remote Code Execution vulnerability, known as CVE-2019-0708, that can affect  Windows 7, Windows …

The age of automated authentication through biometric scanning is almost here. Yet even in this time of Apple’s Face ID, Windows 10’s Hello, and the up-and-coming FIDO2 specification, passwords are still the main way we log in to our various accounts. That’s why two-factor authentication (2FA) is an important secondary step to …

If you’ve never used the Firefox web browser before, Mozilla has promised you a soft landing: New users will not be tracked by default. On Tuesday, Mozilla promised that new users of the current Firefox 67.0.1 and subsequent versions will have Enhanced Tracking Protection turned on by default, blocking all …

Source

Data breaches happen daily, in too many places at once to keep count. But what constitutes a huge breach versus a small one? CSO compiled a list of 18 of the biggest or most significant breaches of the 21st century. This list is based not necessarily on the number of …

Companies that collect data on citizens in European Union (EU) countriesl need to comply with strict new rules around protecting customer data. The General Data Protection Regulation (GDPR) sets a new standard for consumer rights regarding their data, but companies will be challenged as they put systems and processes in place to …

Beware the signs of a PC plagued by malware: slower-than-usual performance, a sudden spate of pop-ups, and other anomalous issues. Yes, out-of-the-ordinary behavior is sometimes the result of hardware conflicts, but your first action should be to rule out the possibility of infection by a virus, spyware, or other nefarious entity—even …

Source

Source

A watering hole attack used Slack for its command-and-control communications to avoid network and endpoint detection.

New Verizon report shows a big gap between organizations' mobile security risk concerns and mobile security best practices they implement.