July 2019 – PossibleThreat Articles

‘Urgent/11’ flaws affect 200 million devices – from routers to elevators

July 31, 2019 0 Comments Internet of Things, IoT, Patching, RTOS, security threats, Urgent/11, vulnerability, VxWorks, Wind River

Credit to Author: John E Dunn| Date: Wed, 31 Jul 2019 16:43:19 +0000

There are 11 security flaws affecting VxWorks: “the most widely used operating system you may never have heard about”.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/nC9Xn3LZE9k” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

QR code scam can clean out your bank account

July 31, 2019 0 Comments banking phish, login credentials, malicious websites, payment, QR code, QR code scam, Scam, scams, Social engineering, url

Credit to Author: Pieter Arntz| Date: Wed, 31 Jul 2019 16:05:40 +0000

QR code scams are still popular. We should learn to treat QR codes like we do any other unrecognizable URL: with suspicion on where it will take us.

Categories:

Scams

Tags: banking phish login credentials malicious websites payment QR code QR code scam scam scams Social Engineering url

(Read more…)

The post QR code scam can clean out your bank account appeared first on Malwarebytes Labs.

Microsoft Security

How Windows Defender Antivirus integrates hardware-based system integrity for informed, extensive endpoint protection

July 31, 2019 0 Comments assertion engine, cybersecurity, hardware-based isolation, kernel-mode attacks, Microsoft Defender Advanced Threat Protection, Microsoft security intelligence, next generation protection, privilege escalation, runtime attestation, Security Intelligence, Threat protection, token swap, token theft, Windows Defender Antivirus, Windows Security

Credit to Author: Eric Avena| Date: Wed, 31 Jul 2019 16:30:35 +0000

The deep integration of Windows Defender Antivirus with hardware-based isolation capabilities allows the detection of artifacts of attacks that tamper with kernel-mode agents at the hypervisor level.

The post How Windows Defender Antivirus integrates hardware-based system integrity for informed, extensive endpoint protection appeared first on Microsoft Security .

Microsoft Security

CISO series: Better cybersecurity requires a diverse and inclusive approach to AI and machine learning

July 31, 2019 0 Comments AI and machine learning, CISO series

Credit to Author: Todd VanderArk| Date: Wed, 31 Jul 2019 16:00:51 +0000

A collaborative, inclusive approach to creating AI and machine learning models can help increase your resilience to cyberattacks.

The post CISO series: Better cybersecurity requires a diverse and inclusive approach to AI and machine learning appeared first on Microsoft Security .

Security Wired

John Ratcliffe Is a Dangerous Pick for Director of National Intelligence

July 31, 2019 0 Comments Opinion, Security, Security / National Security

Credit to Author: Garrett M. Graff| Date: Tue, 30 Jul 2019 22:03:24 +0000

The director of national intelligence’s main job is to speak truth to power. Trump’s nominee, John Ratcliffe, seems destined to do the opposite.

Security Sophos

iMessage bug could have allowed attackers to read data from any iPhone

July 31, 2019 0 Comments Apple, Apple patch, Google, imessage, iOS, iPad, iPhone, iPods, Mobile, Natalie Silvanovich, Operating Systems, Project Zero

Credit to Author: Danny Bradbury| Date: Wed, 31 Jul 2019 13:44:07 +0000

Google’s Project Zero has unveiled details of a bug in Apple’s iMessage that lets attackers read data from an iPhone without any user interaction.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/lRgoEr1lXx4″ height=”1″ width=”1″ alt=””/>

Security Sophos

Georgia hit with malware yet again

July 31, 2019 0 Comments data loss, Georgia, Government security, Law & order, malware, police, Ransomware, ryuk, SamSam, security threats

Credit to Author: Lisa Vaas| Date: Wed, 31 Jul 2019 13:11:11 +0000

The Department of Public Safety says it won’t pay, but given the umpteen times the state’s agencies have been hit, somebody’s not listening.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/_Ny4QNCGDto” height=”1″ width=”1″ alt=””/>

Security Sophos

Cyberattacks on connected cars could gridlock entire cities

July 31, 2019 0 Comments autonomous cars, Car security, cars, connected cars, Internet of Things, IoT, security threats, vehicle wifi

Credit to Author: Lisa Vaas| Date: Wed, 31 Jul 2019 10:40:34 +0000

It would require taking over and stranding 20% of a city’s cars to freeze traffic, and only 10% to impede ambulances, physicists calculate.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/21-9DXPF4gg” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

How an attacker can target phishing attacks

July 31, 2019 0 Comments office 365, Security, Windows

There are a number of ways attackers can exploit public information about your organization's employees. CSO Online's Susan Bradley walks through how an attacker can gain access to your organization's Office 365 accounts and how you can protect your enterprise from these potential attacks.

Microsoft Security

Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack

July 30, 2019 0 Comments AI and machine learning, Antimalware Scan Interface (AMSI), Astaroth, behavior monitoring, Command-line scanning, cybersecurity, Endpoint security, Execution stage, fileless, fileless malware, heuristics, Initial access stage, living-off-the-land, Microsoft Defender ATP, Microsoft security intelligence, Security Intelligence, Threat protection, Windows Defender Antivirus, Windows Security, WMIC

Credit to Author: Eric Avena| Date: Mon, 08 Jul 2019 16:00:51 +0000

Advanced technologies in Microsoft Defender ATP’s Antivirus exposed and defeated a widespread fileless campaign that completely “lived off the land” throughout a complex attack chain that run the info-stealing backdoor Astaroth directly in memory

The post Dismantling a fileless campaign: Microsoft Defender ATP’s Antivirus exposes Astaroth attack appeared first on Microsoft Security .

← Previous