July 2019 – Page 2 – PossibleThreat Articles

Microsoft Patch Alert: Welcome to the Upside Down

July 30, 2019 0 Comments Microsoft, Microsoft Office, PCs, Security, Windows

Credit to Author: Woody Leonhard| Date: Tue, 30 Jul 2019 09:33:00 -0700

This month, Microsoft Patch Land looks like a stranger Stranger Things Upside Down, where Security-only patches carry loads of telemetry, Visual Studio patches appear for the wrong versions… and we still can’t figure out how to keep the Win10 1903 upgrade demogorgon from swallowing established drivers.

As we end the month, we’ve seen the second “optional” monthly cumulative updates for all Win10 versions — the 1903 patch was released, pulled, then re-released — and fixes for Visual Studio’s transgressions. There’s a kludge for getting the Win10 1903 upgrade to work. And BlueKeep still looms like a gorging Mind Flayer.

Win7 Security-only patch brings telemetry

Those of you who have been dodging Windows 7 telemetry by using the monthly Security-only patches — a process I described as “Group B” three years ago — have reached the end of the road. The July 2019 Win7 “Security-only” patch, KB4507456, includes a full array of telemetry/snooping, uh, enhancements.

To read this article in full, please click here

MalwareBytes Security

Exploit kits: summer 2019 review

July 30, 2019 0 Comments drive-by, EK, EKs, exploit kits, exploits, Fallout, GreenFlash Sundown, Magnitude, RIG, Spelevo, Threat analysis, Underminer

Credit to Author: Jérôme Segura| Date: Tue, 30 Jul 2019 16:20:33 +0000

In this edition of our seasonal review of exploit kits, we review active and unique EKs hitting consumers and businesses over the summer 2019 season.

Categories:

Threat analysis

Tags: drive-by EK EKs exploit kits exploits Fallout GreenFlash Sundown Magnitude RIG Spelevo Underminer

(Read more…)

The post Exploit kits: summer 2019 review appeared first on Malwarebytes Labs.

Microsoft Security

Council of EU Law Enforcement Protocol improves cross-border cooperation

July 30, 2019 0 Comments Cybersecurity policy, Incident Response, Security Intelligence, Threat protection

Credit to Author: Todd VanderArk| Date: Tue, 30 Jul 2019 16:00:00 +0000

The new EU Law Enforcement Emergency Response Protocol addresses the growing problem of planning and coordinating between governments, agencies, and companies when cyberattacks occur across international boundaries.

The post Council of EU Law Enforcement Protocol improves cross-border cooperation appeared first on Microsoft Security .

Security Sophos

Capital One breach – 100 million users’ data stolen

July 30, 2019 0 Comments breach, capital one, data breach, data loss

Credit to Author: Paul Ducklin| Date: Tue, 30 Jul 2019 15:46:16 +0000

Global financial services company Capital One has just announced a massive data breach.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/beZiWdZXOZw” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

How to get your Equifax money and stay safe doing it

July 30, 2019 0 Comments Awareness, credit monitoring, data breach, data breach settlement, Equifax, EU, European Union, Federal Trade Commission, fraud, fraud prevention, FTC, GDPR, General Data Protection Regulation, identity theft, phishing, scams, settlement, social security numbers

Credit to Author: David Ruiz| Date: Tue, 30 Jul 2019 15:00:00 +0000

Equifax has been ordered to pay at least $650 million in relation to its enormous 2017 data breach. Users who were affected might be eligible for a claim. But watch out for scams!

Categories:

Awareness

Tags: credit monitoring data breach data breach settlement Equifax EU European Union Federal Trade Commission fraud fraud prevention FTC gdpr General Data Protection Regulation identity theft phishing scams settlement social security numbers

Security Wired

A Hacker Stole Data From 100 Million Capital One Customers

July 30, 2019 0 Comments Security, Security / Cyberattacks and Hacks

Credit to Author: Lily Hay Newman| Date: Tue, 30 Jul 2019 02:29:02 +0000

In a criminal complaint, the FBI detailed how a hacker allegedly stole data from 100 million people—and how she got caught.

Security Wired

A Critical Device Hack, China’s Social Credit, and More News

July 30, 2019 0 Comments Security, Security / Security News

Credit to Author: Alex Baker-Whitcomb| Date: Mon, 29 Jul 2019 22:25:39 +0000

Catch up on the most important news from today in two minutes or less.

Security Wired

How the West Got China’s Social Credit System Wrong

July 30, 2019 0 Comments Security, Security / Privacy

Credit to Author: Louise Matsakis| Date: Mon, 29 Jul 2019 19:25:07 +0000

It occupies a spot next to ‘Black Mirror’ and Big Brother in popular imagination, but China’s social credit project is far more complicated than a single, all-powerful numerical score.

Security Sophos

Hackers target Telegram accounts through voicemail backdoor

July 30, 2019 0 Comments 2SV, Brad Arkin, Government Hack, Hacker, Law & order, security threats, Social networks, telegram, voicemail, voicemal hack

Credit to Author: John E Dunn| Date: Tue, 30 Jul 2019 13:39:06 +0000

As politicians should know by now, secure messaging apps such as Telegram can quickly become a double-edged sword.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/JiHkgvqqGmE” height=”1″ width=”1″ alt=””/>

Security Sophos

Listening in: Humans hear the private info Siri accidentally records

July 30, 2019 0 Comments Alexa, Apple, Apple Watch, contractors, Google Assistant, HomePod, IoT, Machine Learning, Privacy, Siri, Uncategorized, voice assistants

Credit to Author: Lisa Vaas| Date: Tue, 30 Jul 2019 13:28:24 +0000

Apple Watch and HomePod have the highest rate of inadvertent recordings, a whistleblower says.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/NBH7Od8K-QM” height=”1″ width=”1″ alt=””/>