July 2019 – Page 6 – PossibleThreat Articles

Credit to Author: Gregg Keizer| Date: Fri, 26 Jul 2019 03:00:00 -0700

Mozilla has issued multiple after-action reports analyzing the major mix-up in May that crippled most Firefox add-ons. The reports also made recommendations for preventing similar incidents in the future.

The fiasco started just after 8 p.m. ET on Friday, May 3, when a certificate used to digitally sign Firefox extensions expired. Because Mozilla had neglected to renew the certificate, Firefox assumed add-ons could not be trusted – that they were potentially malicious – and disabled any already installed. Add-ons could not be added to the browser for the same reason.

To read this article in full, please click here

Security Sophos

Facebook gets its wrist slapped $5b for fumbling our data, confirms FTC

July 25, 2019 0 Comments Aleksandr Kogan, Alexander Nix, Cambridge Analytica, data loss, doj, facebook, fine, FTC, Global Science Research, Law & order, Privacy

Credit to Author: Lisa Vaas| Date: Thu, 25 Jul 2019 16:30:35 +0000

The FTC initially wanted a fine worth tens of billions, plus potential jail time for execs.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/8EI8tUn77RA” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

Researchers to launch intentionally ‘vulnerable’ blockchain at Black Hat

July 25, 2019 0 Comments Blockchain, Emerging Technology, Security

Credit to Author: Lucas Mearian| Date: Thu, 25 Jul 2019 14:06:00 -0700

Hoping to raise awareness about blockchain vulnerabilities, cybersecurity firm Kudelski Security next week plans to launch the industry’s first “purposefully vulnerable” blockchain – and will demo it at next month’s Black Hat conference.

Kudelski Security’s FumbleChain project is aimed at highlighting vulnerabilities in blockchain ecosystems, according to Nathan Hamiel, head of cybersecurity research at Kudelski.

The flawed blockchain ledger is written in Python 3.0, making it easy for anyone to read and modify its source code, and it’s modular – allowing users to hack and add new challenges to promote continuous learning.

To read this article in full, please click here

Microsoft Security

New machine learning model sifts through the good to unearth the bad in evasive malware

July 25, 2019 0 Comments AI and machine learning, Antivirus, automation, cybersecurity, detection evasion, Endpoint security, lockergoga, Machine Learning, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP, Microsoft security intelligence, monotonic models, next generation protection, Windows Defender Antivirus

Credit to Author: Eric Avena| Date: Thu, 25 Jul 2019 16:30:55 +0000

Most machine learning models are trained on a mix of malicious and clean features. Attackers routinely try to throw these models off balance by stuffing clean features into malware. Monotonic models are resistant against adversarial attacks because they are trained differently: they only look for malicious features. The magic is this: Attackers can’t evade a monotonic model by adding clean features. To evade a monotonic model, an attacker would have to remove malicious features.

The post New machine learning model sifts through the good to unearth the bad in evasive malware appeared first on Microsoft Security .

MalwareBytes Security

Changing California’s privacy law: A snapshot at the support and opposition

July 25, 2019 0 Comments AB 1416, AB 1564, AB 25, AB 846, AB 873, ACLU of California, amazon, AT&T, Autumn Burke, Big Tech, California Consumer Privacy Act, CCPA, deidentified, Ed Chau, EFF, facebook, Google, Internet Association, Jacqui Irwin, Ken Cooley, loyalty program, Marc Berman, Microsoft, personal information, Privacy, Privacy Rights Clearinghouse, Senate Judiciary Committee, Senator Hannah-Beth Jackson, Technet

Credit to Author: David Ruiz| Date: Thu, 25 Jul 2019 15:59:59 +0000

Before the California Senate returns from its summer recess, we look at the authors, supporters, opponents, and donors involved in an extended fight to change California’s privacy law, the California Consumer Privacy Act.

Categories:

Privacy

Tags: AB 1416 AB 1564 AB 25 AB 846 AB 873 ACLU of California amazon AT&T Autumn Burke Big Tech California Consumer Privacy Act CCPA deidentified Ed Chau EFF facebook Google Internet Association Jacqui Irwin Ken Cooley loyalty program Marc Berman microsoft personal information Privacy Rights Clearinghouse Senate Judiciary Committee Senator Hannah-Beth Jackson Technet

Security Wired

Facebook’s Ex-Security Chief Details His ‘Observatory’ for Internet Abuse

July 25, 2019 0 Comments Security, Security / Security News

Credit to Author: Andy Greenberg| Date: Thu, 25 Jul 2019 09:00:00 +0000

Alex Stamos’ Stanford-based project will try to persuade tech firms to offer academics access to massive troves of user data.

Security Wired

Robert Mueller’s Work Is Done. Now It’s Congress’s Turn

July 25, 2019 0 Comments Security, Security / National Security

Credit to Author: Garrett M. Graff| Date: Thu, 25 Jul 2019 00:57:20 +0000

In nearly six hours of testimony Wednesday, former special counsel Robert Mueller stuck to the facts.

Security Wired

New York’s Revenge Porn Law Is a Flawed Step Forward

July 25, 2019 0 Comments Security, Security / Privacy

Credit to Author: Emma Grey Ellis| Date: Wed, 24 Jul 2019 21:10:47 +0000

All but four states in the US now have a revenge porn law on the books. But advocates say precious few get it right.

Security Sophos

EvilGnome – Linux malware aimed at your laptop, not your servers

July 25, 2019 0 Comments EvilGnome, Linux, malware, Podcast, shell script

Credit to Author: Paul Ducklin| Date: Thu, 25 Jul 2019 14:59:41 +0000

EvilGnome was written to target the comparatively small but committed community who use Linux on their laptops.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/E4CH_8oYLak” height=”1″ width=”1″ alt=””/>

Security Sophos

New York City moves to protect citizens’ location data

July 25, 2019 0 Comments app privacy, location data, New York, NYC, Privacy, smartphone data, telecomms

Credit to Author: Danny Bradbury| Date: Thu, 25 Jul 2019 12:13:19 +0000

New York City is considering a law that could stop cellphone carriers and smartphone app vendors from selling their location data.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/EEMeIRvhNwI” height=”1″ width=”1″ alt=””/>

PossibleThreat Articles

Month: July 2019

Mozilla blames 'interlocking complex systems' and confusion for Firefox's May add-on outage

Facebook gets its wrist slapped $5b for fumbling our data, confirms FTC

Researchers to launch intentionally ‘vulnerable’ blockchain at Black Hat

New machine learning model sifts through the good to unearth the bad in evasive malware

Changing California’s privacy law: A snapshot at the support and opposition

Facebook’s Ex-Security Chief Details His ‘Observatory’ for Internet Abuse

Robert Mueller’s Work Is Done. Now It’s Congress’s Turn

New York’s Revenge Porn Law Is a Flawed Step Forward

EvilGnome – Linux malware aimed at your laptop, not your servers

New York City moves to protect citizens’ location data