October 2019 – PossibleThreat Articles

SMBs lack resources to defend against cyberattacks, plus pay more in the aftermath

October 31, 2019 0 Comments Business, cyberattacks, malware, medium businesses, PricewaterhouseCoopers, Ransomware, small businesses, smb, Social networks

Credit to Author: Jovi Umawing| Date: Thu, 31 Oct 2019 21:41:35 +0000

We take a look at the top challenges and threats to SMBs today, and recommend ways they can easily shore up their defenses.

Categories:

Business

Tags: cyberattacks malware medium businesses PricewaterhouseCoopers ransomware small businesses SMB social networks

Security Sophos

Linux maintainer: Patching side-channel flaws is killing performance

October 31, 2019 0 Comments cve-2018-12126, cve-2018-12127, cve-2018-12130, cve-2019-11091, greg kroah-hartman, hyperthreading, Intel, Linux, meltdown, security threats, simultaneous multithreading (smt), spectre, vulnerability, zombieload

Credit to Author: John E Dunn| Date: Thu, 31 Oct 2019 13:15:11 +0000

Mirror, mirror on the wall, which is the worst side-channel vulnerability of them all?<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/4OlRsV8RD_Y” height=”1″ width=”1″ alt=””/>

Security Sophos

Judge lambasts porn company for spewing copyright lawsuits

October 31, 2019 0 Comments bittorrent, copyright infringement, copyright troll, court decision, dmca, dmca notice, Law & order, piracy, pirates, porn, Privacy, strike 3 holdings

Credit to Author: Lisa Vaas| Date: Thu, 31 Oct 2019 12:53:37 +0000

A US court shielded ISP account holders from a request for expedited discovery to see whose IP addresses were used to share pirated videos.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/taz38WMm0MY” height=”1″ width=”1″ alt=””/>

Security Sophos

Researchers find hole in EU-wide identity system

October 31, 2019 0 Comments authentication and trust services, eidas, electronic identification, EU, European Union, Government security, sec consult, security threats, vulnerability

Credit to Author: Danny Bradbury| Date: Thu, 31 Oct 2019 12:47:20 +0000

The EU has fixed a flaw in the powerful yet complex eIDAS digital identification system that let people authenticate as someone else.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/pCEuDkvSosQ” height=”1″ width=”1″ alt=””/>

Security Sophos

WhatsApp sues spyware maker for allegedly hacking phones worldwide

October 31, 2019 0 Comments activists, Cryptography, cyberweapons, encrypted messaging, end-to-end encryption, espionage, Hacking, israel, Law & order, lawsuit, malware, Mobile, nso, nso group, pegasus, Privacy, q cyber technologies, rat, security threats, Social networks, spies, spyware, whatsapp, zero-click

Credit to Author: Lisa Vaas| Date: Thu, 31 Oct 2019 12:32:02 +0000

WhatsApp has publicly attributed the attack on its users in May 2019 to the Israeli spyware makers, NSO Group.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/rTg4uWB-Hmg” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

Google strengthens Chrome's site isolation to protect browser against its own vulnerabilities

October 31, 2019 0 Comments Browsers, Security

Credit to Author: Gregg Keizer| Date: Thu, 31 Oct 2019 04:49:00 -0700

Google is telling Chrome users that it has extended an advanced defensive technology to protect against attacks exploiting vulnerabilities in the browser’s Blink rendering engine.

Chrome 77, which launched in September but was supplanted by Chrome 78 on Oct. 22, received the beefed-up site isolation, wrote Alex Moshchuk and Łukasz Anforowicz, two Google software engineers, in an Oct. 17 post to a company blog. “Site Isolation in Chrome 77 now helps defend against significantly stronger attacks,” the two said. “Site Isolation can now handle even severe attacks where the renderer process is fully compromised via a security bug, such as memory corruption bugs or Universal Cross-Site Scripting (UXSS) logic errors.”

To read this article in full, please click here

Independent Krebs Security

Breaches at NetworkSolutions, Register.com, and Web.com

October 30, 2019 0 Comments Data Breaches, domainstate.com, networksolutions breach, register.com breach, web.com breach

Credit to Author: BrianKrebs| Date: Wed, 30 Oct 2019 20:47:34 +0000

Top domain name registrars NetworkSolutions.com, Register.com and Web.com are asking customers to reset their passwords after discovering an intrusion in August 2019 in which customer account information was accessed.

MalwareBytes Security

Help prevent disaster donation scams from causing more misery

October 30, 2019 0 Comments 419, 419 scams, charity, cold call scams, cold calls, disaster, donation scams, natural disaster, natural disaster scam, Natural Disasters, phish, phishing, red cross, scammers, scamming, scams, Social engineering, social engineering attacks

Credit to Author: Christopher Boyd| Date: Wed, 30 Oct 2019 20:36:21 +0000

Scammers will stop at nothing—not even a tragic natural disaster—for a chance to cash in. We offer some helpful tips to avoid disaster donation scams.

Categories: