February 2020 – Page 10 – PossibleThreat Articles

Ring makes 2FA mandatory to keep hackers out of your doorbell account

February 20, 2020 0 Comments 2-factor Authentication, 2fa, amazon, credential stuffing, Data Sharing, doorbell, Internet of Things, IoT, neighbors, password reuse, ring, security threats, video doorbell, webcam

Credit to Author: Lisa Vaas| Date: Thu, 20 Feb 2020 10:03:25 +0000

Amazon is following Google’s lead by forcing all users to use two-factor authentication when logging into their Ring accounts.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ZP4hOfnjH24″ height=”1″ width=”1″ alt=””/>

Microsoft Security

Unifying security policy across all mobile form-factors with Wandera and Microsoft

February 19, 2020 0 Comments Azure Security, Endpoint security, microsoft endpoint manager, Mobile Security

Credit to Author: Todd VanderArk| Date: Wed, 19 Feb 2020 17:00:17 +0000

The way we work is evolving. Technology enables more effective employees by helping them to be productive where and when they choose. Businesses also enjoy the productivity benefits of a connected workforce.

The post Unifying security policy across all mobile form-factors with Wandera and Microsoft appeared first on Microsoft Security .

MalwareBytes Security

Rudy Giuliani’s Twitter mishaps invite typosquatters and scammers

February 19, 2020 0 Comments adware, browser extensions, cybersecurity czar, giuliani, Hacktivism, malvertising, malvertising schemes, political targets, rudy giuliani, scams, tweets, twitter, typo, typosquatting

Credit to Author: Jérôme Segura| Date: Wed, 19 Feb 2020 17:21:08 +0000

Rudy Giuliani’s Twitter account contains many typos that lead to the wrong website—and scammers and typosquatters are taking advantage.

Categories:

Scams

Tags: adware browser extensions cybersecurity czar giuliani hacktivism malvertising malvertising schemes political targets rudy giuliani scams tweets twitter typo typosquatting

Independent Krebs Security

Hackers Were Inside Citrix for Five Months

February 19, 2020 0 Comments A Little Sunshine, citrix systems, cve-2019-19781, Data Breaches, FBI, shitrix

Credit to Author: BrianKrebs| Date: Wed, 19 Feb 2020 15:55:04 +0000

Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. The disclosure comes almost a year after Citrix acknowledged that digital intruders had broken in by probing its employee accounts for weak passwords.

Security Wired

YouTube Gaming’s Most-Watched Videos Are Dominated by Scams and Cheats

February 19, 2020 0 Comments Security, Security / Security News

Credit to Author: Cecilia D’Anastasio| Date: Wed, 19 Feb 2020 00:53:15 +0000

YouTube is littered with bot-driven videos promising big in-game riches—that also try to steal your personal information.

Security Wired

Hundreds of Chrome Extensions Secretly Uploaded Private Data

February 19, 2020 0 Comments Security, Security / Cyberattacks and Hacks

Credit to Author: Dan Goodin, Ars Technica| Date: Sun, 16 Feb 2020 15:00:00 +0000

A researcher discovered that hundreds of extensions in the Web Store were part of a long-running malvertising and ad-fraud scheme.

Security Sophos

Private photos leaked by PhotoSquared’s unsecured cloud storage

February 19, 2020 0 Comments amazon s3, amazon simple storage service (s3) bucket, Amazon web services, amazon web services (aws) storage bucket, Android, AWS, breach, CCPA, Cloud, cloud storage, credit card fraud, data breach, data leak, data loss, exposed database, financial fraud, identity theft, iOS, leak, Mobile, personally identifiable information, phishing, photo apps, photosquared, PII, port scanning, Privacy, s3 database, security threats, vpnMentor, web mapping

Credit to Author: Lisa Vaas| Date: Wed, 19 Feb 2020 11:49:20 +0000

With no password required and no encryption in place, a burglar or ID thief could have seen your photos, your address and more.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/v6L-VwD68-Y” height=”1″ width=”1″ alt=””/>

Security Sophos

Facebook asks to be regulated kinda like a newspaper, kinda like telco

February 19, 2020 0 Comments content moderation, european commission, extremist content, facebook, fake news, harms regulation, Law & order, Mark Zuckerberg, political advertising, Privacy, regulations, regulators, rules for the internet, Social networks, uk

Credit to Author: Lisa Vaas| Date: Wed, 19 Feb 2020 11:37:17 +0000

Zuckerberg is in Brussels right in time for the European Commission’s release of its manifesto on regulating AI.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/vD36QJcf5Ls” height=”1″ width=”1″ alt=””/>

Security Sophos

WordPress plugin hole could have allowed attackers to wipe websites

February 19, 2020 0 Comments data loss, demo importer plugin, plugin developer, plugins, security threats, themegrill, vulnerability, webarx, Wordpress, WordPress plugin

Credit to Author: Danny Bradbury| Date: Wed, 19 Feb 2020 11:21:03 +0000

A WordPress plugin with over 100,000 active installations had a bug that could have allowed unauthorised attackers to wipe its users’ blogs clean, it emerged this week.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/GCOxf6ngpvk” height=”1″ width=”1″ alt=””/>

Security Sophos

OpenSSH eases admin hassles with FIDO U2F token support

February 19, 2020 0 Comments 2fa, cryptographic keys, Cryptography, fido, fido u2f, hashing, openssh, passwordless login, Privacy, sha-1, ssh

Credit to Author: John E Dunn| Date: Wed, 19 Feb 2020 11:00:53 +0000

OpenSSH version 8.2 is out and the big news is that the world’s most popular remote management software now supports authentication using any FIDO (Fast Identity Online) U2F hardware token.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/sDQy3vGdNuw” height=”1″ width=”1″ alt=””/>