With the recent report of Facebook user’s data being harvested and used for information warfare, many people are looking to delete their accounts or at least their Facebook posts in order to have a clean slate. Deleting posts, though, can be a very time consuming task as you normally would have to […]
Année : 2018
Apple Blocks Sites From Abusing HSTS Security Standard to Track Users
f you are unaware, the security standard HTTP Strict Transport Security (HSTS) can be abused as a ‘supercookie’ to surreptitiously track users of almost every modern web browser online without their knowledge even when they use « private browsing. » Apple has now added mitigations to its open-source browser infrastructure WebKit that underpins its […]
DDoS Attacks Are $10 per Hour on the Dark Web
A report released today by US cloud security and compliance solutions firm Armor shines a light on the prices practiced on Dark Web markets for a wide range of cybercrime-related services. The report, compiled by trawling several well-known Dark Web markets, shows a slight increase in pricing compared to the prices reported by […]
Mozilla Is Testing « DNS over HTTPS » Support in Firefox
Mozilla Foundation engineers announced plans over the weekend to test the « DNS over HTTPS » (DoH) fledgling security standard in Firefox Nightly distributions. The feature will be tested as a Firefox shield study —a browser mechanism that allows engineers to roll out and roll back experimental features at a moment’s notice. […]
Ransomware Takes Georgia Town’s Email and Phone Systems Offline
Ransomware Takes Georgia’s City of Hinesville Offline An unknown ransomware variant took down the City of Hinesville in late February. Initially, the ransomware attack was reported as an IT incident; however, city officials are now reporting their systems were indeed infected with ransomware on February 20th. The exact ransomware variant […]
One Every 200 Google Search Suggestions Is Polluted
One of every 200 Google search autocomplete suggestions are poisoned and are used to drive traffic to misleading sites, to malware, or other malicious content, a team of academics from three US universities has discovered. This is one of the most recent types of blackhat search engine optimization (BHSEO) techniques […]
INTEL DETAILS CPU ‘VIRTUAL FENCES’ FIX AS SAFEGUARD AGAINST SPECTRE, MELTDOWN FLAWS
Intel introduced hardware-based protections to its new chips to protect against the Spectre and Meltdown flaws that rocked the silicon industry when the vulnerabilities were made public in early 2018. Spectre and Meltdown, which account for three variants of a side-channel analysis security issue in server and desktop processors, could […]
Preventing Business Email Compromise Requires a Human Touch
Human-powered Intelligence Plays a Critical Role in Defending Against Socially Engineered Attacks The FBI’s Internet Crime Complaint Center (IC3) declared Business Email Compromise (BEC) the “3.1 billion dollar scam” in 2016, an amount which then grew in the span of one year into a “5 billion dollar scam.” Trend Micro […]
Linux Foundation Announces ACRN —Open Source Hypervisor for IoT Devices
The Linux Foundation announced a new project called ACRN (pronounced « acorn ») that will provide generic code for the creation of hypervisors for IoT devices. A hypervisor is computer code for creating and running virtual machines. Project ACRN aims to provide a generic structure for an IoT-specific hypervisor component. The Linux Foundation says it built […]
Prevent bot traffic from ruining Google Analytics
Distil Bot Discovery for Google Analytics is a free offering that will give website owners the ability to understand the impact of bots on their business. The service is provided by Distil Networks, a company specializing in bot detection and mitigation services. How to differentiate a human website visitor from […]