In the wake of the discovery of severe flaws in Intel chips, so-called Meltdown and Spectre vulnerabilities, Apple announced it plans to use custom-designed ARM chips in Mac computers starting as early as 2020. The move aims to replace the Intel processors running on its desktop and laptop systems like done for its own […]
Cybersecurity
Google to banish cryptocurrency mining extensions from official Chrome Web Store
Google will ban cryptocurrency mining extensions from the official Chrome Web Store after finding many of them abusing users’ resources without consent. The number of malicious extensions is rapidly increased over the past few months, especially those related to mining activities. The company has introduced a new Web Store policy that bans […]
Cisco Removes Backdoor Account from IOS XE Software
isco removed today a backdoor account from its IOS XE operating system that would have allowed a remote attacker to log into Cisco routers and switches with a high-privileged account. The company says the « undocumented user account » only impacts devices running Cisco XE Software 16.x —an operating system deployed mostly […]
Preventing the Next Ransomware Attack
2018 is quickly moving by us, and while we have yet to see an attack on the scale of 2017’s WannaCry or NotPetya, it’s clear that the adversaries are not letting up on their mission to line their pockets at our expense. Ransomware has dominated the headlines for the last two years, while […]
MOZILLA TESTS DNS OVER HTTPS: MEETS SOME PRIVACY PUSHBACK
The Mozilla Foundation is testing a new mechanism for securing domain name server traffic that uses the encrypted HTTPS channel. It is an attempt to speed up the internet, reduce the threat of man-in-the-middle attacks and keep prying eyes from monitoring what users do online. Starting in the next several […]
IETF Approves TLS 1.3 as Internet Standard
IETF Approves TLS 1.3 as Internet Standard The Internet Engineering Task Force (IETF) —the organization that approves proposed Internet standards and protocols— has formally approved TLS 1.3 as the next major version of the Transport Layer Security (TLS) protocol. The decision comes after four years of discussions and 28 protocol drafts, with […]
Google Deploys New Anti-Phishing & Malware Detection Features for G Suite Users
Google rolled out today new security features for G Suite, its collection of enterprise, cloud computing, productivity, and collaboration tools. While several of the G Suite services received improvements, the most interesting additions have been made to Gmail for Business, the Google service that allows companies to use Gmail as their […]
Mozilla Is Testing « DNS over HTTPS » Support in Firefox
Mozilla Foundation engineers announced plans over the weekend to test the « DNS over HTTPS » (DoH) fledgling security standard in Firefox Nightly distributions. The feature will be tested as a Firefox shield study —a browser mechanism that allows engineers to roll out and roll back experimental features at a moment’s notice. […]
Never Mind Malware – Social Engineering Will Be Your Biggest Threat This Year
As we enter a new year, IT security teams and cyber-criminals are both already searching for the development that will tip the scales in the on-going cyber arms race. A common assumption is that a new malware strain or vulnerability will be the defining factor of 2018, similar to the […]
5 Things You Need to Know About Botnets
There’s a common denominator between the surges of phishing email that continue to plague consumers, businesses and government agencies around the globe and the social media-fueled propaganda campaigns Russia has leveraged to undermine democratic elections in Europe and the United States. Neither would be doable without botnets as they exist today. For most people, the power and […]