security.didici.cc
Starbucks site slurped, Comcast keys clocked, mad Mac Monero mining malware and much more
8 hours agoSome security bites for the long weekend Roundup While this week was dominated by news of a new Spectre variant, the VPNFilter botnet, and TalkTalk's badbad routersrouters, plenty of other stories popped up.…
Starbucks site slurped, Z-Wave locks clocked, mad Mac Monero mining malware and much more
8 hours agoSome security bites for the long weekend Roundup While this week was dominated by news of a new Spectre variant, the VPNFilter botnet, and TalkTalk's badbad routersrouters, plenty of other stories popped up.…
Apple will add government App Store takedown requests to transparency reports
1 day agoApple’s set to up the ante with its transparency report. The same day it dropped the latest version of the twice-yearly document, the company committed to including in future updates government takedown requests for the App Store. The report covering Ju ...
Friday Squid Blogging: Squid Comic
1 day agoIt's not very good, but it has a squid in it. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here.
Researchers crack open AMD's server VM encryption
1 day agoSEV attack would let hypervisors lift memory contents A group of German researchers have devised a method to thwart the VM security in AMD's server chips.…
Epyc fail? We can defeat AMD's virtual machine encryption, say boffins
1 day agoEvil hypervisors can lift plain-text info out of ciphered memory, it is claimed German researchers have devised a method to thwart the security mechanisms AMD's Epyc server chips use to automatically encrypt virtual machines in memory.…
Millions of IoT Devices Vulnerable to Z-Wave Downgrade Attacks, Researchers Claim
1 day agoMillions of IoT devices based on the Z-Wave wireless protocol are vulnerable to a downgrade attack during pairing sessions.
Pet Trackers Open to MITM Attacks, Interception
1 day agoSeveral well-rated pet trackers contain flaws stemming from the use of Bluetooth LE, poor certificate handling and more.
Security and Human Behavior (SHB 2018)
1 day agoI'm at Carnegie Mellon University, at the eleventh Workshop on Security and Human Behavior. SHB is a small invitational gathering of people studying various aspects of the human side of security, organized each year by Alessandro Acquisti, Ross Anderson, ...
Android Malware Comes Baked into Some New Tablets, Phones
1 day agoAd-loading malware is being built into the firmware and operating system of some new tablets and phones from three major manufacturers.
Apple reveals latest government data demand figures
1 day agoThe company said it will soon start reporting app takedowns from its app stores.
Your logo and branded vulnerability aren't helping: How to disclose better
1 day agoWe are going to change the way business and marketing leaders interact with researchers and analysts, and raise the bar for ethics. We are going to empower researchers and analysts to advocate business and marketing leaders for better practices.
GDPR Oddsmakers: Who, Where, When Will Enforcement Hit First?
1 day agoThe GDPR grace period ends today. Experts take their best guesses on when data protection authorities will strike - and what kind of organizations will be first to feel the sting of the EU privacy law.
Alexa Eavesdropping Flub Re-Sparks Voice Assistant Privacy Debate
1 day agoAfter an Alexa speaker recorded and shared a private conversation, the tech community is casting a wary eye on voice assistant privacy issues.
Privacy Group: Facebook, Google Policies Break GDPR Laws
1 day agoNonprofit 'None of Your Business' files complaints against Facebook, Google, WhatsApp, and Instagram.
Ad fraud is out of control -- billions lost by media industry, says a new report
1 day agoAdvertising fraud is hitting new highs -- enabling multi-billion dollar crimes, claims a report from a leading ad researcher.
Wicked Mirai Brings New Exploits to IoT Botnets
1 day agoThe latest variant of the venerable Mirai botnet malware combines approaches and brings new exploits to the world of IoT security challenges.
10 Free DevOps-Friendly Security Tools Developers Will Love
1 day agoStart building an affordable DevSecOps automation toolchain with these free application security tools.
Bridging the Cybersecurity Talent Gap
1 day agoThere's no one surefire way of fixing the problem, which endangers everyone's security. There are, however, several options we should try.
Attackers Cashing In On Cryptocurrency With Increased Scams
1 day agoAs the popularity around cryptocurrency has continued to rise in 2018, it has also paved an easy path for cash-hungry scammers to launch “cryptocurrency giveaway scams.”
PassProtect tells you if your password has been pwned
1 day agoThe right time to tell me my password has been exposed is before I use it; this extension can help.
Google, Facebook hit with serious GDPR complaints: Others will be soon
1 day agoFacebook nemesis Max Schrems is behind the first challenges to US giants under new European data privacy law.
Smart lock user? Z-wave pairing flaw lets attackers open your door from yards away
1 day agoUp to 100 million Internet of Things devices could be at risk.
Microsoft: Here's why Windows Defender AV isn't ranked higher in new antivirus tests
1 day agoWindows Defender trails third-party antivirus in tests, but Microsoft says you should still use it over other products.
Detecting Lies through Mouse Movements
1 day agoInteresting research: "The detection of faked identity using unexpected questions and mouse dynamics," by Merulin Monaro, Luciano Gamberini, and Guiseppe Sartori. Abstract: The detection of faked identities is a major problem in security. Current memory- ...
Bitcoin Gold suffers double spend attacks, $17.5 million lost
1 day agoAn unknown threat actor has so far managed to steal over 388,000 BTG from cryptocurrency exchanges.
Electron patched the patch after researcher broke the patch
1 day agoJanuary's fix had blacklist flaw, now fixed In an update last week, the developers of the Electron shipped a patch to their January patch, and now, an infosec researcher has explained why.…
Tech companies to disclose foreign software probes under US Bill: Report
1 day agoNew source code disclosure rules could force US tech companies to reveal whether they allowed Chinese or Russian examination of software sold to the US military, Reuters has reported.
Zimmerman and friends: 'Are you listening? PGP is not broken'
1 day agoEFAIL furore not over yet, even though it's easy to fix ProtonMail has weighed into 2018's worst branded-bug PR disaster, EFAIL with a simple statement: “PGP is not broken”.…
Australia's Facebook investigation expected to take at least 8 months
1 day agoAustralia's acting Information and Privacy Commissioner told Senate Estimates her office is compiling the investigation strategy and working through those matters, expecting no determination to be made in the near future.
Trio indicted for 2017 'swatting' death
2 days agoFelony charges for "prank" that turned into police shooting Three men have been indicted for their roles in the fatal 2017 'swatting' of a Kansas home.…
Bendigo and Adelaide Bank ready to tackle open banking
2 days agoFlags cloud expansion.
Most Expensive Data Breaches Start with Third Parties: Report
2 days agoData breach costs increased 24% for enterprise victims and 36% for SMBs from 2017 to 2018, researchers found.
DOJ Sinkholes VPNFilter Control Servers Found in US
2 days agoThe US Department of Justice said the move aims to thwart the spread of the botnet as part of its investigation into Russian nation-state hacking group APT28 aka Fancy Bear.
Criminals stole about $1.6bn in cryptocurrency last year
2 days agoAs US Justice dept launches price manipulation probe.
What Will GDPR’s Impact Be On U.S. Consumer Privacy?
2 days agoGDPR may be going in effect Friday, but U.S. citizens have a ways to go before seeing similar privacy regulations from the U.S government.
FBI moves against VPNFilter botnet, claiming Russian involvement and 'national security threat'
2 days agoWarns admins that the malware could be very tough to remove The FBI says it is taking steps to stop the spread of the VPNFilter malware and botnet, warning that it's a national security issue.…
GDPR, WHOIS & the Impact on Merchant Risk Security Monitoring
2 days agoThe EU's General Data Protection Regulation will make it harder for law enforcement, forensic investigators, and others to track down everything from credit card fraud to child porn rings.
FBI Seeks To Thwart Cyber Attack On Ukraine
2 days ago
GDPR In Real Life: Transparency, Innovation, And Adoption Across Borders And Organizations
2 days ago
T-Mobile bug let anyone see any customer's account details
2 days agoExclusive: The exposed lookup tool let anyone run a customer's phone number -- and obtain their home address and account PIN, used to contact phone support.
Inside Facebook’s anti-sex trafficking hackathon
2 days agoTech giants put their rivalries aside for two days this week to code for a common cause: protecting children on the Internet. Deep inside Facebook’s Menlo Park headquarters, teams drawn from Uber, Twitter, Google, Microsoft, and Pinterest worked throug ...
Scam alert: Identifying and blocking "Google" robocall spam
2 days agoGoogle will not robocall you unless you specifically requested a call. While it's difficult to fight phone spam, we have some suggestions that may help make things a bit less annoying.
Privacy Survey Says: Americans Don't Want to Sell Their Data
2 days agoA new survey shows the extent to which Americans are reluctant to sell their personal information for any price.
Intel’s ‘Virtual Fences’ Spectre Fix Won’t Protect Against Variant 4
2 days agoThe new hardware-based protections Intel announced earlier in March it was embedding into new chips will only protect against Spectre and Meltdown – but not the newly disclosed Variant 4, sources said.
A Data Protection Officer's Guide to the Post-GDPR Deadline Reality
2 days agoThe EU's General Data Protection Regulation deadline is here -- now what? These four tips can help guide your next steps.
Malwarebytes Buys Binisoft for Firewall Management
2 days agoVendor plans to integrate Binisoft's Windows Firewall Control into the Malwarebytes endpoint protection platform.
GDPR in real life: Transparency, innovation, and adoption across borders and organizations
2 days agoPart two: Auditing data on premise and in the cloud, spurring innovation in machine learning and interpretable AI, and influencing organizations, consumers, and legislation all over the world, GDPR is here to stay.
More Than Half of Users Reuse Passwords
2 days agoUsers are terrible at passwords and the problem is only getting worse, according to an expansive study of more than 100 million passwords and their owners.
Amazon Comes Under Fire for Facial Recognition Platform
2 days agoPrivacy advocates say facial recognition can be an agent of authoritarian surveillance; others say it's an invaluable tool to combat kidnapping, locate lost children and track down criminals on the run.
GDPR: It's here, so what happens now?
2 days agoWhat does GDPR really mean for consumers and business? And will those giant fines really happen?
Google robocall scam: We're suing hustlers who pretend to be us, warns Google
2 days agoScam robocallers tell victims: call us now or your Google business listing will labeled closed.
Insurance startup leaks sensitive customer health data
2 days agoThe storage bucket wasn't protected with a password and was accessible by anyone.
ADHA chief tries to allay My Health Record fears
2 days ago'There is no big brother'.
Font Steganography
2 days agoInteresting research in steganography at the font level.
GDPR is already a success, whether you like it or not
2 days agoEurope's new privacy regulations show that the tech giants can be tamed.
Singapore warns eight cryptocurrency exchanges not to engage in unauthorised trading
2 days agoEight unnamed digital token exchanges have been told not to facilitate trading that involved securities or futures contracts without authorisation from the local regulator MAS, which also stopped an ICO.
London's Met Police: We won't use facial recognition at Notting Hill Carnival
2 days agoBut cops' trial of controversial tech will continue London cops will not use controversial and inaccurate facial recognition technology at this year's Notting Hill Carnival – in a departure from the trend over the previous two years.…
Instapaper on pause in Europe to fix GDPR compliance “issue”
2 days agoRemember Instapaper? The Pinterest-owned, read-it-later bookmarking service is taking a break in Europe — apparently while it works on achieving compliance with the region’s updated privacy framework, GDPR, which will start being applied from tomorro ...
My Health Record stands up cybersecurity centre to monitor access
2 days agoThose who choose to keep their My Health Record will also have a real-time log of who has accessed their information.
Talos finds new VPNFilter malware hitting 500K IoT devices, mostly in Ukraine
2 days agoCisco's Talos has published preliminary findings of the VPNFilter malware, which is targeting mostly consumer internet routers from a range of vendors, with some consumer NAS devices also hit.
Vic tightens speed camera security after WannaCry scare
2 days agoAdopts all watchdog's recommendations.
Victoria overhauls traffic camera network after WannaCry
2 days agoThe Victorian government has announced an overhaul of its traffic and speed camera network following infection from WannaCry in June.
Fraud Drops 76% for Merchants Using EMV, Says Visa
3 days agoA new report from Visa says that the shift to chip cards has resulted in dramatically reduced credit card fraud levels.
Growing Job Pressures Increase Risk of Burnout for Cybersecurity Professionals
3 days agoA new Trustwave survey shows information security executives and practitioners are under increasing pressure from trying to keep up with threats and compliance mandates.
The Good & Bad News about Blockchain Security
3 days agoBlockchain technology promises many things. But to succeed, it must offer users a better plan against hackers.
Hackers infect 500,000 routers and storage devices
3 days agoPossible preparation for state-sponsored attack.
Advanced VPNFilter malware menacing routers worldwide
3 days agoCisco's Talos team says 500k already pwned and leaking data A newly-disclosed malware infection has compromised more than 500,000 home and small office routers and NAS boxes.…
Schneider Electric Patches XXE Vulnerability In Software
3 days agoSchneider Electric on Tuesday issued fixes for a vulnerability its SoMachine Basic software that could result in disclosure and retrieval of arbitrary data.
James Comey: FBI Faces Deep Tech-Related Questions
3 days agoCloud migration and automated systems, data privacy and encryption all remain central issues for the FBI as it considers its mandate and role in the modern digital age.
Destructive 'VPNFilter' Attack Network Uncovered
3 days agoMore than 500K home/SOHO routers and storage devices worldwide commandeered in potential nation-state attack weapon - with Ukraine in initial bullseye.
Project Grapple
3 days agoPosted by Dave Aitel on May 23https://www.local10.com
/sports/liberty-city-kids
-form-unlikely-team-combi
ning-2-sports-while-learn
ing-life-lessons-https://
www.flograppling.com/vide
o/6044979-project-grapple
-the-jiu-jitsu-non-profit
-changing-liveshttps://ww
w. ...
The 6th Annual Volatility Plugin Contest and the Inaugural Volatility Analysis Contest!
3 days agoPosted by Andrew Case on May 23We are excited to announce that the 2018 Volatility Plugin Contest and the inaugural Volatility Analysis Contest are now accepting submissions until October 1, 2018. Winners of each contest will receive over $2,500 in cash ...
Re%3A Alternatives to viruscheckmate&In-Rep
ly-To=
3 days agoPosted by Alex Boldwin on May 23Hi Konrads,
I know:
hxxps://antiscan.me (https://link.getmailspri
ng.com/link/1526990922.lo
cal-1f8df3dd-cfd9-v1.2.1-
7e7447b6 ()
getmailspring com/0?redirect=https%3A%2
F%2Fantiscan.me&recip
ient=ZGFpbHlkYXZlQGxpc3Rz
LmltbXVuaX ...
Ahead of GDPR, Information Governance Comes into Its Own
3 days agoA full 98 percent of US enterprises have embarked on information governance (IG) projects, dramatically up from just 10 percent last year.
VPNFilter Malware Infects 500k Routers Including Linksys, MikroTik, NETGEAR
3 days agoResearchers warn of malware infecting 500,000 popular routers in a campaign mostly targeting the Ukraine, but also 54 other countries.
Brit Attorney General: Nation state cyber attack is an act of war
3 days agoAnd we'll, erm, name and shame bad actors MORE LOUDLY Hostile states targeting essential infrastructure and services in Britain should be dealt with in the same way as any other attack against the nation, the UK Attorney General said today.…
What Should Post-Quantum Cryptography Look Like?
3 days agoResearchers are tackling the difficult problem of transitioning toward a new mode of cryptographic protections that won't break under the pressure of quantum computing power.
Why even the best free VPNs are not a risk worth taking
3 days agoHere's a question. If you're not paying for your VPN service, where is the provider getting the money to run it? The answer might cause you to lose some sleep.
Is Threat Intelligence Garbage?
3 days agoMost security professionals in a recent survey said that threat intelligence doesn't work. So why all the hype?
Windows 10 Adoption Grew 75%, Adobe Flash Plummeted 188% in 2017: Report
3 days agoAuthentication data reveals an increase in Apple devices, poor mobile security, and the rapid disappearance of Flash from browsers.
Okta’s PassProtect checks your passwords with ‘Have I Been Pwned’
3 days agoOkta just launched a free browser extension for Google Chrome today. After installing PassProtect, your browser will compare the passwords you type with Troy Hunt’s Have I Been Pwned. This extension isn’t necessarily for you, tech savvy readers of Te ...
6 Steps for Applying Data Science to Security
3 days agoTwo experts share their data science know-how in a tutorial focusing on internal DNS query analysis.
Okta introduces ‘Sign in with Okta’ service
3 days agoConsider that there are millions of Okta users out there using the service to sign into their company applications with a single set of credentials. Yet getting customers to work together using Okta authentication was an enormous task for developers. Okt ...
Okta offers free multi-factor authentication with new product, One App
3 days agoOne App is designed for smaller organizations that need a more affordable entry point into Okta.
Okta rolls out new tools aimed at eliminating passwords
3 days agoWith new contextual access management capabilities, as well as a browser plugin to identify compromised passwords, Okta is trying to reduce the security risk that comes with passwords.
What is GDPR? Everything you need to know about the new general data protection regulations
3 days agoGeneral Data Protection Regulation, or GDPR, is coming. Here's what it means, how it'll impact individuals and businesses - and how to prepare for it.
Should Mark Zuckerberg be fired? Security professionals have their say
3 days agoDoes the Cambridge Analytics scandal -- and all the other Facebook privacy snafus -- warrant the removal of its CEO? A survey of security professionals offers their view.
LA County Nonprofit Exposes 3.2M PII Files via Unsecured S3 Bucket
3 days agoA misconfiguration accidentally compromised credentials, email addresses, and 200,000 rows of notes describing abuse and suicidal distress.
Firefox Accounts gets 2FA security: You can use Google Authenticator one-time codes
3 days agoPrefer to use Google Authenticator to log in to Firefox Accounts, or get push notifications on Firefox's mobile app?
Supermarket Shoplifting
3 days agoThe rise of self-checkout has caused a corresponding rise in shoplifting.
Verge blockchain comes under attack, again
3 days agoIt seems the same attack vector used to steal cryptocurrency reserves only just over a month ago is at fault.
Apple just made it easier for you to ask for all your data
3 days agoNew data and privacy tools for Apple users go live ahead of strict GDPR privacy regulations.
Over a dozen vulnerabilities uncovered in BMW vehicles
3 days agoTencent's Keen Security Lab found a number of serious bugs which could be exploited by attackers to remotely attack a number of BMW models.
Malwarebytes acquires Windows Firewall control firm BiniSoft
3 days agoThe startup develops Windows Firewall Control management tools for network endpoints.
Who's Afraid Of Kaspersky?
3 days ago
Bimmer bummer: Bavarian buggies battered by bugs
3 days agoHow much to hack a BMW? Ask Tencent A security audit conducted by Tencent's Keen Security LAb on BMW vehicles has given the luxury auto-maker a handy crop of bugs to fix – including a backdoor in infotainment units fitted since 2012.…
FBI inflated encrypted device figures, misleading public
3 days agoEncrypted cell phones were a major obstacle to criminal investigation. The FBI now admits the problem was much smaller than they'd originally reported.
FBI reportedly overestimated inaccessible encrypted phones by thousands
3 days agoThe FBI seems to have been caught fibbing again on the topic of encrypted phones. FBI director Christopher Wray estimated in December that it had almost 7,800 phones from 2017 alone that investigators were unable to access. The real number is likely less ...
Zuckerberg didn’t make any friends in Europe today
3 days agoSpeaking in front of EU lawmakers today Facebook’s founder Mark Zuckerberg namechecked the GDPR’s core principles of “control, transparency and accountability” — claiming his company will deliver on all that, come Friday, when a new European Un ...
Researchers Say More Spectre-Related CPU Flaws On Horizon
4 days agoYet another speculative execution side channel flaw has been disclosed in processors - and security experts warn that more may be out there.
New Spectre Variants Add to Vulnerability Worries
4 days agoVariants 3a and 4 build on the Spectre foundation, but how worried should enterprise security professionals really be?
Microsoft gets no special treatment for protected Azure instance
4 days agoBut will meet Australian standard in its own way.
TalkTalk data can Walk Walk thanks to four year-old router flaw
4 days agoResearcher says Wi-Fi passwords left wide open A years-old security flaw could be putting the security of some UK Wi-Fi networks at risk.…
US Senator to DOD CIO: 'Take Immediate Action' on HTTPS
4 days agoUS Senator Ron Wyden pens a letter to the Department of Defense CIO, urging stronger security on public-facing government sites.
FBI won't say how many investigations are hampered by encryption
4 days agoThe agency says encrypted phones harm its investigations, but it won't say how many are affected.
Las Vegas Most Insecure Cyber City in US; St. Louis Least Vulnerable
4 days agoForty-three percent chance of users connecting to high or medium-risk networks in Las Vegas - compared to less than 1% risk in least vulnerable areas, Coronet says.
Cybercriminals Battle Against Banks' Incident Response
4 days ago'Filess' attacks account for more than half of successful breaches of bank networks, new data shows.
GDPR 101: Keeping Data Safe Throughout the 'Supply Chain'
4 days agoThere are a lot of moving pieces involved with data collection, retention, and processing in the EU's new General Data Protection Regulation. Here's how to break down responsibilities between your security team and service providers.
Six Vulnerabilities Found in Dell EMC’s Disaster Recovery System, One Critical
4 days agoA pen-tester has found five vulnerabilities in Dell EMC RecoverPoint devices, including a critical RCE that could allow total system compromise.
We're all a bit of Trump when it comes to cybersecurity
4 days agoPresident Trump reportedly sees security procedures as too inconvenient. Unfortunately, he's not alone.
ZipperDown Vulnerability Could Hit 10% of iOS Apps
4 days agoA newly discovered vulnerability could affect thousands of iOS apps -- and Android users may not be spared.
Comcast Patches Router Bug That Leaked Some Wi-Fi Passwords
4 days agoA bug in Comcast’s activation website for its Xfinity routers leaked sensitive customer data.
Pet Tracker Flaws Expose Pets and Their Owners to Cybercrime
4 days agoHackers can exploit vulnerabilities in popular pet trackers to intercept location coordinates and access owners' personal data.
Companies may think they are ready for GDPR, but their employees are not
4 days agoWhile EU organizations have been scrambling to meet the GDPR deadline, more than half their employees are not ready, according to a UK survey from Egress Software Technologies....
BMW's in-car systems found to contain 14 flaws
4 days agoCan be remotely exploited under certain conditions.
Another Spectre-Like CPU Vulnerability
4 days agoGoogle and Microsoft researchers have disclosed another Spectre-like CPU side-channel vulnerability, called "Speculative Store Bypass." Like the others, the fix will slow the CPU down. The German tech site Heise reports that more are coming. I'm not sur ...
The State of Information Sharing: 20 Years after the First White House Mandate
4 days agoFinally! Actionable guidance for ISACs and enterprises on what threat intel to share, how to share it, and which key technologies will automate redaction and protect privacy.
Intel Responds to Spectre-Like Flaw In CPUs
4 days agoIntel on Monday acknowledged that its processors are vulnerable to another Spectre-like speculative execution side channel flaw that could allow attackers to access information.
Microsoft: We're giving you all Euro-style GDPR rights over how we use your data
4 days agoMicrosoft says the privacy rules it's introduced to meet the EU's new GDPR law will apply to users globally.
Yubico launches an SDK that lets iOS devs add support for its NFC keys
4 days agoYubico, the company behind the increasingly popular YubiKey security keys, today announced the launch of a new SDK for iOS developers that allows them to add support for two-factor authentication over NFC with the company’s YubiKey NEO keys. With this, ...
Yubico and LastPass bring NFC-based two-factor authentication to the iPhone
4 days agoPopular password manager LastPass delivers the first iOS app with support for the YubiKey NEO hardware-based authentication key with NFC support.
New Spectre variant 4: Our patches cause up to 8% performance hit, warns Intel
4 days agoIntel's Spectre variant 4 patch will be off by default, but users who turn it on are likely to see slower performance.
You've got to be kitten: Vet recruiter told to pay £1k after pinching info from ex-employer
4 days agoDon't horse about with personal data, watchdog warns A vet recruitment consultant that squirrelled away the personal details of almost 300 people from his former employer was today slapped on the wrists by the UK's information watchdog.…
Student awarded $36,000 for remote execution flaw in Google App Engine
4 days agoThe discovery was made by a university student who was not aware of how dangerous the vulnerability was.
Ahead of GDPR, UK fines University of Greenwich £120,000 over data breach
4 days agoInformation belonging to almost 20,000 staff and students was exposed in the security incident.
Roaming Mantis malware expands its reach
4 days agoNow targeting iOS devices.
Home Affairs thankful Australia's diversity allows for improved facial recognition
4 days agoArmed with multiple algorithms and training images based on a multicultural society, Home Affairs believes it gets a bronze medal in facial recognition.
DDOS scum have moved to Layer 7, says Cloudflare
4 days agoBad actors increasingly target application processes instead of flooding networks Attackers have noticed that the world is getting better at fending off massive DDoS attacks, and are trying to overwhelm application processes instead.…
Home Affairs denies Microsoft in breach of Signals Directorate conditions
4 days agoSenators are concerned that Microsoft has emerged with protected-level ASD certification, despite being located outside of Australia, with Alastair MacGibbon labelling the company a 'trusted' partner of government for many years.
Victoria's educational apps-for-students let creeps contact kids
4 days agoWorld+Dog can contact any student via a shared doc Google and the Victorian Department of Education have set parents, students, teachers, and the Office of the Australian Information Commissioner a poser: at what point does a feature become a vulnerabilit ...
Intel trials microcode for browser-exploitable Spectre bug
4 days agoSpectre Variant 4 can be triggered with Javascript.
Spectre chip security vulnerability strikes again; patches incoming
4 days agoA Google developer discovered a new way that a 'Spectre'-style check can be used to attack any computer running any operating system.