Cybersecurity Archives - Page 56 of 60 - s0x • Austin Managed IT Services

24 Jan, 2020

Does Your Domain Have a Registry Lock?

Cybersecurity Arno Vis, CSC, DNSpionage, DNSSEC, E-HAWK, e-hawk.net, Latest Warnings, OpenProvider, PDR, Peter Cholnoky, Public Domain Registry, Raymond Dijkxhoorn, registrar lock, registry lock, The Coming Storm, Web Fraud 2.0, WhatsApp

If you’re running a business online, few things can be as disruptive or destructive to your brand as someone stealing your company’s domain name and doing whatever they wish with it. Even so, most major Web site owners aren’t taking full advantage of the security tools available to protect their domains from being hijacked. Here’s the story of one recent victim who was doing almost everything possible to avoid such a situation and still had a key domain stolen by scammers. …

22 Jan, 2020

Apple Addresses iPhone 11 Location Privacy Concern

Cybersecurity A Little Sunshine, apple, Brandon Butch, iPhone 11, Time to Patch, Ultra Wideband

20 Jan, 2020

DDoS Mitigation Firm Founder Admits to DDoS

Cybersecurity BackConnect Security LLC, DDoS-for-Hire, Free Software Foundation, mirai, Ne'er-Do-Well News, Richard Stallman, Tucker Preston, U.S. Justice Department, vDos

15 Jan, 2020

Patch Tuesday, January 2020 Edition

Cybersecurity CVE-2020-0601, Johns Hopkins University, Kenneth White, Matthew Green, MongoDB, Qualys, Time to Patch, Windows 10

Microsoft today released updates to plug 50 security holes in various flavors of Windows and related software. The patch batch includes a fix for a flaw in Windows 10 and server equivalents of this operating system that prompted an unprecedented public warning from the U.S. National Security Agency. This month also marks the end of mainstream support for Windows 7, a still broadly-used operating system that will no longer be supplied with security updates. …

13 Jan, 2020

Cryptic Rumblings Ahead of First 2020 Patch Tuesday

Cybersecurity Anne Neuberger, CERT Coordination Center, CERT-CC, crypt32.dll, microsoft, Microsoft CryptoAPI, national security agency, nsa, Patch Tuesday January 2020, Time to Patch, Will Dormann, windows

Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S. military and to other high-value customers/targets that manage key Internet infrastructure, and that those organizations have been asked to sign agreements preventing them from disclosing details of the flaw prior to Jan. 14, the first Patch Tuesday of 2020. …

13 Jan, 2020

Phishing for Apples, Bobbing for Links

Cybersecurity Apple phishing, Latest Warnings, Web Fraud 2.0

Anyone searching for a primer on how to spot clever phishing links need look no further than those targeting customers of Apple, whose brand by many measures has emerged as the most targeted. Past stories here have examined how scammers working with organized gangs try to phish iCloud credentials from Apple customers who have a mobile device that is lost or stolen. Today’s piece looks at the well-crafted links used in some of these lures. …

11 Jan, 2020

Alleged Member of Neo-Nazi Swatting Group Charged

Cybersecurity Atomwaffen Division, Chanz, Deadnet, Doxbin, fbi, John William Kirby Kelley, Ne'er-Do-Well News, Zheme

9 Jan, 2020

Lawmakers Prod FCC to Act on SIM Swapping

Cybersecurity Ajit Pai, Anna Eshoo, Edward Markey, FCC, Michael Terpin, Nicholas Truglia, Ron Wyden, Sherrod Brown, SIM Swapping, Ted Lieu, U.S. Federal Communications Commission, Yvette Clarke

Crooks have stolen tens of millions of dollars and other valuable commodities from thousands of consumers via “SIM swapping,” a particularly invasive form of fraud that involves tricking a target’s mobile carrier into transferring someone’s wireless service to a device they control. But the U.S. Federal Communications Commission (FCC), the entity responsible for overseeing wireless industry practices, has so far remained largely silent on the matter. Now, a cadre of Senate lawmakers is demanding to know what, if anything, the agency might be doing to track and combat SIM swapping. …

7 Jan, 2020

Tricky Phish Angles for Persistence, Not Passwords

Cybersecurity Jeff Jones, Latest Warnings, login.microsoftonline.com, Michael Tyler, Microsoft Office 365, microsoftonline.com, PhishLabs, The Coming Storm, Web Fraud 2.0

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file storage service. Anyone who takes the bait will inadvertently forward a digital token to the attackers that gives them indefinite access to the victim’s email, files and contacts — even after the victim has changed their password. …

6 Jan, 2020

The Hidden Cost of Ransomware: Wholesale Password Theft

Cybersecurity A Little Sunshine, alex holden, Hold Security, Karen Christianson, Mark Schafer, Ransomware, Ryuk, SVA Consulting, The Coming Storm, VCPI

Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and frequently do siphon every single password stored on each infected endpoint. The result of this oversight may offer attackers a way back into the affected organization, access to financial and healthcare accounts, or — worse yet — key tools for attacking the victim’s various business partners and clients. …

s0x • Austin Managed IT Services

s0x • Austin Managed IT Services

Category Archives: Cybersecurity