There is a new email attachment exploit making the rounds, that uses a file type called a disk image. The file extension for this kind of file is ISO. ISO files are not inherently dangerous, and in the exploit work much the same way that a ZIP attachment works. This file type can sneak past email security filters because it is generally seen as benign, ...
What if cyber-criminals or enemy nations could take over the computer control systems that run electric utilities, water systems, or traffic control systems for traffic lights and commuter trains. The effects could be disastrous.
We have written about these systems before. These are known as SCADA (supervisory control and data acquisition) or ICS (industrial control systems). One of the claims of the industries that use SCADA systems is that they are ...
Continue Reading →
Registering common misspellings of popular website domain names is a big business. A recent study found that 80% of all possible one-character typographical variants of Facebook, Google, and Apple are registered. Registering close misspellings of domain names is know as “typosquatting.”
Security company Sophos recently analysed all the possible one-letter variations of six popular websites, a whopping 2249 unique site names. Of the 2249 possibilities, 67% or 1502 domain names were actually registered. ...
Continue Reading →
A quick Saturday digest of cybersecurity news articles from other sources.01/29/2018 08:27 AM EST Original release date: January 29, 2018
Tax Identity Theft Awareness Week is January ...
Continue Reading →
If your business accepts credit cards for payment, then your a subject to the regulations of the Payment Card Industry. This is known as PCI-DSS Compliance. PCI compliance company Security Metrics recently released an infographic that shows the main compliance failures that lead to credit card breaches in 2017. Here are some of the startling take-aways:
When you see the secure HTTPS protocol at the beginning of a web address, or see the green “secure site” padlock symbol, does this mean that the site is safe? Unfortunately, the answer is NO. There is some confusion among computer users about what HTTPS really means. This confusion is being exploited by cyber-criminals running phishing exploits.
HTTPS or secure hypertext ...
Continue Reading →
The most devastating exploit that can happen to you is to have your email account hijacked. We have spilled a lot of pixels on this subject (see below). The reason we find this so dangerous is that it is that this is the attack most likely to happen to you.
Google recently released a study that analyzed how Gmail accounts are hijacked. If you have an Android smartphone, you have a ...
Continue Reading →
Every year some pundit declares that the password will soon be dead. I have been proclaiming for several years now that the password, by itself, is no longer a suitably strong form of security, and have been a champion for two-factor authentication.
Microsoft has recently stated that their Windows Hello facial recognition system is a suitable replacement for passwords. Windows Hello ...
Continue Reading →
As long as we are on the subject of election rigging and tampering, it is notable that Congress has finally weighed in on the subject of insecure and hackable electronic voting machines. According to a recent TechDirt article, “A new bipartisan bill has been introduced, called the Secure Elections Act, that would actually ...
I recently caught a story on the BBC World News via PBS. Anders Thornberg, the director of Swedish Security Services (SAPO) was accusing the Russians of engaging in social media driven misinformation campaign very similar to what happened in recent elections in France and Germany, and in the US during the last Presidential Election. Evidently Putin is concerned that Sweden may join NATO, and is actively campaigning for candidates who are opposed to NATO.
