Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

Detecting Credit Card Skimmers

Modern credit card skimmers hidden in self-service gas pumps communicate via Bluetooth. There’s now an app that can detect them:

The team from the University of California San Diego, who worked with other computer scientists from the University of Illinois, developed an app called Bluetana ...

Continue Reading →
12
OCT
0

Android, Apple, cybersecurity, email, privacy, smartphones, Software vulnerability, Weekend Update

, ,

Lateral Phishing – A New Threat to Business Email

Phishing is getting better and harder to detect.  One new trend is using hijacked business email accounts to pivot further into a business, by using the built in trust of the company’s email domain to send phishing emails that appear to come from coworkers.  These phishing emails from trusted sources are used to hijack other email accounts in the same company.  This ...

Continue Reading →
31
JUL
0

Computers and Internet, cybersecurity, email, multi-factor authentication, passwords, Phishing

Does Microsoft’s Office365 Cloud Service Have Security Flaws?

Have you recently migrated to Microsoft Office 365 for your company email services?  US-CERT and CISA recently released  Analysis Report (AR19-133A) Microsoft Office 365 Security Observations that described several security flaws or weaknesses inherent in the default deployment of O365.

Here are the findings of that report.  The good news is that these are shortcomings with the default, out-of-box experience.  These issues can be corrected through configuration.  ...

Continue Reading →
29
MAY
0

cybersecurity, email, Software vulnerability

, ,

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

Tell Congress to Restore Full Net Neutrality Protections

From the Electric Frontier Foundation (EFF).  Do you  like what has happened to your cable and Internet service?  In December 2017, the FCC voted to roll back the 2015 Open Internet Order, giving Internet service providers (ISPs) free reign to engage in unfair and discriminatory data practices. That ...

Continue Reading →
9
MAR
0

cybersecurity, email, malware, Phishing, Weekend Update

, , ,

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

OUCH! Ransomware Attack Via MSP Locks Customers Out of Systems

If your computer technical support is provided by an outside vendor, you need to know this.  We have warned about this problem before.

Earlier this week, an unidentified threat actor managed to launch a ransomware attack resulting in the encryption of between 1,500 to 2,000 ...

Continue Reading →
16
FEB
0

artificial intellegence, email, Internet of Things, law and policy, ransomware, robotics, Weekend Update

, ,

It’s Not Just Phishing – Other Ways Email Is Exploited – Part 2

On Monday we investigated five ways that your email account can be used to initiate an cyber-attack against you.  Today we finish up this article with another five email attack vectors.

  • Clickjacking – In traditional click-jacking, a malicious email link actually direct you to a malicious or impostor site.  A new version places something that looks like a dirt spot or hair on the web page and when the user tries ...
Continue Reading →
8
FEB
0

cybersecurity, email, Identity Theft

It’s Not Just Phishing – Other Ways Email Is Exploited – Part 1

Phishing gets all the press when it comes to email account exploits. This is because phishing is the attack vector for over 90% of all cyber-attacks.  But there are other ways that bad actors, cyber-criminals, and state-sponsored cyber-warriors use email that don’t involve phishing at all, and the outcomes of these exploits can be as bad or even worse than phishing.  Today and Wednesday we will take a look at ...

Continue Reading →
6
FEB
0

Computers and Internet, cybersecurity, email

Page 22 of 22 «...101819202122