We have talked about new Office document exploits that don’t require macros to run. Here is a new one with more twists and turns than a mountain road. Trustwave has reported instances of a new attack that starts as a spam or phishing email with a Word document (.DOCX) attachment. Open the Word document and it will call out for another document download, this one in Rich Text ...
Tomorrow is World Password Day. WPD is observed on the first Thursday of May. So today would be a great day to take your passwords out to Valley Fair or a movie – wait a minute, that’s silly. You only can do that if you have all your password in a spiral notebook.
Password spraying is a new password exploit that is being used effectively against larger networks. It’s become enough of a problem to merit an alert from US-CERT entitled TA18-086A: Brute Force Attacks Conducted by Cyber Actors. Here’s how it works.
Typically, in a traditional brute-force password attack, the password cracking software runs a long list of every possible password against a system. ...
Continue Reading →The plug was pulled on the burger-turning robot designed to take a job away from expensive burger-flipping humans, because it’s too good. Turns out the robot made burger patties faster than humans could assemble the complete burger. It’s hard to be a bot! Full story on Naked Security
Continue Reading →
A quick Saturday digest of cybersecurity news articles from other sources.Anger against the Bay Area’s iconic social media firms has reached a “boiling point,” experts say.
Your website has been hijacked. You found out when a client called and said your website was flagged as malicious on Google, in their browser, or by their anti-malware application. After you get over the initial shock, embarrassment, and anger, you wonder what you need to do next. How do you get your website cleaned up and your ...
Over the last couple of weeks we have been taking a deeper dive into website security. If you have been using our articles to improve the security of your website, we are gratified.
Today we are adding some advanced security techniques to your defensive arsenal. Many of these solutions are specific to WordPress websites, but there are some that apply more globally. Some of these ideas may require some outside professional ...
Continue Reading →
If you have been following our series of articles on website security, we have shared information about how and why your website is an attractive target for cyber-criminals and other bad actors. Today we will give you some specific actions to take to secure your WordPress website. This information can be used on other types of websites too, ...
Ever wonder about the hard to find black on black power button? Or white on white? 
A quick Saturday digest of cybersecurity news articles from other sources.Microsoft’s quest to create a powerful quantum computer comes closer to reality with the help of an elementary particle.