Wednesday, December 30, 2015

Sophos Labs:The State of Ransomware

A new paper (free, no registration) on the trends of recent ransomware.

Unchecky:Keeping Unwanted Software From Being Installed

The software the "unchecks" all the default boxes during software installs to prevent unintentional installs of "value added" software.

Google Glass 2.0

WSJ has a video of the newest Glass from Google.

Microsoft Storing User's Disk Encryption Keys "in the Cloud."

If you login with your Microsoft ID, and use disk encryption provided by Windows, then Microsoft is backing up your encryption key.

Google nukes AVG Chrome Plugin

AVG's "Web Tune Up" for Chrome introduces insecurities and has been disabled by Google.  This plugin is installed by default when a user installs AVG anti virus.  The plugin has been updated.

Flash Update

Adobe has released a new patch for Flash.  Update if you use it, get rid of it if you do not.

Wednesday, December 16, 2015

64 bit Firefox for Windows

Firefox has finally released a 64 bit version for Windows but it does not support plugins. 

PSN and Xbox Live Down for a Week Vows Hacker

The Phantom Squad says they will take down both gaming networks during the holidays.

Tuesday, December 15, 2015

Make Sure to Patch Microsoft Office

Word is the current target of an upgraded exploit this week.  Make sure you patch your Office regularly.  Mac Users or Windows Users.

Thursday, December 10, 2015

Chrome Updated

Chrome get updated and Chrome for Android gets Safe Browsing.

Xboxlive.com Private Keys Now Public

Somehow the Xboxlive.com TLS private keys got leaked and now they can be used for a MITM attack.  Automatic updates on Windows and most browsers will eliminate this problem soon.

Patch Tuesday for Apple

Apple has released patches for OS X, IOS, and Safari.  Patch ASAP.

Wednesday, December 9, 2015

If You Have Sensitive Data, Protect It!

Password on a PostIt, unencrypted spreadsheets, and shared Google Drive show a massive failure in security for a Dutch Telecom.  

Tuesday, December 8, 2015

US Post Office Will Email Images of Your Envelopes

USPS will be testing a service of emailing users photos of the envelopes of their postal mail.

It's Patch Tuesday

Microsoft has released patches for 10+ critical vulnerabilities in Internet Explorer, Windows, Office, and others.   Adobe has released patches for Flash as well.  Patch ASAP.

Nemesis Malware Targets Banking Computers

A new malware strain, targeting PCs used in financial institutions and payment processing, infects the volume boot record and can function almost entirely without the need for Windows.

Monday, December 7, 2015

Dropbox Kills Mailbox

Mailbox's last day is 02/26/2016.

Proposed French Law:No Tor, No Free WiFi

A proposed law will block Tor in France and make it illegal to offer "free, unauthenticated" WiFi.

Upgrade to Internet Explorer 11, Other Versions No Longer Supported

Users of Windows 7 and new versions of Windows need to upgrade to IE 11 as the other versions of IE are no longer officially supported.

Friday, December 4, 2015

"Hello Barbie" Vulnerabilities

If you plan on buying the "Hello Barbie" doll, you should read about the list of vulnerabilities and concerns.

EFF Launches Bug Bounties

Find vulnerabilities in their software, earn cash.

Hacker Using LinkedIn for Social Engineering

Using a faked LinkedIn account the bad guys could send you requests for information or ask you to do something.

Android Apps and Millions of IoT Devices at Risk from Old libupnp Library

Linux (Android) Apps and IoT devices that use an older libupnp library (for Universal Plug n Play) are at risk to remote code execution. 

CryptoWall 4.0 Steals Your Passwords Before Encrypting Your Files

The malware then tries to login to your accounts and spread itself via malicious links in social media  postings.  I would speculate that the malware could potentially log into your online accounts and change your passwords holding the new passwords for ransom.  It could also delete, rename, or "encrypt" your online storage.

Thursday, December 3, 2015

VR of Chernobyl

Maybe we'll be able to use our Google Cardboard to view the irradiated wasteland.

Google's Cardboard Camera App

Using an Android phone you can now created "3D" virtual reality photos.