January 2020 – Page 24 – PossibleThreat Articles

Ransomware pounces on California schools, Las Vegas trounces attack

January 10, 2020 0 Comments las vegas, malware, pittsburg, pittsburg unified school district, Ransomware, security threats

Credit to Author: Lisa Vaas| Date: Fri, 10 Jan 2020 10:43:29 +0000

We’ll have one serving of whatever Las Vegas is eating and wish Pittsburg Unified School District good luck with getting unstuck.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/ZYdKmx-4lMo” height=”1″ width=”1″ alt=””/>

Security Sophos

Fake-review purge: Facebook boots 188 groups, eBay bans 140 shills

January 10, 2020 0 Comments cma, competition and markets authority, ebay, facebook, fake reviews, Law & order, review sites, sock puppets, tripadvisor, yelp

Credit to Author: Lisa Vaas| Date: Fri, 10 Jan 2020 10:06:00 +0000

After a poke from the UK’s watchdog, the companies promised to beef up filters to strain out those who write, buy and sell fluffy nonsense.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/7xU4phR6tX8″ height=”1″ width=”1″ alt=””/>

Microsoft Security

Changing the monolith—Part 1: Building alliances for a secure culture

January 9, 2020 0 Comments cybersecurity

Credit to Author: Todd VanderArk| Date: Thu, 09 Jan 2020 17:00:23 +0000

Digital transformation is a daunting task. In this series, I explore how change is possible when addressing the components of people, process, and technology that make up the organization.

The post Changing the monolith—Part 1: Building alliances for a secure culture appeared first on Microsoft Security .

Independent Krebs Security

Lawmakers Prod FCC to Act on SIM Swapping

January 9, 2020 0 Comments ajit pai, anna eshoo, edward markey, FCC, michael terpin, Nicholas Truglia, ron wyden, sherrod brown, SIM swapping, ted lieu, u.s. federal communications commission, yvette clarke

Credit to Author: BrianKrebs| Date: Thu, 09 Jan 2020 19:44:55 +0000

Crooks have stolen tens of millions of dollars and other valuable commodities from thousands of consumers via “SIM swapping,” a particularly invasive form of fraud that involves tricking a target’s mobile carrier into transferring someone’s wireless service to a device they control. But the U.S. Federal Communications Commission (FCC), the entity responsible for overseeing wireless industry practices, has so far remained largely silent on the matter. Now, a cadre of Senate lawmakers is demanding to know what, if anything, the agency might be doing to track and combat SIM swapping.

ComputerWorld Independent

Mozilla patches Firefox zero-day as attackers exploit flaw

January 9, 2020 0 Comments Browsers, Security

Credit to Author: Gregg Keizer| Date: Thu, 09 Jan 2020 11:46:00 -0800

Just one day after releasing Firefox 72, Mozilla updated the browser with a fix to shut down active attacks, the company acknowledged.

On Wednesday, Mozilla issued Firefox 72.0.1, which included one change: A patch for the vulnerability identified as CVE-2019-17026. “We are aware of targeted attacks in the wild abusing this flaw,” Mozilla said in the short description of the flaw, signaling that criminals were already leveraging the zero-day vulnerability, the term applied because there no time elapses between patching and exploitation.

To read this article in full, please click here

ComputerWorld Independent

Your Windows PC may become collateral damage in any conflict with Iran

January 9, 2020 0 Comments cyber attacks, Security, Windows

Credit to Author: Preston Gralla| Date: Thu, 09 Jan 2020 10:18:00 -0800

When Iran launches cyberattacks in revenge for the killing of Major Gen. Qasem Soleimani — which it almost certainly will do — the attack vector, as always, will be Windows. And when that happens, your PC and your business’s PCs will be right in the crosshairs. Here’s why — and how you can protect your machines and your business.

A long history of U.S.-Iranian cyberwarfare

To understand the coming cyberattacks, it’s useful to look back. For more than a decade, the U.S. and Iran have engaged in low-level cyberwarfare, with occasional bursts of higher-level attacks. The most destructive of them was Stuxnet, launched in 2009 by the U.S. and Israel against Iran’s nuclear program. It exploited four zero-day flaws in Windows machines, which controlled the centrifuges Iran used to create nuclear material that can be used in nuclear weapons.

To read this article in full, please click here

MalwareBytes Security

United States government-funded phones come pre-installed with unremovable malware

January 9, 2020 0 Comments Android, android malware, android/trojan.dropper.agent.umx, android/trojan.hiddenads, china, Mobile, mobile malware, pre-installed mobile malware, pre-installed software, trojan

Credit to Author: Nathan Collier| Date: Thu, 09 Jan 2020 16:00:00 +0000

A US-funded government assistance program is selling budget-friendly mobile phones that come pre-installed with unremovable malicious apps. Malwarebytes Labs investigates the malware’s origins.

Categories:

Android

Tags: android malware Android/Trojan.Dropper.Agent.UMX Android/Trojan.HiddenAds china Mobile mobile malware pre-installed mobile malware pre-installed software trojan

Security Sophos

Browser zero day: Update your Firefox right now!

January 9, 2020 0 Comments cve-2019-17026, firefox, Internet Explorer, mozilla firefox, Patch, qihoo 360, vulnerability, zero day

Credit to Author: John E Dunn| Date: Thu, 09 Jan 2020 14:00:06 +0000

Firefox has issues an emergency 72.0.1 patch to fix a zero day vulnerability.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/8rtXfw6rWto” height=”1″ width=”1″ alt=””/>

Security Wired