January 2020 – Page 26 – PossibleThreat Articles

INTERPOL Collaboration Reduces Cryptojacking by 78%

January 8, 2020 0 Comments cryptojacking, Cybercrime, interpol, Partners, Security

Credit to Author: Trend Micro| Date: Wed, 08 Jan 2020 14:40:55 +0000

Cybercriminals are often seen as having the upper hand over the “white hat” community. After all, they’re anonymous, can launch attacks from virtually anywhere in the world, and usually have the element of surprise. But there’s one secret weapon the good guys have: Collaboration. That’s why Trend Micro has always prioritized its partnerships with law…

The post INTERPOL Collaboration Reduces Cryptojacking by 78% appeared first on .

ComputerWorld Independent

Apple’s wants privacy laws to protect its users

January 8, 2020 0 Comments Apple, iOS, iPhone, Mobile, Security

Credit to Author: Jonny Evans| Date: Wed, 08 Jan 2020 06:54:00 -0800

Your iPhone (like most smartphones) knows when it is picked up, what you do with it, who you call, where you go, who you know – and a bunch more personal information, too.

Information is power

The snag with your device knowing all this information is that once the data is understood than that information can be shared or even used against you.

Jane Horvath, Apple’s senior director for global privacy, appeared at CES 2012 to discuss the company’s approach to smartphone security.

To read this article in full, please click here

Security Wired

Alleged Spy App ToTok Puts Apple in a Bind

January 8, 2020 0 Comments Security, Security / National Security

Credit to Author: Lily Hay Newman| Date: Wed, 08 Jan 2020 13:00:00 +0000

Apple and Google both banned ToTok after reports that it was a UAE government surveillance tool. After Google reinstated it, Apple has a hard choice to make.

Security Wired

TikTok Bugs Could Have Allowed Account Takeovers

January 8, 2020 0 Comments Security, Security / Cyberattacks and Hacks

Credit to Author: Lily Hay Newman| Date: Wed, 08 Jan 2020 10:00:00 +0000

As the social media app continues to gain popularity, security researchers are taking a closer look under the hood.

Security Sophos

REvil ransomware exploiting VPN flaws made public last April

January 8, 2020 0 Comments bad packets report, malware, pulse secure, Ransomware, revil, security threats, Sodinokibi, vpn, vulnerability

Credit to Author: John E Dunn| Date: Wed, 08 Jan 2020 12:39:53 +0000

Researchers report flaws, vendors issue patches, organisations apply them – and everyone lives happily ever after. Right? Wrong!<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/FOp5i99FBQk” height=”1″ width=”1″ alt=””/>

Security Sophos

YouTube to treat all kid-aimed videos like they’re COPPA-liable

January 8, 2020 0 Comments children online, Children's Online Privacy Protection Act, Coppa, Federal Trade Commission, FTC, Google, kids, Law & order, Privacy, youtube

Credit to Author: Lisa Vaas| Date: Wed, 08 Jan 2020 12:29:40 +0000

The FTC can fine content creators up to $42,530 per violation – even though they don’t collect, receive, nor have access to kids’ data.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/_7NLfWyE57Q” height=”1″ width=”1″ alt=””/>

Security Sophos

US warns of Iranian cyber threat

January 8, 2020 0 Comments cyberattackers, department of homeland security, Government security, iran, nation state hacking, qasem soleimani, security threats, US, us-iran tensions

Credit to Author: Danny Bradbury| Date: Wed, 08 Jan 2020 11:40:47 +0000

The DHS has issued three warnings in the last few days encouraging people to be on alert for physical and cyber attacks from Iran.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/jQIIJJ29FVQ” height=”1″ width=”1″ alt=””/>

Security Sophos

Facebook bans deepfakes, but not cheapfakes or shallowfakes

January 8, 2020 0 Comments cheapfakes, deepfakes, facebook, fake news, Machine Learning, Mark Zuckerberg, shallowfakes, Social networks

Credit to Author: Lisa Vaas| Date: Wed, 08 Jan 2020 11:20:02 +0000

Quick-n-sleazy edits are still OK, such as the 75% slowdown that made Nancy Pelosi slur or the edit that turned Joe Biden into a racist.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/7w8AhUNJatM” height=”1″ width=”1″ alt=””/>

ComputerWorld Independent

How to fix insecure LDAP binds

January 8, 2020 0 Comments Security

Prevent Windows admin credentials from being exposed in cleartext with this tip.

Independent Krebs Security

Tricky Phish Angles for Persistence, Not Passwords

January 7, 2020 0 Comments jeff jones, Latest Warnings, login.microsoftonline.com, michael tyler, microsoft office 365, microsoftonline.com, phishlabs, The Coming Storm, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Tue, 07 Jan 2020 21:35:40 +0000

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file storage service. Anyone who takes the bait will inadvertently forward a digital token to the attackers that gives them indefinite access to the victim’s email, files and contacts — even after the victim has changed their password.