Sophos – Page 143 – PossibleThreat Articles

Ransomware-seized New Orleans declares state of emergency

December 17, 2019 0 Comments data loss, Government security, Law & order, malware, new orleans, nola, nola ready, office of homeland security and emergency preparedness, Ransomware, ryuk, security threats, state of emergency

Credit to Author: Lisa Vaas| Date: Tue, 17 Dec 2019 12:14:47 +0000

There are signs that the attackers used the particularly pernicious Ryuk strain of ransomware.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/_IFQ_O3lT1A” height=”1″ width=”1″ alt=””/>

Security Sophos

Researchers discover weakness in IoT digital certificates

December 17, 2019 0 Comments digital certificate management, digital certificates, encrypted keys, encryption, Internet of Things, IoT, keyfactor, keys, private keys, public keys, security threats, vulnerability

Credit to Author: Danny Bradbury| Date: Tue, 17 Dec 2019 12:10:45 +0000

IoT devices are using weak digital certificates that could expose them to attack, according to a study released over the weekend.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/zJlF9M3_vf4″ height=”1″ width=”1″ alt=””/>

Security Sophos

Mozilla mandates 2FA security for Firefox developers

December 17, 2019 0 Comments 2-factor Authentication, 2fa, account hijacking, chrome, firefox, firefox extension, Google, Google Chrome, Mozilla, mozilla firefox, rogue extensions, two-factor authentication, Web Browsers

Credit to Author: John E Dunn| Date: Tue, 17 Dec 2019 10:57:53 +0000

Mozilla last week fired off an important memo to all Firefox extension developers telling them to turn on authentication (2FA) on their addons.mozilla.org (AMO) accounts.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/I5Jz7uFWAdM” height=”1″ width=”1″ alt=””/>

Security Sophos

Facebook employees’ payroll data nabbed in car smash-and-grab

December 17, 2019 0 Comments data loss, employee data, facebook, Law & order, payroll, Privacy, smash and grab

Credit to Author: Lisa Vaas| Date: Tue, 17 Dec 2019 10:01:48 +0000

Bye-bye, payroll data for 29,000 US Facebook employees that got left on an unencrypted drive in an employee’s car.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/SYgU8CTDbEs” height=”1″ width=”1″ alt=””/>

Security Sophos

“Dig up his body,” say creditors of deceased cryptocurrency player

December 16, 2019 0 Comments cotten, cryptocoin, cryptocurrency, quadriga, Uncategorized

Credit to Author: Paul Ducklin| Date: Mon, 16 Dec 2019 16:27:55 +0000

Apparently, dead men *can* tell tales… especially when millions and millions of cryptocoins are missing.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/PIWJk4YXAcw” height=”1″ width=”1″ alt=””/>

Security Sophos

Plundervolt – stealing secrets by starving your computer of voltage

December 16, 2019 0 Comments bwain, cve-2019-11157, plundervolt, side-channel, vulnerability

Credit to Author: Paul Ducklin| Date: Mon, 16 Dec 2019 11:16:59 +0000

Turns out that if you drop your CPU voltage just enough, it makes mistakes that could let you sneak in where you shouldn’t.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/_fEjGFVk1pA” height=”1″ width=”1″ alt=””/>

Security Sophos

Police get “unprecedented” data haul from Google with geofence warrants

December 16, 2019 0 Comments Android, arson, atf, bureau of alcohol, dragnet, firearms and explosives, geofence, geofencing, Google, Law & order, location data, Location history, Mobile, Privacy, reverse location search, sensorvault, tobacco, warrant

Credit to Author: Lisa Vaas| Date: Mon, 16 Dec 2019 11:14:20 +0000

Investigators are using geofence warrants to get anybody and everybody who’s near a crime at a given time.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/uI3cDCVNbEk” height=”1″ width=”1″ alt=””/>

Security Sophos

Npm patches two serious bugs

December 16, 2019 0 Comments cve-2019-16775, cve-2019-16776, cve-2019-16777, java, JavaScript, javascript packages, npm, Patch, Patches, security threats, vulnerability

Credit to Author: Danny Bradbury| Date: Mon, 16 Dec 2019 10:57:26 +0000

JavaScript package users have been warned to update due to a bug that could enable an attacker to infect them with malicious applications.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Yb7pRyvF7Uo” height=”1″ width=”1″ alt=””/>

Security Sophos

Google adds Verified SMS and anti-spam feature to Messages app

December 16, 2019 0 Comments Android, Google, google messages, messages app, Mobile, Operating Systems, rcs, rich communication services, security threats, SMS, SMS spam, Spam, spam protection for messages, verified sms system

Credit to Author: John E Dunn| Date: Mon, 16 Dec 2019 10:50:02 +0000

If webmail, WhatsApp and IM are killing SMS, someone might want to tell Google – as it continues to add new features to its Messages app.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/bOkj5uWtjPM” height=”1″ width=”1″ alt=””/>

Security Sophos

Emotion-detection in AI should be regulated, AI Now says

December 16, 2019 0 Comments affect recognition, AI, ai now, ai now institute, Artificial intelligence, BIPA, cogito, emotion detection, hirevue, Illinois, kate crawford, Law & order, Machine Learning, oxygen forensics, paul ekman

Credit to Author: Lisa Vaas| Date: Mon, 16 Dec 2019 10:42:34 +0000

It’s built on junk science, yet it’s being used to determine who gets hired, fired, insured, medicated and more, the research institute says.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/MWAhLktWa8c” height=”1″ width=”1″ alt=””/>