TikTok Bugs Could Have Allowed Account Takeovers

Credit to Author: Lily Hay Newman| Date: Wed, 08 Jan 2020 10:00:00 +0000
As the social media app continues to gain popularity, security researchers are taking a closer look under the hood.
Read more
Credit to Author: Lily Hay Newman| Date: Wed, 08 Jan 2020 10:00:00 +0000
As the social media app continues to gain popularity, security researchers are taking a closer look under the hood.
Read more
Credit to Author: Louise Matsakis| Date: Mon, 06 Jan 2020 17:00:24 +0000
Forget Portal. This year, Facebook is marketing itself as a privacy crusader.
Read more
Credit to Author: Gregg Keizer| Date: Tue, 07 Jan 2020 04:53:00 -0800
A week from now, Microsoft will serve customers with the last for-free Windows 7 security update, in effect retiring the 2009 operating system.
However, hundreds of millions of personal computers will still power up thanks to Windows 7 on Jan. 14, and for an indeterminate timespan after that date. Windows 7 may be retiring, but it’s not disappearing.
Microsoft admitted as much more than a year ago when it announced Extended Security Updates (ESU), a program for commercial customers who needed more time to ditch Windows 7. ESU would provide patches for some security vulnerabilities for as long as three years. For a fee.
(Insider Story)
Read more
Credit to Author: Woody Leonhard| Date: Mon, 06 Jan 2020 09:55:00 -0800
It was the kind of month admins dread: Mysterious problems on hundreds of machines, with no apparent cause or cure. Toss in the holidays, and we had a whole lot of Mr. and Ms. Grinches in the industry.
Fortunately, it looks like the problems have been sorted out at this point. Individual users had many fewer problems. Microsoft’s left and right hands still aren’t talking on the 1909 team, but what else is new…
Microsoft dropped a new Servicing Stack Update for Windows 7 on Dec. 10, and it gummed up the works for many. Here’s a good summary on Reddit from poster Djaesthetic:

Credit to Author: Michelle Davidson| Date: Mon, 06 Jan 2020 09:46:00 -0800
If blockchain felt more like hype than reality in 2019, prepare for that to change. Industry watchers expect 2020 to be the year the distributed ledger technology matures and we see use cases that go beyond cryptocurrency.
Areas where experts envision growth include data security, the supply chain and electronic health records.
“Someone’s gonna hit me, but I think blockchain as it relates to data security (think access management) is going to have some landmark use cases in 2020,” Siobhan Climer, science and technology writer at Mindsight, said during a recent IDG TECH(talk) Twitter chat.
Credit to Author: Trend Micro| Date: Mon, 06 Jan 2020 13:15:04 +0000

The past 12 months have been another bumper year for cybercrime affecting everyday users of digital technology. Trend Micro blocked more than 26.8 billion of these threats in the first half of 2019 alone. The bad news is that there are many more out there waiting to steal your personal data for identity fraud, access…
The post The Everyday Cyber Threat Landscape: Trends from 2019 to 2020 appeared first on .
Read more
Credit to Author: Lucas Mearian| Date: Mon, 06 Jan 2020 03:00:00 -0800
Frustration over a growing number of privacy and security failuresin recent years is driving the creation of digital identities controlled only by those whose information they contain.
Known as “self-sovereign identities,” the digital IDs will be used by consumers, businesses, their workers and governments over the next few years to verify everything from credit worthiness and college diplomas to licenses and business-to-business credentials.
“We are slowly graduating from crawling to walking. It takes one to two years ’til we have reliable capabilities to spark meaningful decentralized identity adoption,” said Homan Farahmand, a senior research director at Gartner. “A major non-technical hurdle is for organizations to learn the concept and take the necessary steps to appropriately adapt their business processes to decentralized identity ecosystems.”

Credit to Author: Brian Barrett| Date: Sat, 04 Jan 2020 14:00:00 +0000
A million-dollar email scam, a Chinese hacking campaign, and more of the week’s top security news.
Read more