Now let me guess your password

Credit to Author: Sharky| Date: Mon, 16 Sep 2019 03:00:00 -0700

This pilot fish IT guy gets a call from an irate client one day complaining (incorrectly) that we had changed his administrative password on his Windows 2000 server without his knowledge.

“As I walked him through the logon process, I asked if the username in the login prompt was ‘Administrator,’ says fish. “His reply: “Oh, do I need to change that?”

Feed the Shark! Send me your true tales of IT life at sharky@computerworld.com. You can also subscribe to the Daily Shark Newsletter.

To read this article in full, please click here

Read more

This Week in Security News: IoT Devices Are a Target in Cybercriminal Underground

Credit to Author: Jon Clay (Global Threat Communications)| Date: Fri, 13 Sep 2019 13:18:33 +0000

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn how fileless malware abuses PowerShell. Also, read how Trend Micro researchers are pulling back the curtain on the cybercriminal underground to warn consumers and businesses about…

The post This Week in Security News: IoT Devices Are a Target in Cybercriminal Underground appeared first on .

Read more

Mozilla previews Firefox VPN, will charge for service at some point

Credit to Author: Gregg Keizer| Date: Thu, 12 Sep 2019 13:09:00 -0700

Mozilla this week resurrected its Test Pilot preview program, offering Firefox users a free VPN-like service to encrypt browser-to-site-and-back transmissions over public networks.

“The Firefox Private Network is an extension which provides a secure, encrypted path to the web to protect your connection and your personal information anywhere and everywhere you use your Firefox browser,” wrote Marissa Wood, vice president of product, in a post to the Mozilla blog.

The free service is available immediately, but only to U.S.-based users running the desktop version of Firefox. A Firefox account – typically used for syncing copies of the browser on multiple devices – and an accompanying add-on are required.

To read this article in full, please click here

Read more

Heads up: Microsoft is back to snooping with this month’s Win7 and 8.1 'security-only' patches

Credit to Author: Woody Leonhard| Date: Thu, 12 Sep 2019 09:32:00 -0700

Two months ago, the July Win7 security-only patch was found to install telemetry software, triggered by newly installed scheduled tasks called ProgramDataUpdater, Microsoft Compatibility Appraiser, and AitAgent. As best I can tell, Microsoft never admitted that its security-only patch dropped a telemetry component.

The August security-only update didn’t include that bit of snooping, so it looked like the July snooping was a one-off aberration.

To read this article in full, please click here

Read more