Security News > 2018 > January

Spectre and Meltdown Attacks Against Microprocessors
2018-01-05 20:22

The security of pretty much every computer on the planet has just gotten a lot worse, and the only real solution -- which of course is not a solution -- is to throw them all away and buy new ones....

Gifts and Data - Personalization Brings Meaning
2018-01-05 19:27

The holidays are now behind us and we’re getting back to our routines. As we do, we start putting to use all the gifts we’ve received from family, friends, colleagues and neighbors. Each year I’m...

DHS insider breach resulted in theft of personal info of staff and people involved in investigations
2018-01-05 19:01

The US DHS Office of Inspector General (OIG) has confirmed that the “privacy incident” discovered in May 2017 resulted in the theft of personally identifiable information of DHS employees and...

New Book Coming in September: "Click Here to Kill Everybody"
2018-01-05 18:45

My next book is still on track for a September 2018 publication. Norton is still the publisher. The title is now Click Here to Kill Everybody: Peril and Promise on a Hyperconnected Planet, which I...

Browser makers move to mitigate risk of Spectre browser attacks
2018-01-05 16:24

Apple has confirmed that it has already pushed out security updates for iOS, macOS and tvOS that mitigate the danger of users being affected by Meltdown attacks. (watchOS did not require...

Microsoft Word subDoc Feature Allows Password Theft
2018-01-05 16:08

A feature in Microsoft Word that allows for the loading of sub-documents from a master document can be abused by attackers to steal a user’s credentials, according to Rhino Security Labs. read more

Several Vulnerabilities Patched in Advantech WebAccess
2018-01-05 15:13

Taiwan-based industrial automation company Advantech has released an update for its WebAccess product to address several vulnerabilities, including ones rated high severity. read more

Detecting Adblocker Blockers
2018-01-05 15:00

Interesting research on the prevalence of adblock blockers: "Measuring and Disrupting Anti-Adblockers Using Differential Execution Analysis": Abstract: Millions of people use adblockers to remove...

Google Play Removes 22 Malicious ‘LightsOut’ Apps From Marketplace
2018-01-05 14:39

Google removed 22 malicious adware apps ranging from flashlights, call recorders to wifi signal boosters that together were downloaded up to 7.5 million times from the Google Play marketplace.