Security News > 2018

Analysis: Security Elements of 'Trusted Exchange Framework'
2018-01-05 21:48

Some Proposals More Specific Than What's Required Under HIPAAFederal regulators have released a draft of a trusted health information exchange framework with some detailed security components that...

PyCryptoMiner ropes Linux machines into Monero-mining botnet
2018-01-05 21:06

A Linux-based botnet that has been flying under the radar has earned its master at least 158 Monero (currently valued around $63,000). The malware The botnet is based on a crypto-miner written in...

Spectre and Meltdown Attacks Against Microprocessors
2018-01-05 20:22

The security of pretty much every computer on the planet has just gotten a lot worse, and the only real solution -- which of course is not a solution -- is to throw them all away and buy new ones....

Gifts and Data - Personalization Brings Meaning
2018-01-05 19:27

The holidays are now behind us and we’re getting back to our routines. As we do, we start putting to use all the gifts we’ve received from family, friends, colleagues and neighbors. Each year I’m...

DHS insider breach resulted in theft of personal info of staff and people involved in investigations
2018-01-05 19:01

The US DHS Office of Inspector General (OIG) has confirmed that the “privacy incident” discovered in May 2017 resulted in the theft of personally identifiable information of DHS employees and...

New Book Coming in September: "Click Here to Kill Everybody"
2018-01-05 18:45

My next book is still on track for a September 2018 publication. Norton is still the publisher. The title is now Click Here to Kill Everybody: Peril and Promise on a Hyperconnected Planet, which I...

Browser makers move to mitigate risk of Spectre browser attacks
2018-01-05 16:24

Apple has confirmed that it has already pushed out security updates for iOS, macOS and tvOS that mitigate the danger of users being affected by Meltdown attacks. (watchOS did not require...

Microsoft Word subDoc Feature Allows Password Theft
2018-01-05 16:08

A feature in Microsoft Word that allows for the loading of sub-documents from a master document can be abused by attackers to steal a user’s credentials, according to Rhino Security Labs. read more

Several Vulnerabilities Patched in Advantech WebAccess
2018-01-05 15:13

Taiwan-based industrial automation company Advantech has released an update for its WebAccess product to address several vulnerabilities, including ones rated high severity. read more