Security News
This week, a Trustwave security researcher disclosed a privilege escalation flaw in Huawei's USB LTE dongles. Huawei LTE driver autoruns with maximum permissions.
USB ports in any organization's network need to be controlled because connected devices such as USB drives and smartphones can be used to transfer malware to computers or extract data assets. Blocking at the client-side continues until the device is removed from the computer or the device is authorized from the control at server-side.
DataLocker announced the release of an entirely new breed of encrypted USB drive. The DL4 FE changes the game for security professionals by providing bulletproof security and simple remote management in a small-form-factor USB drive with capacities up to 15.3 TB. "The onslaught of attacks by state actors, hackers, and cyber cartels continues. Threat actors are trying to exfiltrate terabytes of data to hold for ransom. Some want access to essential IT systems for later exploitation."
Microsoft has released the KB4586819 non-security preview cumulative update for Windows 10 versions 1809, 1903, and 1909, with fixes for game crash issues and for USB 3.0 hubs causing connected devices to stop working. Windows 10 users who install the KB4586819 update may experience issues with system and user certificates getting lost when updating from Windows 10 1809 to later versions using outdated update media.
Microsoft has released the Windows 10 1909 KB4580386 monthly "C" release preview cumulative update with quality improvements and fixes for Microsoft Xbox Game Pass, USB printer, and screen flashing issues. This preview cumulative update addresses an issue preventing Microsoft Xbox Game Pass users from playing some games that they were eligible to play and fixes a reliability issue that causes the display to flash constantly.
Honeywell announces the launch of Honeywell Secure Media Exchange R201.1, an enterprise software offering to better protect users from advanced malware and firmware-based cybersecurity attacks from USB drives and other removable media. "We are excited to expand Honeywell SMX as an enterprise security solution to include hardware device management with our TRUST V2 ," said Jeff Zindel, vice president and general manager, Honeywell Connected Enterprise Cybersecurity.
Kingston Digital announces the availability of the 128GB DataTraveler 2000 encrypted USB flash drive. DataTraveler 2000 features an alphanumeric keypad that allows users to lock the drive with a word or number combination for an easy-to-use PIN, providing an extra layer of protection.
Yubico on Wednesday announced the release of YubiKey 5C NFC, the latest YubiKey 5 series security key, which allows users to authenticate through either near-field communication or USB-C. Yubico has been offering hardware-based authentication solutions with both NFC and USB-C, but this is the first device that combines both - the company says this is one of its "Most sought-after security keys." The YubiKey 5C NFC can be used to authenticate on many email, IAM, VPN, social media, collaboration, and password management services accessed through smartphones, laptops and desktop computers running Windows, macOS, Linux, Android or iOS. The list of supported authentication protocols includes FIDO2, FIDO U2F, PIV, OATH-HOTP and OATH-TOTP, OpenPGP, YubiOTP, and challenge-response.
Security token biz Yubico has a new key out today, its latest-generation two-factor encryption authentication unit, the Yubico 5C NFC, which includes support for PCs and mobile devices using USB-C, as well as a built-in NFC radio. The last model offering USB-C lacked NFC - although it did come with a built-in Lightning plug, effectively covering all the bases of the mobile market.
Apricorn has launched the Aegis Secure Key 3NXC - the first device of its kind to have a built-in USB-C connector. "We accelerated the release of the Aegis Secure Key 3NXC to provide an efficient way of ensuring that employees using MacBooks, iPads and Android devices can securely store and move sensitive data, wherever and however they're working."