Some Websites Can Force Your Computer To Mine Cryptocurrency

December 22nd, 2017

Researchers at Malwarebytes have discovered a new exploit that allows malicious website owners to use your PC to mine various forms of cryptocurrency, even if you exit the browser window the malicious site was displayed on.

The exploit relies on a smart pop-under trick.

Some Computer Manufacturers Are Disabling Intel Chip Firmware

December 21st, 2017

Intel is catching some flak for releasing CPU technology that's filled with security flaws. At issue is Intel's Management Engine (ME), which is designed for Enterprise use and is of no real value on equipment designed for personal or home use.

Although many popular PC and laptop manufacturers, including Acer, Panasonic, Lenovo, Fujitsu, HP and others are selling equipment with Intel ME enabled, so far, three hardware vendors have opted to disable the firmware.

Ransomware Attackers Are Increasing Their Attacks On Businesses

December 20th, 2017

The ransomware ecosystem is maturing. Strains are divided into "families" and the number of new families that have been discovered in 2017 is half what it was in 2016. Even so, the total number of attacks targeting businesses have risen by 26 percent over last year's totals, according to the latest statistics released by Kaspersky Lab.

Paypal-Owned Company Sees Breach Of 1.6 Million Customers

December 19th, 2017

TIO Networks, a cloud-based, multi-channel bill payment platform purchased by Paypal for $233 million in 2017, was breached earlier this year, exposing PII (Personally Identifiable Information) for an estimated 1.6 million of the service's users.

TIO Networks primarily does payment processing and accounts receivables for cable, utility, wireless and telecom companies in North America.

Former Employees Pose Serious Risk To Security

December 18th, 2017

The Department of Health and Human Services' Office for Civil Rights (OCR) has reminded those who deal with PHI and PII of the dangers that terminated employees can pose to system security in their monthly cybersecurity newsletter. Their advice is as timely as it is excellent, and includes the following:

"Making sure that user accounts are terminated so that former workforce members don't have access to data is one important way Identity and Access Management can help reduce risks posed by insider threats.

Windows 10 Now Installed On Over 600M Machines

December 15th, 2017

When Microsoft first released Windows 10, the company boasted that it would try to get its new OS running on a billion devices by 2018.

Time and circumstance have conspired to make that lofty goal unlikely, and the company has since retreated from it.

Look And Feel May Change In Future Windows 10 Update

December 14th, 2017

Microsoft is experimenting with a new feature that may change the look and feel of Windows 10 in some future update.

The new approach is referred to as "Sets," which borrows from the playbook of modern web browsers and groups related applications into tabbed sets, with the groupings defined by project type.

Fake Symantec Blog Post Is Spreading Mac Malware

December 13th, 2017

Sometimes hackers opt for a stealthy approach. Other times, their attempts are downright brazen.  That's definitely the case with a newly launched malware campaign that seeks to spread "Proton Mac," a strain of malware designed to steal passwords from Mac users.

Bug in macOS Could Allow Hackers Root Access

December 12th, 2017

Do you own a Mac? Is it running Apple's latest macOS, the "High Sierra?"  If so, be extra careful with who you allow access to your machine.

A security flaw recently discovered by a developer named Lemi Orhan Ergin can easily allow anyone unfettered access to everything on your machine, and by extension, give them an easy "in" to whatever network it's connected to.