Application Security Archives - Page 28 of 29

Evernote backs off from privacy policy changes, says it ‘messed up’

Issued by: CIO Security

Evernote has reversed proposed changes to its privacy policy that would allow employees to read user notes to help train machine learning algorithms. CEO Chris O’Neill said the company had “messed up, in no uncertain terms.” The move by the note-taking app follows protests from users, some of whom have threatened to drop the service…

Application Security

Tips to shop safely on Cyber Monday

Issued by: Help Net Security

As consumers gear up for Cyber Monday, the largest online shopping day of the year, cybercriminals are also preparing to take advantage of deal-seekers. IBM X-Force researchers are monitoring malicious activity closely to help organizations and consumers stay safe during the holiday shopping season. Researchers have already seen cybercriminals actively masking malicious malware in emails…

Application Security, Malware & Threats

Malware asks for a selfie as it steals your information

Issued by: Linux Blog

Not content with stealing your financial details, personal information, and login credentials, there’s now an Android banking Trojan that also asks victims to take a selfie with their ID cards. McAfee Labs’ Mobile Research Team discovered the malicious application, which is a new variant of the Acecard Trojan Malware (aka Torec) that was first identified…

Application Security, Network Security

Firefox Focus: Private iOS browsing made easy

Issued by: Help Net Security

Mozilla has released Firefox Focus, an iOS app that lets you browse the Internet without having to worry who’s tracking your online activity. The app can be used independently, or can be integrated with the existing (installed) Firefox and Safari apps (more details about the usage can be found here).

Application Security

Yahoo investigating if insiders knew of hack

Issued by: CIO Security

Yahoo said investigators were looking into the possibility that some people within the company knew at the time about the late 2014 theft of information of at least 500 million user accounts. Law enforcement authorities on Monday also “began sharing certain data that they indicated was provided by a hacker who claimed the information was…

Application Security

The November 2016 Security Update Review

Issued by: Trend Micro Blog

Adobe released two updates this month. The more critical of the two patches addresses nine CVEs in the Flash player. This comes just two weeks after Adobe issued an emergency Flash update to fix an issue currently being exploited. We’ll see this exploit later in a Windows update, too. Today’s Flash update is not being…

Application Security

Was Theft Of Money From 20,000 Tesco Bank Customers An Inside Job?

Issued by: Dark Reading

UK bank confirms attack, but so far has not used the word ‘hack.’ Threat actors appear to have broken new ground with an attack on the UK’s Tesco Bank where they managed to steal money from more than 20,000 accounts at nearly the same time in automated fashion. Details of the weekend attack are still…

Application Security

Cisco Resets Passwords on Careers Portal

Issued by: Security Week

Cisco last week prompted a password reset for the user accounts on its Cisco Professional Careers mobile website after a security researcher discovered a vulnerability in the portal. The networking giant decided to reset the user passwords to ensure that accounts are kept secure, and says that the issue would have resulted in exposing “a…

Application Security

Cognitive systems and artificial intelligence revenues to reach $47 billion in 2020

Issued by: Help Net Security

Widespread adoption of cognitive systems and artificial intelligence (AI) across a broad range of industries will drive worldwide revenues from nearly $8 billion in 2016 to more than $47 billion in 2020. According to IDC, the market for cognitive/AI solutions will experience a CAGR of 55.1% over the 2016-2020 forecast period. “Software developers and end…

Application Security

Integrating threat intelligence with existing security technologies

Issued by: Help Net Security

70 percent of security industry professionals believe threat intelligence is often too voluminous and/or complex to provide actionable insights. The Ponemon Institute study, based on 1,072 respondents in the United Kingdom and North America, also showed that organizations neglect to share essential threat data with board members and C-level executives, despite the fact that security…