Vulnerabilities Archives - Page 68 of 85

The Power and Potential of Robotic Process Automation – and the Security Risks

Issued by: CyberArk Blog

Robotic Process Automation (RPA) is a powerful, emerging technology and a hot topic of conversation. Despite the buzz, many people remain fuzzy on understanding the specifics. Does RPA mean that organizations will soon employ armies of futuristic robots to do the work that humans once did (remember the movie I, Robot)? Not quite. Let’s start with…

Vulnerabilities

SAS postscript: Webinar on IT security vulnerabilities in healthcare

Issued by: Kaspersky Blog

Each year, the Kaspersky Security Analyst Summit (SAS) brings together cybersecurity specialists from all over the world to share expertise, discuss new trends, and present their research. For those who can’t attend this year’s event but still want to get acquainted with the latest research, we’ve planned a series of webinars that will cover major SAS findings….

Vulnerabilities

Beyond the Password Era: Changing Consumer Habits Signal the End Is Near

Issued by: Security Intelligence

The death of the password has been rumored for years, but to this day it remains the primary way we identify ourselves online, with the average user now managing well over 100 accounts that require a password. Yet changing tides in the cybersecurity landscape, combined with evolving technology and consumer preferences, indicate that the end of…

Vulnerabilities

Chip Cards Lead to 70% Drop in Counterfeit Fraud: Visa

Issued by: Security Week

The adoption of chip-and-PIN card technology by an increasing number of merchants in the United States has led to a significant drop in cases of counterfeit card fraud, according to Visa. The financial industry has been pushing for the adoption of EMV (Europay, MasterCard, Visa) card technology in the United States since 2011, and efforts…

Vulnerabilities

Cryptocurrency Fraud: In the Midst of a Gold Rush, Beware of Scammers

Issued by: Security Week

Bitcoin is the pioneer and obvious leader in the cryptocurrency market. But in 2017 alternative coins, or “altcoins,” began to transform the market. Nearly 1,500 cryptocurrencies are currently in circulation, and new altcoins emerge every week with Monero, Zcash and Ethereum among the top challengers to Bitcoin. But beware. Much like opportunists who devised various…

Vulnerabilities

Apple Fixes Indian Character Crash Bug in iOS, macOS

Issued by: Security Week

Updates released by Apple on Monday for iOS, macOS, tvOS and watchOS patch a flaw that causes applications to crash when rendering specific strings of Indian characters. Someone noticed recently that displaying a string written in India’s Telugu language (జ్ఞ‌ా) caused many apps on iOS and macOS to crash. The list of impacted apps includes…

Vulnerabilities

Over 30 Lawsuits Filed Against Intel for CPU Flaws

Issued by: Security Week

More than 30 lawsuits have been filed by Intel customers and shareholders against the chip giant following the disclosure of the Meltdown and Spectre attack methods. Three class action lawsuits were filed against Intel within a week of the Meltdown and Spectre flaws being disclosed, but the number had reached 32 by February 15, according to an annual…

Vulnerabilities

Intel offers to pay for Spectre-like side channel vulnerabilities

Issued by: Help Net Security

Intel is expanding the bug bounty program it started last March, and is raising considerably the awards it plans to give out for helpful vulnerability information. Where information about critical vulnerabilities in Intel software, firmware and hardware could have previously been rewarded with up to $7,500, $10,000 and $30,000, respectively, now the bounties in those same categories…

Vulnerabilities

7 steps security leaders can take to deal with Spectre and Meltdown

Issued by: Help Net Security

Security and risk management leaders must take a pragmatic and risk-based approach to the ongoing threats posed by an entirely new class of vulnerabilities, according to Gartner. Spectre and Meltdown are the code names given to different strains of a new class of attacks that target an underlying exploitable design implementation inside the majority of computer…

Vulnerabilities

Cisco Patches Critical Code Execution Flaw in Security Appliances

Issued by: Security Week

Cisco informed customers on Monday that updates released for its Adaptive Security Appliance (ASA) software patch a critical vulnerability that can be exploited to gain full control of devices or cause them to reload. The security hole, tracked as CVE-2018-0101 and assigned a CVSS score of 10, allows a remote and unauthenticated attacker to execute arbitrary code…