Proactive Computing

Intelligent IT Solutions and Support

Tag: russia

Russian Spy Gang Hijacks Satellite Links to Steal Data

Russian Spy Gang Hijacks Satellite Links to Steal Data

The Russian gang known as Turla have been hijacking satellite IP addresses of legitimate users to steal data from other infected machines.

The post Russian Spy Gang Hijacks Satellite Links to Steal Data appeared first on WIRED.

Microsoft releases 14 patches for Windows

bug-162019

Microsoft released patches for 14 vulnerabilities in its Windows operating system, Office and Internet Explorer software on Tuesday, including four it deemed critical, it’s highest severity rating.

All four of the critical bugs could allow attackers to remotely execute programs on a targeted system, something that in the past has allowed hackers to steal personal information such as passwords or take over machines for the purpose of sending spam.

The patches were released as part of the company’s monthly “patch Tuesdaysecurity update for its major software products. The company had originally planned to deliver 16 updates Tuesday, but two are marked as yet to appear. They include one that was expected to carry a critical rating.

At 14, the number of patches is a monthly record for 2013 and 2014.

They include a problem with Windows Object Linking and Embedding that could allow remote code execution if the user visits a website containing malicious code. If the user is logged in as the administrator, the attacker could gain the ability to install programs and change and delete data. A related patch for Internet Explorer fixes the vulnerability with malicious websites and 16 other problems with the software, said Microsoft.

A security update for the Microsoft Secure Channel software in Windows fixes a problem that leaves Windows Server vulnerable to attack from specially crafted packets. The fourth critical patch fixes a hole in Windows that allows attackers to invoke Microsoft XML Core Services from a malicious website and then remotely execute code on a target system.

A further seven patches are marked as important—the second highest rank.

One vulnerability in Microsoft Office allows for remote execution of code, four additional problems allow attackers to assign themselves higher privileges and two allow bypass of certain security features in Windows.

via Microsoft releases 14 patches for Windows security problems | PCWorld.

5 Million Gmail Passwords Leaked, Check Yours Now

5 Million Gmail Passwords Leaked, Check Yours Now.

5 Million Gmail Passwords Leaked, Check Yours Now

According to the Daily Dot, nearly 5 million usernames and passwords to Gmail accounts have been leaked on a Russian Bitcoin forum. Here’s what you should know.

The list has since been taken down, and there’s no evidence that Gmail itself was hacked—just that these passwords have been leaked. Most sources are saying that lots of the information is quite old, so chances are they were leaked long ago—though others are claiming 60% of the passwords are still valid (not to mention really, really horrible).

5 Million Gmail Passwords Leaked, Check Yours Now

To check if your password was one of the leaked, plug your Gmail address into this tool (which also checks against recent Yandex and Mail.ru leaks). If you’re paranoid, you may also want to change your password at this time. As always, make sure you use a strong password and enable two-factor authentication on  your account. Hit the link to read more.

Update: Looks like the IsLeaked tool is having some trouble due to unusually high traffic—if you get an error message, try reloading the page or checking back later.

5 Million Gmail Passwords Leaked to Russian Bitcoin Forum | The Daily Dot

Killing the Password

Passwords suck. Plain and simple. They inconvenience the user, and are far too easy to crack…or guess…or fall victim to internet trickery that gets you to give them away. A better solution is overdue. Killing the password is “Challenge Accepted” for DARPA

Anyway, check out the article and start thinking of a day when we are free of password hell. It may not be tomorrow, but it is coming.

Seven ways DARPA is trying to kill the password | PCWorld.

 

Daily Report: Keeping Data Secure Is One Tough Job – NYTimes.com

Daily Report: Keeping Data Secure Is One Tough Job – NYTimes.com.

“We’re like sheep waiting to be slaughtered. We all know what our fate is when there’s a significant breach. This job is not for the fainthearted.”

~ David Jordan, the chief information security officer for Arlington County in Virginia.

Daily Report: Keeping Data Secure Is One Tough Job - NYTimes.com

9 tips for smarter passwords – azcentral.com

9 tips for smarter passwords – azcentral.com

http://www.azcentral.com/story/money/business/2014/08/06/9-tips-for-smarter-passwords/13688891/

You’ve heard them. You know you already know them.

But do you follow them?

 

Hackers Find Way to Outwit Tough Security at Banking Sites – NYTimes.com

Hackers Find Way to Outwit Tough Security at Banking Sites – NYTimes.com.

Hackers Find Way to Outwit Tough Security at Banking Sites - NYTimes.com

Even two-factor authentication can be twarted. This article has some interesting insight on the way the attacks are engineered…

Russian Hackers Probably Have Your Passwords. Now What? | TechCrunch

Time to change those passwords again…how often do you change yours?  Who doesn’t still have a few from the Stone Age? Just do it!

Russian Hackers Probably Have Your Passwords. Now What? | TechCrunch

.

© 2017 Proactive Computing

Theme by Anders NorenUp ↑

%d bloggers like this: