80 posts
-
Exchange Server – Chinese Hafnium Hack
If your organization runs Exchange Server with OWA, assume that it was compromised between 02-26-21 and 03-03-21. Exchange Server versions 2013, 2016, and 2019. Patch ASAP Multiple Security Updates Released for Exchange Server – updated March 8, 2021 – Microsoft Security…
-
Why I Still Teach Malware Removal
When Microsoft introduced Windows 10, it used the tagline “The most secure Windows ever – and built to stay that way”. In a perfect world, everyone would now be running on Windows 10 and enjoying the enhanced security features that are included. This is real…
-
Heartbleed–Things you should know and what you can do about it
What Is It? By now I’m certain you’ve heard of the Heartbleed bug. If you haven’t, then you should know that it is a flaw found in one of the most common open source SSL implementations on the internet that COULD allow an attacker to get sensitive…
-
Don’t Be Scammed by Fake Tech Support Calls
It’s happened to me a number of times. The phone rings, and often the caller id display reads “Private.” Upon answering, I’m greeted by someone with a heavy Indian accent who informs me that he/she is calling from the Windows Support Center, and that for…
-
The Blackphone: No more snooping around
In a time where Privacy is just a myth, Silent Circle & Geeksphone have announced the formation of a new Switzerland-based joint venture and its first surveillance-thwarting product, the Blackphone. This Blackphone runs a new security-oriented version of Android called…
-
How to Install the Enhanced Mitigation Experience Toolkit (EMET)
A recent zero-day exploit in Internet Explorer affecting IE 6, 7, 8 & 9 (not 10) requires action on your part. You could stop using IE and use an alternate browser. An even better idea, install the free security tool, Enhanced Mitigation Experience Toolkit (EMET). Deploying…
-
State Sponsored Malware, the New Normal?
Computer security is hard. Stopping state-sponsored malware might prove impossible. Consider this recent example of a security breach that hasn’t yet been reported to be state-sponsored, but has the hallmarks. Cloudflare is a service that promises to make sites faster and…
-
Keeping Windows 8 Release Preview Secure from Malware
Is Windows 8 Release Preview compatible with Microsoft Security Essentials? No. As we’ve written previously, there will be no Microsoft Security Essentials available for Windows 8 Release Preview, or the Release to Manufacturing (RTM) final version. However, Windows Defender…
-
All your device are belong to us – device hacking dangers
Avi Rubin is Professor of Computer Science at Johns Hopkins University. He offers a TEDx talk in which he discusses hacking of devices. Would you be surprised if? A defibrillator pacemaker could induce fibrillation wirelessly (Dick Cheney would be more fun at parties)? Or the…
-
Secunia PSI 3.0 Beta – Now with Autopatching
According to Secunia, 78% of vulnerabilities on Windows systems, are from non-Microsoft programs. These 3rd party programs have become a favorite target of hackers, and keeping all the software on your system can be quite a challenge. Enter Secunia PSI… Secunia Personal…