ASUS USERS TARGETED IN LARGE SUPPLY CHAIN ATTACK

Users infected via software update utility. Kaspersky Lab researchers have uncovered a large-scale attack against ASUS users in which a software update utility was modified and used to distribute malware. The researchers said investigations into the attack - dubbed Operation ShadowHammer - are “still ongoing”, though they expect to publish a detailed technical paper and present their findings at a security conference in Singapore in mid-April. Kaspersky said the attack “seems t...
ITNEWS
READ MORE

TEXAS A&M STILL CALCULATING SECURITY COSTS FOR RICHARD SPENCER EVENT

Prominent white nationalist Richard Spencer was invited to speak on the campus in early December by a former student. Spencer's event led to several protests outside the Memorial Student Center.Texas A&M says 38 of its officers were assigned to patrol the MSC on the evening of Tuesday, December 6th, but its still gathering information before sending an invoice to the organizer of the event. That's expected to be complete sometime in mid-January 2017....
KBTX.COM
READ MORE

4 INFORMATION SECURITY THREATS THAT WILL DOMINATE 2017

As with previous years, 2016 saw no shortage of data breaches. Looking ahead to 2017, the Information Security Forum (ISF), a global, independent information security body that focuses on cyber security and information risk management, forecasts businesses will face four key global security threats in 2017....
CIO.COM
READ MORE

RESEARCHERS CREATE ATTACKS THAT COMPROMISE LTE DATA COMMUNICATION

Newly devised attacks on the Long-Term Evolution (LTE) high-speed wireless standard break the confidentiality and privacy of communication, a team of researchers claim. In a newly published paper (PDF), researchers from Ruhr-University Bochum and New York University Abu Dhabi present a set of attacks against LTE’s data link layer (layer two) protocols, which could be used to identify mobile users within a cell, learn what websites the user visits, and even modify the message payload. A ste...
SECURITYWEEK
READ MORE

MASTERCARD TO IMPLEMENT BIOMETRICS FOR IN-STORE CARD PAYMENTS

Mastercard is implementing biometrics for card payments, with plans to go live by April 2019. The financial giant said that all consumers will be able to identify themselves with biometrics such as fingerprints or facial recognition whenever they pay in stores with Mastercard. Biometric options will also be implemented for all contactless transactions made at terminals with a mobile device. In practice, that means that banks issuing Mastercard-branded cards will have to be able to offer biometri...
INFOSECURITY MAGAZINE
READ MORE

MICROSOFT PATCHES OUT-OF-BAND ZERO-DAY SECURITY FLAW FOR IE

Users of Microsoft's Windows operating system have grown accustomed to a regular, predictable cadence for patches—on the first Tuesday of every month. On Dec. 19, Microsoft broke that cadence with an emergency out-of-band update for its Internet Explorer (IE) web browser. The reason is simple: Attackers are actively exploiting a zero-day vulnerability, putting millions of users around the world at immediate risk. "We released a security update for Internet Explorer after receiving...
EWEEK
READ MORE