Zero-day flaws mean it's time to patch Exchange and Windows

This month’s Patch Tuesday update from Microsoft deals with 84 flaws and a zero-day affecting Microsoft Exchange that at the moment remains unresolved. The Windows updates focus on Microsoft security and networking components with a difficult-to-test update to COM and OLE db. And Microsoft browsers get 18 updates—nothing critical or urgent.

To read this article in full, please click here

Read more

Anti-Money Laundering Service AMLBot Cleans House

Credit to Author: BrianKrebs| Date: Sat, 15 Oct 2022 14:08:59 +0000

AMLBot, a service that helps businesses avoid transacting with cryptocurrency wallets that have been sanctioned for cybercrime activity, said an investigation published by KrebsOnSecurity last year helped it shut down three dark web services that secretly resold its technology to help cybercrooks avoid detection by anti-money laundering systems.

Read more

Zero-days flaws mean it's time to patch Exchange and Windows

This month’s Patch Tuesday update from Microsoft deals with 84 flaws and a zero-day affecting Microsoft Exchange that at the moment remains unresolved. The Windows updates focus on Microsoft security and networking components with a difficult-to-test update to COM and OLE db. And Microsoft browsers get 18 updates—nothing critical or urgent.

To read this article in full, please click here

Read more

Would a US digital dollar let the government track you?

US legislators continue to press for the creation of a digital dollar, raising questions about whether the move could make it easy for the federal government to track business and consumer transactions.

Putting all the digital dollars on one electronic ledger operated by the Federal Reserve would also be a tempting target for cyber criminals.

In March, lawmakers introduced a bill that would allow the US Treasury to create a digital dollar and pilot it to determine its viability. That same month, President Joe Biden called for more research on developing a national digital currency through the nation’s central bank. The order highlighted the need for more regulatory oversight of cryptocurrencies, which have been used for nefarious purposes such as money laundering and other criminal activities.

To read this article in full, please click here

Read more

EU-US data sharing agreement: Is it a done deal?

The thousands of companies waiting for a new US-EU data-transfer agreement to go into effect soon and ease the burdensome legal work necessary for cross-border data transfer shouldn’t get their hopes up. US President Joe Biden’s executive order to implement rules for the Trans-Atlantic Data Policy Framework agreed on earlier this year is a move in the right direction, but the new pact won’t go into effect until next spring at the earliest, and even then it is bound to face legal challenges, say public policy and legal experts.

To read this article in full, please click here

Read more

Microsoft Patch Tuesday, October 2022 Edition

Credit to Author: BrianKrebs| Date: Tue, 11 Oct 2022 21:06:23 +0000

Microsoft today released updates to fix at least 85 security holes in its Windows operating systems and related software, including a new zero-day vulnerability in all supported versions of Windows that is being actively exploited. However, noticeably absent from this month’s Patch Tuesday are any updates to address a pair of zero-day flaws being exploited this past month in Microsoft Exchange Server.

Read more

Report: Big U.S. Banks Are Stiffing Account Takeover Victims

Credit to Author: BrianKrebs| Date: Fri, 07 Oct 2022 18:46:12 +0000

When U.S. consumers have their online bank accounts hijacked and plundered by hackers, U.S. financial institutions are legally obligated to reverse any unauthorized transactions as long as the victim reports the fraud in a timely manner. But new data released this week suggests that for some of the nation’s largest banks, reimbursing account takeover victims has become more the exception than the rule.

Read more

Online privacy: Best browsers, settings, and tips

“You have zero privacy anyway. Get over it,” Scott McNealy said of online privacy back in 1999, a view the former CEO of the now-defunct Sun Microsystems reiterated in 2015. Despite the hue and cry his initial remarks caused, he’s been proven largely correct.

Cookies, beacons, digital signatures, trackers, and other technologies on websites and in apps let advertisers, businesses, governments, and even criminals build a profile about what you do, who you know, and who you are at very intimate levels of detail. Remember that 2012 story about how Target could tell a teenager was pregnant before her parents knew, based on her online activities? That is the norm today. Google and Facebook are the most notorious commercial internet spies, and among the most pervasive, but they are hardly alone.

To read this article in full, please click here

Read more