跳到主要內容

發表文章

目前顯示的是有「internet security」標籤的文章

Keep your Data out of Hackers' Reach!

Below are some simple practices that you may adopt to keep your valuable information and data out of hackers’ reach. Safeguard your computers Secure your computers with anti-virus software. Keep virus signatures, spyware signatures, Windows and other software patches updated. Enable personal firewall. Securely protect your smartphones and tablets Lock your smartphones and tablets by enabling passcode and automatic screen lock after a short period of inactivity. Avoid storing confidential / sensitive data on your smartphones and tablets. Securely erase / wipe all the data in your device before discarding or selling your device. Set Strong passwords Enable password protection for all your computing devices, smartphones and files (e.g. Excel and PDF files) containing confidential information. Avoid sensitive data transmission Do not post or transmit any files containing sensitive data over the Internet. If you have to...

uncovering Android Master Key affects almost all android device

Security research team BlueBox has discovered a bug in Google’s Android operating system which could make 99 percent of all devices vulnerable to a frightening attack. A vulnerability in the OS could theoretically allow attackers to take control of an otherwise legitimate app. From here the attacker could steal information or control the device itself. According to BlueBox CTO Jeff Forristal, this vulnerability has been present in Android for the last four years and could affect as many as 900 million devices around the world. BlueBox alerted Google about this vulnerability in February and will explain how the bug affects Android later this month at the Black Hat USA Security Conference in Las Vegas, Nevada. “The vulnerability involves discrepancies in how Android applications are cryptographically verified & installed, allowing for APK code modification without breaking the cryptographic signature,” writes Forristal on the BlueBox corporate blog . “All Android appl...

Snowden effect: US Spies say the militant change tactics

(Reuters) - Even as U.S. intelligence agencies and their global partners assess potential damage from Edward Snowden's disclosures about surveillance programs, militants have begun responding by altering methods of communication, a change that could make it harder to foil attacks, U.S. officials say. Intelligence agencies have detected that members of targeted militant organizations, including both Sunni and Shi'ite Islamist groups, have begun altering communications patterns in what was believed to be a direct response to details on eavesdropping leaked by the former U.S. spy agency contractor, two U.S. national security sources said. The officials said it was too early to tell whether the recent changes in communications methods had caused a loss of critical intelligence or if there was now a greater risk of missing warning signs about future attacks. "You don't know what you lose until after you've lost it," one of the sources said. Previo...

Microsoft Security Bulletin MS13-049 - connspiracy theory

Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends specially crafted packets to the server. Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate outside the enterprise perimeter. This security update is rated Important for all supported editions of Windows 8, Windows Server 2012, and Windows RT, and Moderate for all supported editions of Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2. For more information, see the subsection, Affected and Non-Affected Software , in this section. The security update addresses the vulnerability by correcting the way that the Windows TCP/IP driver handles specially crafted packets. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under t...