DavidJohnston.org – My Little Place on the Net

Good Password Advice from the FBI

February 22, 2020 by Dave

The Portland office of the FBI released some password advice this week that was picked up by ZD Net. They suggest that just using pass phrases of multiple words, even without changes in case, numbers, punctuation, etc., is a good strategy because they’re easier for people to remember. What makes them good passwords is their …

Dark Reading Attacks/Breachs

Critical Vulnerability Hits SAP Enterprise Applications July 14, 2020

RECON could allow an unauthenticated attacker to take control of SAP enterprise applications through the web interface.

Crypto-Primer: Encryption Basics Every Security Pro Should Know July 14, 2020

With so many choices for encrypting data and communication, it's important to know the pros and cons of different techniques.

New Mirai Variant Surfaces with Exploits for 9 Vulnerabilities Products July 14, 2020

Impacted products include routers, IP cameras, DVRs, and smart TVs.

99% of Websites at Risk of Attack Via JavaScript Plug-ins July 14, 2020

The average website includes content from 32 different third-party JavaScript programs, new study finds.

Russian Hacker Convicted for Social Network Hacks July 13, 2020

The Russian national was convicted of hacking into accounts at LinkedIn, Dropbox, and Formspring.

Experts Predict Rise of Data Theft in Ransomware Attacks July 13, 2020

The most attractive targets for data theft are businesses perceived as most likely to pay to prevent exposure of their information.

Decoding the Verizon DBIR Report: An Insider's Look Beyond the Headlines July 13, 2020

To truly understand cybersecurity trends, we must look beyond the headlines and ask more of the data. What you learn might surprise you.

Mobile App Fraud Jumped in Q1 as Attackers Pivot from Browsers July 10, 2020

RSA data reveals a continued shift away from browser-based fraud as attackers target mobile apps.

Zoom Patches Zero-Day Vulnerability in Windows 7 July 10, 2020

The flaw also affects older versions of the operating system, even if they're fully patched.

4 Security Tips as the July 15 Tax-Day Extension Draws Near July 10, 2020

We're continuing to see cybercriminals take advantage of COVID-19, and the extension of Tax Day will be the next technique used in their sophisticated method of attacks.