Author Archives: Graham Cluley

⊛ Get FREE threat intelligence on hackers and exploits with the Recorded Future Cyber Daily

Posted on by
Get trending info on hackers, exploits, and vulnerabilities every day for FREE with the Recorded Future Cyber Daily [Sponsor]

Many thanks to the great folks at Recorded Future, who are sponsoring my writing this week.

Recorded Future provides deep, detailed insight into emerging threats by automatically collecting, analyzing, and organizing billions of data points from the Web.

And now, with its FREE Cyber Daily email all IT security professionals can access information about the top trending threat indicators – helping you use threat intelligence to help make better decisions quickly and easily.

Which means that you will be able to benefit from a daily update of the following:

  • Information Security Headlines: Top trending news stories.
  • Top Targeted Industries: Companies targeted by cyber attacks, grouped by their industries.
  • Top Hackers: Organizations and people recognized as hackers by Recorded Future.
  • Top Exploited Vulnerabilities: Identified vulnerabilities with language indicating malcode activity. These language indicators range from security research (“reverse engineering,” “proof of concept”) to malicious exploitation (“exploited in the wild,” “weaponized”).
  • Top Vulnerabilities: Identified vulnerabilities that generated significant amounts of event reporting, useful for general vulnerability management.

Infosec professionals agree that the Cyber Daily is an essential tool:

“I look forward to the Cyber Daily update email every morning to start my day. It’s timely and exact, with a quick overview of emerging threats and vulnerabilities. For organizations looking to strengthen their security program with threat intelligence, Recorded Future’s Cyber Daily is the perfect first step that helps to prioritize security actions.” – Tom Doyle, CIO at EBI Consulting.

So, what are you waiting for?

Sign up for the Cyber Daily today, and starting tomorrow you’ll receive the top trending threat indicators.

If you’re interested in exclusively sponsoring my site for a week, and reaching an IT-savvy audience that cares about computer security, you can find more information here.

Continue reading ⊛ Get FREE threat intelligence on hackers and exploits with the Recorded Future Cyber Daily→

GoToMyPC has been hacked, all customer passwords reset

Posted on by

Experiencing a problem logging into GoToMyPC? There’s a reason for that. Your password has been reset by Citrix, the company which runs GoToMyPC.com, after hackers reportedly attacked the service:

IMPORTANT SECURITY MESSAGE FROM THE GoToMYPC TEAM

Dear Valued Customer,

Unfortunately, the GoToMYPC service has been targeted by a very sophisticated password attack. To protect you, the security team recommended that we reset all customer passwords immediately.

Effective immediately, you will be required to reset your GoToMYPC password before you can login again.
To reset your password please use your regular GoToMYPC login link.

Recommendations for a strong password:

  • Don’t use a word from the dictionary
  • Select strong passwords that can’t easily be guessed with 8 or more characters
  • Make it Complex – Randomly add capital letters, punctuation or symbols
  • Substitute numbers for letters that look similar (for example, substitute “0” for “o” or “3” for “E”.

    • It’s a shame in their recommendations they left out the most important one of all – don’t reuse your passwords in multiple places. After all, it’s sensible that your GoToMyPC password has been changed – but you also need to ensure that you change your passwords on any site *other* than GoToMyPC if you were making the mistake of not using unique passwords.

    GoToMyPC is also recommending customers enable two-step verification, which will mean any potential hackers will need more than your password alone to access your account.

    The news of the GoToMyPC security breach comes soon after users of TeamViewer, another service for remote desktop access, claimed that their accounts had also been attacked – although the company has denied that it has suffered a security incident.

    Continue reading GoToMyPC has been hacked, all customer passwords reset→

    Posted in SBN

    Apple will require HTTPS connections for iOS apps by the end of 2016

    Posted on by

    Kate Conger at TechCrunch reports:

    “Today, I’m proud to say that at the end of 2016, App Transport Security is becoming a requirement for App Store apps,” Apple’s head of security engineering and architecture, Ivan Krstic, said during a WWDC presentation. “This is going to provide a great deal of real security for our users and the communications that your apps have over the network.”

    App Transport Security, or ATS, is a feature that Apple debuted in iOS 9. When ATS is enabled, it forces an app to connect to web services over an HTTPS connection rather than HTTP, which keeps user data secure while in transit by encrypting it.

    This cannot come soon enough in my opinion.

    People ask me all the time which operating system is more secure: iOS or Android?

    The truth is that the choice of mobile operating system shouldn’t be your primary concern.

    You should be more worried about the apps that you’re running on your smartphone, and how good a job they are doing at keeping your data secure and private – both when in communication with the internet, and when stored on a third-party developer’s servers.

    Forcing iOS apps to use HTTPS is a definite step in the right direction, and will help make it harder for criminals to steal information as you use your iPhone or iPad.

    Roll on 2017…

    Continue reading Apple will require HTTPS connections for iOS apps by the end of 2016→