Free Ransomware Available on Dark Web
The McAfee Advanced Threat Research team recently analyzed a ransomware-as-a-service threat that is available for free and without registration. This malware was first seen in July 2017 with the extension .shifr. It has now appeared in recent detections with the extension .cypher. Ransomware-as-a-Service Ransomware-as-a-service is a cybercrime economic model that allows malware developers to earn money […] more…McAfee Sales Kick Off: Play to Win
As we approach the end of our first full year as a standalone company, we also just concluded the first Sales Kick-Off (SKO) as the new McAfee. I am happy to report that the initial excitement of the spin-off is still going strong and we are looking forward to the coming year. My takeaways from […] more…Ready for a Love Affair with Your Job?
Five Questions to Ask Yourself this Valentine’s Day This week, people around the world are exchanging cards, heart-shaped candy or flowers with loved ones to celebrate Valentine’s Day. This holiday centers on seeking happiness in relationships and finding love, but just as important, is how we find happiness in our careers and passion for the […] more…8 Easy Ways to Hack-Proof Your Family’s Smartphones
Smartphones have changed the face of parenting in profound ways. But for all the efficiency they’ve introduced into family life, those same devices simultaneously bring risk. With smartphone and tablet use growing at ten times the rate of PCs, hackers know precisely where to shift their focus these days. Cyber thieves love smartphones because once […] more…U.S. Announces Takedown of Global Cyber Theft Ring
The US Justice Department announced indictments Wednesday for 36 people accused of running a transnational ring stealing and selling credit card and personal identity data, causing $530 million in losses. Thirteen members of the “Infraud Organization” were arrested in the United States, Australia, Britain, France, Italy, Kosovo and Serbia, it said. read more more…McAfee Relaunches Award-Winning Online Safety Program for Kids
With an updated curriculum and new cybersecurity career module, McAfee’s Online Safety Program for Kids is set to reach new heights Online safety is an area that now touches nearly everyone – from corporate CEOs and governments to grandparents and children. It’s also why nearly 130 countries come together on Safer Internet Day to raise […] more…Safer Internet Day 2018: How To Develop Online Respect At Home
Today is Safer Internet Day – an annual global event aimed at encouraging a better internet. And this year’s theme is a beauty: ‘Create, Connect and Share Respect. A Better Internet Starts With You.’ As a mum and technology educator, I believe respect is at the core of all positive and safe online (and offline) […] more…FBI Pushes for Small Business Information Sharing
Howard S. Marshall, Deputy Assistant Director of the Cyber Division of the FBI, spoke Tuesday before the House Small Business Committee on the subject of ‘Small Business Information Sharing: Combating Foreign Cyber Threats.’ The purpose was to outline the FBI’s role in helping small businesses defend against cyber threats. read more more…Former Yahoo CISO Bob Lord Joins DNC
Former Yahoo chief information security officer Bob Lord has been appointed chief security officer at the Democratic National Committee (DNC), the formal governing body for the United States Democratic Party. read more more…Why Republic Day of India Matters to Me and McAfee
By Smriti, HR Partner At McAfee, we love to recognize and celebrate the traditions and holidays observed by our employees around the world. With nearly 7,500 employees spanned across the globe, you can image just how many occasions we get to celebrate! This week, we happen to be celebrating one of my favorite national holidays […] more…Lawmakers Raise Questions About Disclosure of CPU Flaws
The U.S. House Energy and Commerce Committee on Wednesday sent letters to several tech giants, raising questions about how the disclosure of the CPU vulnerabilities known as Spectre and Meltdown was handled. read more more…FAQ: Windows 10 LTSB explained
Windows 10 will power to its third anniversary this summer, but one branch, identified by the initials L-T-S-B, remains an enigma to most corporate users. LTSB, which stands for “Long-term Servicing Branch,” was among the pillars of Windows 10 in the months leading up to, and for months after, the mid-2015 roll-out of the operating […] more…Mozilla mandates that new Firefox features rely on encrypted connections
Mozilla this week decreed that future web-facing features of Firefox must meet an under-development standard that requires all browser-to-server-and-back traffic be encrypted. “Effective immediately, all new features that are web-exposed are to be restricted to secure contexts,” wrote Mozilla engineer Anne van Kesteren in a post to a company blog. “A feature can be anything […] more…How to make sure Windows gets the right patches coming to it
The Windows emergency security updates issued by Microsoft earlier this month came with an unprecedented prerequisite – a new key stored in the operating system’s registry – that antivirus vendors were told to generate after they’d guaranteed their code wouldn’t trigger dreaded Blue Screens of Death (BSoD) when users apply the patches. The demands confused […] more…New Mobile Malware Uses Layered Obfuscation and Targets Russian Banks
by Jordan Pan and Song Wang Last year, we saw the Fanta SDK malware target Russian bank Sberbank users and employ unique defensive measures. Now, another bank malware family has appeared, targeting even more Russian banks while using new and evolved obfuscation techniques. This family is named FakeBank, and so far the related samples we […] more…January’s Patch Tuesday Fixes 56 Security Issues, Including Meltdown and Spectre
This year’s first Patch Tuesday is a busy one. Microsoft released 56 updates that include patches for the Meltdown and Spectre vulnerabilities. The patches also addressed security issues in Windows OS, Internet Explorer, Edge, Office, ChakraCore, ASP.NET, and .NET Framework. Sixteen were rated critical and 38 important, 20 of which can result in remote code […] more…More information
- Google Researcher Releases iOS 11 Jailbreak Exploit
- Over 135 million modems vulnerable to denial-of-service flaw
- BrandPost: The Underrated Elements of Cyber Resiliency
- Cisco tells Nexus switch owners to disable POAP feature for security reasons
- Exabeam Lands $200M Investment, Replaces CEO
- Microsoft getting out of the music biz, moving Groove subs to Spotify
- Russian Hackers Silently Hit Government Targets for Years
- Jonathan Zdziarski finds evidence of backdoors in Apple iOS
- Proactive Response to Today’s Advanced Persistent Threats
- Dutch government websites KO’d by 10-hour DDoS