Detailed review of iOS 8

There have been many short blogs but this one goes into a few fine details.




http://www.anandtech.com/show/8321/the-ios-8-review/

The most important Internet security group you’ve never heard of

Interesting....

From the Article

The FIDO Alliance includes technology heavyweights like Google, Lenovo, Microsoft and Samsung; payments giants Discover, MasterCard, PayPal and Visa; financial services companies such as Aetna, Bank of America and Goldman Sachs; and e-commerce players like Netflix and Salesforce.com. 

FIDO was founded by Lenovo, PayPal, and security technology companies AGNITiO, Nok Nok Labs and Validity Sensors

Two new authentication standards have been published for peer review, half a dozen companies showcased FIDO-Ready solutions at the 2014 Consumer Electronic Show (CES)

Follow this link for additional details:

http://www.zdnet.com/the-most-important-internet-security-group-youve-never-heard-of-7000033537/

You are not safe any more - Malvertising hits websites such as YouTube, Amazon and Yahoo

If three of the most popular sites are being targeted by Malware how, can a common man survive.

If you have not done this before , do it now. 

1. Install AV / Firewall 
2. Regularly patch your system (Free tools like PatchMyPC does a good job)
3. Take away admin privileges for your regular account and use "Run As" when you need admin rights
4. Use Browsers like Sandboxie.

A combination of all the above will still not stop all Malware but will be a powerful defence against most of them.

Oh , I forgot the most important thing.

Don't click on anything or any email that you receive ( this will help you a lot)

From the Article

The network has been nicknamed “Kyle and Stan” due to those names appearing in subdomains of more than 700 websites the attackers have set up to distribute the malware, Pelkmann wrote.

“The large number of domains allows the attackers to use a certain domain just for a very short time, burn it and move on to use another one for future attacks,” he wrote “This helps avoiding reputation and blacklist based security solutions.”

When a victim is redirected by one of the ads, the computer downloads a piece of malware with a unique checksum, making it harder for security software to detect. The download may also contain legitimate software such as a media player. 

Follow this link for additional details:

http://www.pcworld.com/article/2604480/malicious-advertising-hits-amazon-youtube-and-yahoo-cisco-says.html

WireTapping - Now OutSourced

• We can't trust the ISP but we know them
• We can't trust Government but we know that,
• Now we have shady middle men (organization) that do the dirty work and we don't know them

From the Article

But when one Atlanta, Georgia-based Internet provider was served a top-secret data request, there wasn't a suited-and-booted federal agent in sight.

Why? Because the order was served on a so-called "trusted third-party," which handles the request, served fresh from the secretive Washington D.C.-based Foreign Intelligence Surveillance (FISA) Court. With permission from their ISP customers, these third-parties discreetly wiretap their networks at the behest of law enforcement agencies, like the Federal Bureau of Investigation (FBI), and even intelligence agencies like the National Security Agency (NSA).

By implementing these government data requests with precision and accuracy, trusted third-parties — like Neustar, Subsentio, and Yaana — can turn reasonable profits for their services.

Little is known about these types of companies, which act as outsourced data brokers between small and major U.S. ISPs and phone companies, and the federal government.

Follow this link for additional details:

http://www.zdnet.com/the-most-important-tech-companies-you-have-never-heard-of-7000032573/

Banks Hacked- News gets more and more interesting

Apparently it is 7 banks now

Some had their records deleted




The link below has more information:-


http://www.cnet.com/news/jpmorgan-hackers-altered-deleted-bank-records-says-report/

DLP function now available for SharePoint (Office 365)

We know it is available for Exchange now it is extended to SharePoint

From the Article

Microsoft has extended the data loss prevention features in Office 365 so that they are available not only for its email tools but also for data in SharePoint Online and OneDrive for Business.

Administrators will be able to search for content across SharePoint Online and OneDrive for Business, zeroing in on 51 predefined sensitive information types, like credit card numbers, passport data, and Social Security information. If they identify policy breaches, they'll be able to export a report and take the appropriate action. DLP tasks are managed from Office 365's eDiscovery Center console.

Follow this link for additional details:

http://www.infoworld.com/d/cloud-computing/microsoft-rolls-out-dlp-sharepoint-online-and-onedrive-business-249318

New member to the list of credit card hacked companies - it is UPS now

News might be new but

It started infiltration started in January and attacks in March

And...........

We only know now

Customers’ credit and debit card information at 51 franchises in 24 states may have been compromised.


Follow this link for additional details:

http://time.com/3151681/ups-hack/