Security

Hackers could use your computer to literally make money. That's thanks to an unusual malware attack that doesn't involve any files, making it harder to detect. The "Coinminer malware" takes advantage of a Windows and browser bug nicknamed Eternal ... Blue. That's the same bug that was exploited in several high-profile ransomware attacks recently . While Microsoft has issued updates, it seems some users haven't installed the security patches. Malware Runs Inside Memory One big problem with the Coinminer malware is that it works in the computer's memory, rather than as ... (view more)

Microsoft has agreed to change the way it handles rival security products in Windows. The changes follow a formal complaint that's now been withdrawn by Kaspersky Labs . Kaspersky had twice made official protests over Windows 10. The first was to ... Russian anti-monopoly regulators and led to Microsoft changing the wording on a message encouraging users to remove third-party software in favor of Windows Defender. A follow-up complaint to the European Commission covered several points including Microsoft making it difficult for security firms to tell users when their licensed had expired; not ... (view more)

According to Facebook's head of security Alex Stamos, the security industry needs to do more to solve problems that affect ordinary people in their everyday lives. He says researchers are often too obsessed with technical detail because they lack ... empathy. Stamos spoke at Black Hat, a conference that brings together security professionals, researchers, self-described hackers and those with an interest in the topic. (Source: bbc.co.uk ) He said the security community had proven justified in many of its warnings about flaws in systems and networks, but that it hadn't done enough to find ... (view more)

The man behind some of the most commonly held advice on creating passwords says he was wrong on several points. Bill Burr says the real problem with his tips were that they led to predictable behavior. Burr's advice came in a short 2003 document ... produced by the National Institute of Standards and Technology. Because of the institute's prestige, the advice was widely adopted and cited, with both employers and sites often insisting that passwords meet the guidelines. (Source: wsj.com ) Mix of Characters Hard to Remember One part of the advice was to use a mix of capital letters, lower ... (view more)

Microsoft says it won't deliver new Windows 10 features to some computers. However, it's vowed to give the affected machines security patches for six years, a major extension on its original policy. Last week it was discovered that as many as 10 ... million computers running an Intel processor named 'Clover Trail' did not get the latest major update to Windows 10 - something Microsoft said was a compatibility issue. Applying the update could have made system text and icons unreadable. Most of the affected machines were combined "2-in-1" models that worked as both laptops ... (view more)

The FBI has warned parents about privacy risks with 'smart' toys. It's more of a general warning rather than covering a specific product. The agency says the warning covers a wide range of toys which "incorporate technologies that learn and tailor ... their behaviors based on user interactions." The key risk is when the toy has an Internet connection, meaning data can be passed on to a third party. According to the FBI, the risks are particularly great given such toys may contain "sensors, microphones, cameras, data storage components, and other multimedia capabilities ... (view more)

Some computers only a few years old are reporting that they not longer support Windows 10. It's a badly-worded blunder for now, but could be the sign of a major security problem down the line. The problem is occurring when some computers try to ... install the Creators Update, the most recent widely-distributed major update to Windows 10. The message received is worded: "Windows 10 is no longer supported on this PC. Uninstall this app now because it isn't compatible with Windows 10." (Source: pcworld.com ) That's an extremely confusing and misleading message in several ways ... (view more)

Russian-based antivirus company Kaspersky Labs has denied working with intelligence agencies in Russia. The denial follows a crackdown on US government agencies using the company's software. The claims follow a series of previously unpublished ... emails sent in 2009 between company founder Eugene Kaspersky and colleagues. They mention a secret project "per a big request on the Lubyanka side." That's a reference to the headquarters of the FSB, the Russian security agency that's the modern-day equivalent of the KGB. In principle the project was to work on defensive software for the FSB, protecting ... (view more)

Apple is working on facial recognition as an iPhone security measure. It's said to be have it ready for this year's iPhone 8, but may wait until the feature has been fully tested and complete. The idea is to replace fingerprint scanning for ... unlocking the phone. It's not yet confirmed if and when the facial recognition would be extended to other uses, such as using Apple Pay rather than have to type in card details or a PIN code. According to a Bloomberg source, the face unlock takes less than half a second to scan a face, confirm its identity and unlock the phone. The feature ... (view more)

Microsoft is adding a new feature to Windows 10 that could make it harder for ransomware to lock up files. It could be useful, but is certainly not a complete defense. The feature, called "Controlled Folder Access," is part of the Windows Defender ... security tool and is already being tested by users who've volunteered for advanced access to Windows 10 updates. The idea is that specific folders can be protected which means that only specified applications or programs can create, alter or delete files in those folders. This includes encrypting the files, which is the key tactic ... (view more)