Uncategorized

AI and Learning Machine start to make an appearance in the security field in either defensive and offensive way.

In order for enterprises and security suppliers to remain on the front foot with hackers, they will also need to incorporate machine learning and artificial intelligence (AI) into their cyber security strategies, creating what Ghosh terms an “AI on AI” situation.

 

http://www.computerweekly.com/news/450427653/Security-experts-air-concerns-over-hackers-using-AI-and-machine-learning-for-phishing-atttacks

Even the toughest hackers will be powerless to access your account without your physical key, Google contends

The keyring acts a lot like a physical key to your inbox. Whenever you log-in to your account, Google will prompt you to use the keyfob as a two-factor device. Either plug it in as a USB key or push the Bluetooth button, and you’re granted access to your account

It’s early days, but it’s a promising step from the company, and it can’t come a moment too soon for those who need it.

 

http://www.zdnet.com/article/how-google-wants-to-protect-you-from-nation-state-hackers/

Useful link to update Burpsuite with Kali

https://www.infosecurity-magazine.com/news/gozi-trojan-banks-on-element-of/

The Gozi Trojan is usually targeted towards North America, Europe, other countries in Asia but not really Japan according to the article. The reason is there are cyber-criminals who are in a gang who claim Japan as their turf. So the Gozi Trojan hasn’t hit Japan and with the country having such a low malware rate, they want to use it to their advantage. I think Japan should be prepared since a Trojan may hit them that is usually aimed at other countries – maybe the other gangs might team up to stop this. Who knows?

In a couple of years, the new powerful machine can disrupt national security.

Everything from credit-card transactions to text messaging is encrypted using an algorithm that relies on factorization or reverses multiplication. An enormous number—several hundred digits long—acts as a lock on encrypted data, while the number’s two prime factors are the key. This so-called public-key cryptography is used to protect health records, online transactions and vast amounts of other sensitive data because it would take classical computer years to find those two prime factors. Quantum computers could, in theory, do this almost instantly.

 

 

https://www.wsj.com/articles/how-googles-quantum-computer-could-change-the-world-1508158847

I thought this was a pretty interesting article with the cryptocurrency boom that has been going on lately. The article talks about code in different websites that will use the resources on your computer to mine for these cryptocurrency. The end user will never know that it is exist and the person who add this code to the site will be making a ton of money off your computers resources. Do you think this is ok?

 

Source: http://fortune.com/2017/10/23/bitcoin-monero-cryptocurrency-mining-security-threat/

New Ransomware that seems to target users from South Korea using malvertisements on web sites.

 

https://www.bleepingcomputer.com/news/security/goodbye-cerber-hello-magniber-ransomware/

Equifax has had a great many blunders over the past month. Newest on the pile is the discovery Equifax’s customer service portal served up malware to users. 3rd party code embedded in the page prompted users for an update to adobe flash, which when downloaded was spyware. The page has since been taken down and remains so.

Equifax Credit Assistance Site Served Spyware

 

http://www.msn.com/en-us/news/technology/elite-hackers-stealing-nsa-secrets-is-%e2%80%98child%e2%80%99s-play%e2%80%99/ar-AAtiWhO?ocid=spartanntp

https://www.technewsworld.com/story/84864.html