MacOS High Sierra zero-day shows Keychain passwords in plain text
MacOS users who are starting the upgrade to High Sierra – and those who are using El Capitan – are vulnerable to a proof-of-concept attack that shows their online passwords in plain text, according to Synack security researcher Patrick Wardle.
He discovered that Mac Keychain, a native password management tool, can store online account usernames and passwords in plain text, allowing malicious applications direct access to the account details. However, the Keychain is generally protected by a master password.
Wardle revealed the details in a video that showed a demonstration of the attack.
Education prime target for cyber attacks, report finds
September’s top malware, Emotet botnet strikes again – Check Point
Public dataset to help researchers predict malicious activity unveiled
Disruptionware emerges as newest and nastiest cyber threat
Malware hiding on popular content delivery networks - WatchGuard
Apple issues clarification on extent of iOS malware infection
07 Oct
WatchGuard releases cloud-based service to automatically block phishing attempts
DNSWatchGO aims to fill security gap beyond the network perimeter, as new research shows 64% of remote users have fallen victim to a cyber-attack.
04 Oct
Are Fortune 500 companies failing at cyber security?
"Lax security and its resulting breaches have long-term repercussions for organisations as well as their customers, shareholders, partners, and other stakeholders."
21 Oct
ManageEngine launches holistic take on privileged access security
PAM360 provides governance over privileged access entitlements, correlation of privileged access data with other IT management platforms.
17 Oct
How to achieve secure, flexible and scalable IaaS - Bitglass
While using IaaS brings many advantages, it also raises unique data leakage concerns that must be addressed in order to maintain robust cybersecurity.
14 Oct
September’s top malware, Emotet botnet strikes again – Check Point
Check Point’s researchers report that the notorious botnet has been reactivated and is spreading active campaigns again.
10 Oct
Nuance announces updates to biometric fraud detection offering
A recent Nuance survey found 1 in 4 people have fallen victim to fraud in the last twelve months, each person losing an average of $2,000 due to inefficient passwords.
