Intel Announces Compute Lifecycle Assurance to Protect Platform Supply Chains
Globalization and business transformation have created an incredibly complex worldwide supply chain for almost all manufacturers. Hardware ostensibly manufactured in the U.S. will inevitably include components manufactured in many different locations around the world -- including nations that are in other circumstances described as 'adversary states'.
Magecart Skimmers Found on Salesforce's Heroku Platform
Magecart started as the name given to a single criminal gang operating a software skimming attack targeting payment card data on web sites. The process proved so successful that other gangs began to use the same approach.
Magecart is now the generic term for the attack rather than the name of a gang. It is believed that there are a dozen or more gangs operating the Magecart style of attack -- some of them being long-standing and known gangs.
Inside Mastercard's Push for Continuous Security
Mastercard to Recommend NIST CSF for Continuous Security Between PCI Audits
Cybersecurity for a business model like Mastercard is complex. First, it has the fundamental need to protect its own networks. Second, however, it has a huge global franchise that must also be kept secure to maintain trust in the product.
Microsoft Patches Vulnerability Leading to Azure Account Takeover
Microsoft recently addressed an OAuth 2.0 vulnerability that could allow an attacker to take over Azure accounts.
The issue impacts specific Microsoft OAuth 2.0 applications and allows an attacker to create tokens with the victim’s permissions, CyberArk’s security researchers have discovered.
The root cause of the security flaw, which CyberArk calls BlackDirect, is that anyone can register domains and sub-domains that OAuth applications trust.
Microsoft to Stop Supporting Cortana on Android and iOS
Microsoft has announced that they will no longer support the Cortana digital personal assistant app on Android and iOS devices starting in 2020.