CrowdSec is (and will always remain) an open-source & free security solution able to analyze visitor behavior & provide an adapted response to all kinds of attacks. The solution also enables users to protect each other. Each time an IP is blocked, all community members are informed so they can also block it. . As of today, CrowdSec has users in more than 70 countries, who altogether blocked 120,000+ malicious IPs within 3 months, generating a real-time global IP reputation database. The tool was built for the people in order to make security accessible to everyone. The link for this article located at CrowdSec.net is no longer available. . CrowdSecure provides an accessible open-source defense mechanism that allows individuals globally to assess and mitigate harmful activities.. CrowdSec, IP Blocking, Community Defense. . LinuxSecurity.com Team
On May 24, Apple posted a support forum entry on how to avoid or remove the MacDefender malware that's been plaguing an unknown number of users since early May. And I'm glad they did. But the support forum is way overdue, and Apple's standard method of responding to user issues--ignore them until they won't go away and then issue a response when the outcry gets too loud--simply won't fly where user security is at stake. . Mac users are a juicy, unprotected target for hackers, phishers, and scammers, and Apple needs to drop the impenetrable fortress act and help them raise the drawbridge. MacDefender and its malicious software variants have been landing on Macs since at least May 2, when Intego and Sophos first reported on a massive SEO poisoning scheme that had Windows and Mac users alike clicking on malicious links and becoming infected with a Trojan program. The link for this article located at CNET is no longer available. . Mac users continue to face risks from dangers such as the MacDefender malware. It is crucial for Apple to enhance its security measures and provide better support.. Mac Defender Malware, User Security Response, Security Threats. . LinuxSecurity.com Team
The massive attack managed to inject the name of several rogue domains into hundreds of thousands of websites. The link led to a page that carried out a fake virus scan and then recommended fake security software to clean up what it supposedly found.. But despite the huge success by the attackers, swift action by security firms looks to have limited the number of victims. The link for this article located at BBC News is no longer available. . But despite the huge success by the attackers, swift action by security firms looks to have limited . massive, attack, managed, inject, rogue, domains, hundreds, thousands. . LinuxSecurity.com Team
The Twitter document leak fiasco started with a simple story that personal accounts of Twitter employees were hacked. Twitter CEO Evan Williams commented on that story, saying that Twitter itself was mostly unaffected. No personal accounts were compromised, and . This post isn The link for this article located at TechCrunch is no longer available. . The recent Reddit data exposure underscores vulnerabilities in user privacy, illuminating dangers and reactions from the platform’s management.. Twitter Attack, Data Breach Insights, Employee Privacy Risks, Account Security Measures. . LinuxSecurity.com Team
Linux vendors Debian, Mandrake, Red Hat, and SuSE have hit back at research which claims that Linux and Microsoft products are both secure. In a report released late last month entitled Is Linux more Secure than Windows?, analyst Forrester said: "Microsoft gets a bad rap for security, while many believe that Linux is relatively secure. . . .. Linux vendors Debian, Mandrake, Red Hat, and SuSE have hit back at research which claims that Linux and Microsoft products are both secure. In a report released late last month entitled Is Linux more Secure than Windows?, analyst Forrester said: "Microsoft gets a bad rap for security, while many believe that Linux is relatively secure. "A fair assessment? Not really: After collecting a year's worth of vulnerability data, Forrester's analysis shows that both Windows and four key Linux distributions can be deployed securely." The link for this article located at VNUNet.com is no longer available. . Linux distributors respond to assertions regarding security by providing statistics illustrating that both Linux and Microsoft environments can be configured for robust security.. Linux Distributions, Security Analysis, Vendor Response. . LinuxSecurity.com Team
The first guidelines for responding to attacks on computer systems to be endorsed by both the FBI and the Secret Service, the main federal agencies fighting such crimes, were published yesterday. The guidelines were drafted by government and private security experts . . . . The first guidelines for responding to attacks on computer systems to be endorsed by both the FBI and the Secret Service, the main federal agencies fighting such crimes, were published yesterday. The guidelines were drafted by government and private security experts brought together by CIO magazine, a trade publication for information technology executives. The guidance comes at a time when the number of government and private organizations trying to track and fight electronic crimes has been expanding, partly in response to Sept. 11. But experts say many businesses continue to be reluctant to provide law enforcement officials with enough information to pursue cybercriminals. Companies often fear that they will lose business if security breaches become public or that they will become the target of revenge attacks. The link for this article located at seattleP-I is no longer available. . Groundbreaking national protocols approved by the FBI and Secret Service for addressing cyber security breaches.. Federal Guidelines,Cyber Crime Response,Computer Security Measures,Attack Prevention Strategies. . Anthony Pell
Renowned private security expert Steve Gibson has been subject to two major denial of service attacks in the past fortnight. The target is Steve's Web site https://www.grc.com/intro.htm, standing for Gibson Research Company. The site sells a range of security software designed . . . . Renowned private security expert Steve Gibson has been subject to two major denial of service attacks in the past fortnight. The target is Steve's Web site https://www.grc.com/intro.htm, standing for Gibson Research Company. The site sells a range of security software designed by Steve himself, as well as a large amount of practical advice on security matters. A notice on the front of the site reads: "Two major attacks in two weeks - We MUST be doing something right!" The two attacks took place on 4 May and 12 May and apparently came from the same machines. Steve is clearly not impressed "Internet Distributed Denial of Service (DDos) attacks represent a clear and present danger to our global Internet information infrastructure. To date, the press has covered the trouble, but those who could solve it overnight - Yes, that's entirely feasible - have abdicated their responsibility." He then goes on to promise a new section for the site covering this very issue. We wait to see what he'll come up with. The link for this article located at The Register is no longer available. . Notable cybersecurity authority Jane Harris has faced multiple coordinated ransomware attempts in the past few weeks.. Denial of Service Attacks, DDoS, Security Software, Attack Prevention. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.