Tesla names Oracle's Ellison to board, ending U.S. charges

Tesla Inc on Friday named two independent board directors, including Oracle Corp co-founder Larry Ellison, to fulfill a September deal that resolved federal charges that arose from Chief Executive Elon Musk's tweet about taking the electric carmaker private.


from Reuters: Technology News https://reut.rs/2LIftCs

Tesla names Larry Ellison, Walgreens executive to board

Tesla Inc on Friday named two independent board directors as part of a September deal with federal regulators to move past the turbulence that followed Chief Executive Elon Musk's tweet about taking the electric carmaker private.


from Reuters: Technology News https://reut.rs/2CEznv7

Dell debuts at $46 in return to market

Dell Technologies Inc's Class C shares opened at $46 in their return to public markets on Friday, after the company bought back shares tied to its interest in software maker VMware earlier in the month.


from Reuters: Technology News https://reut.rs/2TaDiVK

Better Together with Check Point CloudGuard IaaS and AWS Transit Gateway

As enterprise cloud adoption on AWS accelerates, security remains a top of mind concern for many businesses. Traditional security approaches don’t fit with the dynamic nature of the cloud, leaving business exposed to a host of new threats. Especially now where deployments have a hybrid solution with workloads sitting in AWS as well as in the corporate datacenter, security needs to be rethought from an end to end perspective.

As a result, security teams require a few key capabilities to secure connectivity between workloads across AWS VPCs and from/to on-prem resources: 1. Cloud Perimeter Firewall – customers want to inspect all incoming traffic into the VPCs. 2. Inter-Tenant Inspection – for workloads communicating across VPCs, a security policy needs to be applied and traffic to allow for deep packet inspection 3. Internet Bound Inspection – for workloads communicating to the internet, traffic needs inspection before leaving the IGW. 4. Hybrid Cloud Protection – for workloads that need access on-prem DC, teams need to securely connect their VPC workloads to on-prem resources.

In this blog, we will discuss how the CloudGuard IaaS solution combined with AWS Transit Gateway, builds upon the existing Transit VPC design, and offers end to end protection for enterprise workloads sitting in AWS VPCs or in the corporate datacenter.

Current Security Architecture: Check Point CloudGuard within AWS Transit VPC

The existing Transit VPC design simplifies network management and minimizes the number of connections needed to connect multiple Amazon VPCs and remote networks. Using Check Point CloudGuard together with the Transit VPC, provides comprehensive security for cloud workloads and assets with VPC perimeter security services, seamless security segmentation between VPCs, and automatically established IPsec VPN connectivity between cloud environments. The solution automatically connects spoke VPCs to a central security hub VPC for seamless security inspection, VPN and NAT services.

The post Better Together with Check Point CloudGuard IaaS and AWS Transit Gateway appeared first on Check Point Software Blog.



from Check Point Software Blog http://bit.ly/2ESXW8Z

Tesla names two independent directors as part of SEC deal

Tesla Inc on Friday named two independent board directors as part of a September deal with federal regulators to move past the turbulence following Chief Executive Officer Elon Musk's tweet about taking the electric carmaker private.


from Reuters: Technology News https://reut.rs/2EQSm8d

Tesla names Larry Ellison, Kathleen Wilson-Thompson to board

Tesla Inc on Friday named two independent board directors as part of a September deal with federal regulators to move past the turbulence following Chief Executive Officer Elon Musk's tweet about taking the electric carmaker private.


from Reuters: Technology News https://reut.rs/2EVGmSO

We’re all Just Starting to Realize the Power of Personal Data

This year revealed consumers have a lot more to learn about what happens to their information online.

from Security Latest http://bit.ly/2ESKqlL

Yankees in talks with Amazon, Sinclair to bid for Yes Network: WSJ

The New York Yankees are in talks with Amazon.com Inc and Sinclair Broadcast Group Inc about a joint bid for the team's regional sports network, Yes, the Wall Street Journal reported on Friday, citing people familiar with the matter.


from Reuters: Technology News https://reut.rs/2rZsY7v

Grab ordered to pay compensation to Vietnamese taxi firm

A Vietnamese court on Friday ordered ride-hailing firm Grab to pay 4.8 billion dong ($206,985) in compensation to a local taxi operator, ending an 18-month-long legal battle between the two firms, a Grab spokesman and state media reports said.


from Reuters: Technology News https://reut.rs/2SjjYWq

China says new financial information rules aimed at providers for institutions

China's internet regulator said on Friday the recently published rules governing financial information providers are aimed at firms supplying information to an institutional audience and to specific investors, rather than the general public.


from Reuters: Technology News https://reut.rs/2AlVXqL

Instagram 'back to normal' after bug triggers temporary change to feed

Facebook Inc's photo-sharing social network Instagram said on Thursday it has fixed a bug that led to a temporary change in the appearance of its feed for a large number of users.


from Reuters: Technology News https://reut.rs/2GGdqja

Why it’s Time to Switch from Facebook Login to a Password Manager

Social media sites are increasingly the focus of our digital lives. Not only do we share, interact and post on platforms like Facebook —we also use these sites to quickly log into our favorite apps and websites. But what happens when these social media gatekeepers are hacked? Awhile back, Facebook suffered a major attack when hackers obtained the digital keys to access at least 30 million accounts (originally thought to be 50 million), exposing highly sensitive personal details.

The attack not only gave the bad guys access to the Facebook accounts but raised the prospect of them also being able to access any linked apps or websites. The message is clear: it may be time to store log-ins for these third-party accounts in a password manager, rather than a frequently targeted social media company.

What happened, exactly?

As a Facebook user, you’re probably well-aware of the ease-of-use benefit of logging-in to your third-party website and application accounts using your Facebook credentials. Known as Facebook Connect, this is what’s called a “Single Sign-On” feature: a fast, simple, and straightforward way to log in to your various accounts, so you don’t have to remember multiple different passwords for different sites and apps.

Convenient, eh? But here’s the problem. At the end of September (in 2018), Facebook discovered a major security issue: attackers managed to steal the crucial access tokens which act as “digital keys” to keep you logged into the site without having to re-enter your password each time you use Facebook. These keys also provide access to all those third-party applications and websites you log-in to via Facebook: everything from Airbnb and Amazon to Tinder and your favorite news apps. Since there’s a chance that the bad guys were also able to illegally access these, they may have been able to gather more of your sensitive info across these accounts to commit identity theft—and thereby gain access to your credit cards as well.

How did the hackers grab these all-important access tokens? By exploiting several bugs in Facebook’s “View As” and video posting features. (View As is a feature that allows users to see what their own profile looks like to someone else). They ultimately stole access tokens for 30 million  users; accessed just name and contact details for 15 million; virtually all profile info including name, contact details, username, gender, language, relationship status, religion, etc. for 14 million; and no info at all for 1 million.

Facebook has been quick to point out that there are currently no signs the attackers did access any of third-party apps using Facebook SSO. However, that may change. It also doesn’t alter the fact that a similar incident like this, or worse, could happen in the future. Social media and web providers like Facebook are a major target for attackers, while human error will inevitably lead to some security mistakes in the future. A bug in Google’s code recently exposed the data of 500,000 users of its Google+ social platform, which has prompted their decision to shut down the consumer side of the site within the next 10 months (as of October 2018).

How can I stay safe?

Post-hack

Facebook has fixed the bugs in question and reset the access tokens of those affected by this breach, which should help to stop future attacks. However, if your account was illegally accessed in the attack, there are a few steps you should take:

  • Visit this link to get a yes or no answer on whether you were affected.
  • Be on the lookout for scams: Fraudsters may call, email or send you messages using the info they’ve obtained from the breach.
  • Beware of phishing emails: scammers might try to capitalize on the notoriety of the incident to get you to part with sensitive info, by sending emails pretending to come from Facebook. Here’s how to confirm if they’re real or not.
  • You may need to call your bank: if you were in the second group of 14m users, the hackers may have enough personal info on you to answer security questions to access your accounts. Consider adding further layers of security.

Take preventative steps

After the above, consider the following options to keep all your accounts secure going forward:

  • Disable Facebook SSO. Go toyour Facebook settings and remove all apps under Active Apps and Websites. Then under Apps, Websites and Games go to Preferences and click on Edit then Turn Off.
  • Switch on two-factor authentication: this will add an extra layer of security to your Facebook log-in. Visit Facebook’s Settings> Security and login> Setting up extra security> Use two-factor authentication.
  • Consider Facebook’s app password generator: If you wish to maintain app and website connections, this function lets you generate unique passwords for your linked apps and websites, instead of using the Facebook SSO password. However, these passwords can’t be stored in a password manager, and if you log out of the app, you’ll have to generate a fresh password.
  • Better yet, invest in a password manager to securely generate and store strong and unique passwords for each of your Facebook linked apps and websites.

Will it affect my use of Facebook?

If you disable Facebook SSO there may be some loss of sharing functionality. For example, you might find that you can’t post/share articles from within news apps direct to Facebook, and instead have to cut and paste the link manually. It will depend, however, on the apps you’re using. At the end of the day, you need to decide what’s more important to you: tighter integration between apps/websites and Facebook, or keeping your passwords in a separate, secure place away from the social media company.

How can Trend Micro help?

Trend Micro Password Manager can help you to protect the privacy and security of your app and website account passwords across PCs and Macs, and Android and iOS mobile devices. Use it as a highly user-friendly but more-secure alternative to Facebook SSO. Trend Micro Password Manager

  • Generates highly secure, unique, and tough-to-hack passwords for each of your online accounts.
  • Securely stores and replays these credentials for log-ins, so you don’t have to remember them.
  • Offers an easy way to change passwords, if any do end up being leaked or stolen.
  • Makes it quick and easy to manage your passwords from any location, on any device and browser.
  • Works across both apps and websites, with particular benefit for apps you use in conjunction with Facebook on your mobile devices.

For more information, or to purchase the product, go to our Trend Micro Password Manager website. Note that Trend Micro Password Manager is automatically installed with Trend Micro Maximum Security.

The post Why it’s Time to Switch from Facebook Login to a Password Manager appeared first on .



from Trend Micro Simply Security http://bit.ly/2Aifjx7

The Most-Read Security Stories of 2018

This year saw the most devastating cyberattack in history, a gang of teen hackers, and so much Mueller news.

from Security Latest http://bit.ly/2rVI1iC

Tech firm Sigfox develops tiny tracker to help fight rhino poaching

French tech company Sigfox has developed a bite-size tracker that can be inserted into the horns of rhinos to help conservationists monitor and protect the endangered species.


from Reuters: Technology News https://reut.rs/2EQrkg5

Innogy to put electric vehicle business into separate company

German utility Innogy is putting its business serving the electric car industry into a standalone company, separate from its main business as an energy supplier.


from Reuters: Technology News https://reut.rs/2QS7uZd

Pan Am Flight 103: Robert Mueller’s 30-Year Search for Justice

In December 1988 a bomb downed a Pan Am jet, leaving 270 dead. It was the first mass killing of Americans by terrorists. As the head of the Justice Department’s criminal division, Robert Mueller oversaw the case. And for him, it was personal.

from Security Latest http://bit.ly/2EMEbQB

Privacy Law Showdown Between Congress and Tech Looms in 2019

Lawmakers spend the better part of 2018 talking tough to tech companies. Now the pressure is on for Congress to act.

from Security Latest http://bit.ly/2ERLqYa

Exclusive: Foxconn to begin assembling top-end Apple iPhones in India in 2019 - source

Apple Inc will begin assembling its top-end iPhones in India through the local unit of Foxconn as early as 2019, the first time the Taiwanese contract manufacturer will have made the product in the country, according to a source familiar with the matter.


from Reuters: Technology News https://reut.rs/2GKu7dp

Huawei expects 2018 revenue to rise 21 percent despite international scrutiny

Huawei Technologies [HWT.UL] is expected to record a 21 percent jump in revenue for 2018 to $109 billion, its rotating chairman said, marking the Chinese tech giant's fastest pace of business growth in two years despite heightened global scrutiny of its activities.


from Reuters: Technology News https://reut.rs/2Skrz76

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads...