Tag Archive for: There’s

LastPass has a secret major vulnerability – and, as yet, there’s no fix

LastPass has a secret major vulnerability - and, as yet, there's no fix

The popular password management firm LastPass is working to fix major vulnerability in its software, responsibly disclosed to it by a security researcher.

David Bisson reports.

Graham Cluley

IBM pledge: Not only does Notes/Domino live, there’s no end in sight

Having begun my time here covering the late 1990s email/collaboration battles between Lotus Notes/Domino, Microsoft Outlook/Exchange, and, yes, Novell GroupWise, it’s interesting to see IBM, which bought Lotus in 1995, pledging to support Domino and Notes for, well, an open-ended long period of time.

Not surprising, though.    

In a blog post published yesterday, Ed Brill, vice president of product management and design for IBM Collaboration Solutions, laid out the company’s current thinking:

“Notes/Domino 9.0 shipped in 2013, and IBM’s normal five-year support model meant that mainstream support could have ended in 2018. However, we know how important these products are to your business, and we are continuing to invest in new functionality. For IBM Notes/Domino 9.0, we have announced that product support will be extended through at least 2021, and extended support through at least 2024. There is no end of life planned for Notes and Domino, and we will continue to update the timeline for support as appropriate based on future releases and market requirements.”

To read this article in full or to leave a comment, please click here

Network World Paul McNamara

Malware study shows people still falling for old tricks, but there’s hope – Yahoo Finance


Yahoo Finance

Malware study shows people still falling for old tricks, but there's hope
Yahoo Finance
Too many of us still fall for the old “click this attachment” email trick, and get our computers infected with malware or viruses. The result: our data is increasingly …

and more »

android ransomware – read more

There’s a new DDoS army, and it could soon rival record-setting Mirai

Enlarge (credit: ellenm1)

For almost three months, Internet-of-things botnets built by software called Mirai have been a driving force behind a new breed of attacks so powerful they threaten the Internet as we know it. Now, a new botnet is emerging that could soon magnify or even rival that threat.

The as-yet unnamed botnet was first detected on November 23, the day before the US Thanksgiving holiday. For exactly 8.5 hours, it delivered a non-stop stream of junk traffic to undisclosed targets, according to this post published Friday by content delivery network CloudFlare. Every day for the next six days at roughly the same time, the same network pumped out an almost identical barrage, which is aimed at a small number of targets mostly on the US West Coast. More recently, the attacks have run for 24 hours at a time.

While the new distributed denial-of-service attacks aren’t as powerful as some of the record-setting ones that Mirai participated in, they remain plenty big, especially for an upstart botnet. Peak volumes have reached 400 gigabits per second and 200 million packets per second. The attacks zero in on layer 3 and layer 4 of a target’s network layer and are aimed at exhausting transmission control protocol resources.

Read 2 remaining paragraphs | Comments

Technology Lab – Ars Technica