Microsoft Bringing EMET Back As a Built-In Part of Windows 10 Slashdotby BeauHD on microsoft at January 1, 1970, 1:00 am (cached at June 27, 2017, 11:34 pm)

An anonymous reader quotes a report from Ars Technica: The Windows 10 Fall Creators Update will include EMET-like capabilities managed through a new feature called Windows Defender Exploit Guard. Microsoft's EMET, the Enhanced Mitigation Experience Toolkit, was a useful tool for hardening Windows systems. It used a range of techniques -- some built in to Windows, some part of EMET itself -- to make exploitable security flaws harder to reliably exploit. The idea being that, even if coding bugs should occur, turning those bugs into actual security issues should be made as difficult as possible. With Windows 10, however, EMET's development was essentially cancelled. But as more mitigation capabilities have been put into Windows, the need for a system for managing and controlling them has not gone away. Some of the mitigations introduce application compatibility issues -- a few even require applications to be deliberately written with the mitigation in mind -- which means that Windows does not simply turn on every mitigation for every application. It's here that Exploit Guard comes in.

Read more of this story at Slashdot.

See you in 2023 Bitcoin exchange Coin.mx bigwig gets 66 months in the slammer (The SANS ISC SecNewsFeed(cached at June 27, 2017, 11:30 pm)

Seven Tips for Better Hybrid Cloud Security (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at June 27, 2017, 11:30 pm)

Six Security Vulnerabilities with Big Data (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at June 27, 2017, 11:30 pm)

Israeli Spy Agency Creates Fund to Invest in Tech Firms (SecurityWeek) SANS ISC SecNewsFeed(cached at June 27, 2017, 11:30 pm)

Seven Mobile Security Threats to Watch (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at June 27, 2017, 11:30 pm)

Hacker Behind Massive Ransomware Outbreak Can't Get Emails From Victims Who Paid Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at June 27, 2017, 11:05 pm)

Joseph Cox, reporting for Motherboard: On Tuesday, a new, worldwide ransomware outbreak took off, infecting targets in Ukraine, France, Spain, and elsewhere. The hackers hit everything from international law firms to media companies. The ransom note demands victims send bitcoin to a predefined address and contact the hacker via email to allegedly have their files decrypted. But the email company the hacker happened to use, Posteo, says it has decided to block the attacker's account, leaving victims with no obvious way to unlock their files. [...] The hacker tells victims to send $300 worth of bitcoin. But to determine who exactly has paid, the hacker also instructs people to email their bitcoin wallet ID, and their "personal installation key." This is a 60 character code made up of letters and digits generated by the malware, which is presumably unique to each infection of the ransomware. That process is not possible now, though. "Midway through today (CEST) we became aware that ransomware blackmailers are currently using a Posteo address as a means of contact," Posteo, the German email provider the hacker had an account with, wrote in a blog post. "Our anti-abuse team checked this immediately -- and blocked the account straight away.

Read more of this story at Slashdot.

Facebook hits two billion user mark AL JAZEERA ENGLISH (AJE)(cached at June 27, 2017, 11:01 pm)

Five years after hitting the one billion mark, the social media giant founded in 2004 hit another milestone.
Saudi Arabia: Qatar demand list is non-negotiable AL JAZEERA ENGLISH (AJE)(cached at June 27, 2017, 11:01 pm)

Doha must 'amend its behaviour' or 'remain isolated', says Riyadh's foreign minister Adel al-Jubeir.
Six quick facts to know about today's global ransomware attack (ZDNet) SANS ISC SecNewsFeed(cached at June 27, 2017, 11:00 pm)

Is This Company The Source Of The 'NotPetya' Ransomware Explosion? (Forbes) SANS ISC SecNewsFeed(cached at June 27, 2017, 10:30 pm)

How Echo Show Can Win the UC Market (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at June 27, 2017, 10:30 pm)

Big, Integrated CRM or Best-of-Breed Vertical Market CRM: Which One Is Right for Me? SANS ISC SecNewsFeed(cached at June 27, 2017, 10:30 pm)

Microsoft bringing EMET back as a built-in part of Windows 10 (ArsTechnica) SANS ISC SecNewsFeed(cached at June 27, 2017, 10:30 pm)

What UC is Really About in 2017 (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at June 27, 2017, 10:30 pm)