Social media company Facebook has announced plans to selectively protect some of its better-known users from being harassed on its platform. Updates to the company’s bullying and harassment policies were announced yesterday by Facebook’s global head of safety, Antigone Davis. The announcement coincided with National Bullying Prevention and Awareness Day in the United States.  Davis said Facebook is introducing a policy “to help protect people from mass harassment and intimidation.” Under the new rules, “harmful content” that attacks public…

A voice phishing campaign spotted by Armorblox tried to convince people to give the attackers access to their computer. Image: Tero Vesalainen, Getty Images/iStockphoto A standard phishing attack typically involves sending people an email or text message spoofing a known company, brand or product in an attempt to install malware or steal sensitive information. But a variation called vishing (voice phishing) adds another element, in which the cybercriminals speak with their victims directly by phone…

The new ransomware family, called Yanluowang, appears to still be under development and lacks some sophisticated features found in similar code. Nonetheless, Symantec said, it’s dangerous. kaptnali, Getty Images/iStockphoto The Symantec Threat Hunter Team at Broadcom Software has discovered what appears to be a brand new family of ransomware named after the Chinese deity that judges the souls of the dead. Yanluowang is the perfect ransomware for the Halloween season, though this particular malevolent digital…

Another cybersecurity breach has occurred at Taiwanese computer manufacturer Acer. Earlier this year, the company suffered a $50m ransomware extortion attempt after falling prey to the REvil ransomware group in May. In this latest incident, the computer maker initiated its security protocols after detecting an attack on the section of its after-sales service system that is based in India.  Prior to Acer’s confirmation of the breach, hackers claimed to have stolen more than 60 GB of the company’s data. On…

Many people have heard of the GDPR (General Data Protection Regulation), legislation that became law across the EU in May 2018.  It was designed to regulate how businesses protect personal data, notably how personal data is processed, and granted rights to individuals to exercise more control over their personal data. GDPR is a framework which requires businesses to implement processes to enable them to understand where data is held, how it is used, how long…

Having multiple AWS accounts within an organization is a common strategy. Numerous factors play a crucial role in deciding the appropriate number of AWS accounts required for an organization, such as resource isolation, security isolation, cost allocation, billing, business unit separation, audit, compliance, etc. However, managing multiple AWS accounts also comes with some additional complexity.  Usually, data stored in S3 is replicated primarily for reliability, performance, and compliance reasons. How can we replicate objects to a bucket owned by a different AWS account? What if…

Switching the SSH listening port is an easy way to help secure remote login on your Linux servers. But when SELinux is involved, you have to take a few extra steps. Jack Wallen shows you how. Image: Funtap/Shutterstock SSH has a lot of tricks up its sleeve for security, one of which is to configure the service to use a non-standard port. Out of the box, SSH uses port 22. If you want an easy…