HIGH SECURITY
Tim&Larry

LastPass Allows 2FA Security Bypass as a Feature




Here is the weekly roundup :

LastPass Allows 2FA Security Bypass as a Feature
Password manager LastPass allows for the bypass of 2 Factor Authentication (2FA) – a much lauded and needed security layer for web credentials – with a feature embedded in its popular password management and vault suite.

Home Depot Offers $19 Million to Settle Hacking Lawsuit
Major retailer Home Depot has revealed that it is willing to pay up to $19.5 million toward the settlement of a class-action lawsuit brought forward by customers affected in an infamous security breach from 2014. The breach, one of the largest ever, saw the credit card information of some 56 million Home Depot customers stolen by hackers.

IRS Suspends Identity Protection Tool after Fraudulent Logins
Last week, the Internal Revenue Service (IRS) attempted to tighten security for its users following a comprehensive breach of its systems in 2015 which saw hackers steal taxpayers’ records. The new measure was the issuance of personal identification numbers (PINs).

Apple Macs Targeted in the Platform's First Ransomware Attack
Over the weekend, researchers from security firm Palo Alto Networks and Apple discovered and blocked a cyberattack targeting Mac users with malware ransomware.



Hackers Breach Florida Cancer Clinic, 2.2 Million Records Stole
Fort Myers-based 21st Century Oncology has revealed that it has begun warning 2.2 million patients about the possibility of their personal information being breached by a hacker(s) who broke into the company’s data base in October 2015.



Interesting Reading From Around the Web:

Five Online Security Measures You're Probably Doing Wrong
After surveying security experts and non-experts alike, researchers identified some distinct discrepancies between the practices and recommendations of expert. So if you’re looking to beef up your online security practices, just follow these tips and you’ll be well ahead of the curve.


Hackers Target Anti-DDoS Firm Staminus
Staminus Communications Inc., a California-based Internet hosting provider that specializes in protecting customers from massive “distributed denial of service” (DDoS) attacks aimed at knocking sites offline, has itself apparently been massively hacked. Staminus’s entire network was down for more than 20 hours until Thursday evening, leaving customers to vent their rage on the company’s Facebook and Twitter pages. In the midst of the outage, someone posted online download links for what appear to be Staminus’s customer credentials, support tickets, credit card numbers and other sensitive data.


Dwolla Action Opens New Territory for CFPB: Attorneys
Legal experts said they believe the CFPB's action against online payment provider Dwolla – its first action related to data security – could lead to considerable ramifications going forward. The CFPB targeted Dwolla March 2 for deceiving consumers about its data security practices and the safety of its online payment system.



Upcoming Events:


Technology Managers Forum

LIFARS is a proud sponsor of the Technology Managers Forum. Join us at the event to find out how LIFARS and its partner Cyphort can help you cut the detection and response time to cybersecurity threats.

March 24, 2016, New York, NY



Find Out More



Your Digital World Secured: How to Prevent Personal & Corporate Hacking

Eventsy teams up with LIFARS, NYC's elite cybersecurity firm, to bring you a diverse panel on Media Cyber Security and a rich evening of networking!

We are thrilled to present: How to Prevent Personal & Corporate Hacking: a premiere panel featuring speakers with experience in the FBI, Secret Service, digital forensics, and more. Come learn how to protect yourself on both the personal and corporate level in our new media-rich era and earn 2 CPE credits.

FOR A 50% DISCOUNT, PLEASE USE THE FOLLOWING CODE: LIFARS50


March 31, 2016, New York, NY



Find Out More



LIFARS at the QuBit Conference 2016

Always wanted to visit Prague? Now is your chance! Yet another good reason to visit - the QuBit Conference. So what are you waiting for? Tickets won't be this cheap for long!

Special packages are now available!


April 12-14, 2016, Prague, Czech Republic



Register Now

DataSolutions Secure Computing Forum

The 4th annual Secure Computing Forum brings world-class speakers together to discuss various aspects of cybersecurity and the way they are all interconnected in protecting your brand and securing your business.

May 12, 2016, Dublin, Ireland



Find Out More


Featured Article:



Computer Data: Is It Tangible Property & Subject to “Physical Loss or Damage”?



PART 2

In a follow up to a previous article (see below) we looked into courts’ verdicts on whether or not computer data was deemed “tangible property” or subject to “physical loss or damage” for the purposes of insurance. In this article, we’ll look into what policymakers can do at the time of renewing their insurance and at the time of claiming.



Read Full Article





Computer Data: Is It Tangible Property & Subject to “Physical Loss or Damage”?



PART 1

Business policy holders were scratching their heads – for the purposes of insurance – to find out if stored data in the form of media, software, or programs are deemed “tangible property.” Alternatively, could computer data be subject to “physical loss or damage”? Ondrej Krehel takes a look at some prior court cases to find out in this 2 part series.



Read Full Article





Featured Q&A:



Jeff Costlow on Network Bridges & Security

Jeff Costlow is the security architect for Tempered Networks where he is responsible for implementing security into all aspects of software development. With a deep understanding of a secure development lifecycle and many years of successful program design and execution, Jeff’s work has positively impacted the software engineering market across the areas of design-time threat modeling, peer based software review, security code scanning, and vulnerability response.



Read Full Article



Featured Content:



Corporate Cyberattacks - New Case Study

A global money transfer organization with presence in over 100 countries and over 300,000 payment points suffered losses in excess of $5 million annually due to an easy-to-carry out type of cyberattack. With many challenges along the way, our team was able to identify, remediate, and implement prevention solutions that prevented further losses.

Free Download



Connect with us

LinkedIn Twitter Facebook Google Website YouTube

LIFARS LLC, 244 Fifth Avenue, Suite 2035, New York, NY 10001 Copyright © 2016 LIFARS, LLC, All rights reserved.