Google Wants to Block Risky File Downloads in Chrome(April 10, 2019)
Google is considering blocking some risky file downloads in future versions of its Chrome browser. Specifically, Google wants to block certain executable and archive downloads that are delivered over an HTTP connection initiated from an HTTPS website. The file types that would be blocked include exe, dmg, crx, zip, gzip, rar, tar, and bzip.
Hackers Targeted Election Systems in All 50 States in 2016(April 10, 2019)
A Joint Intelligence Bulletin issued by the US Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) to state and local authorities said that hackers targeted election systems in all 50 states during the 2016 election cycle. The bulletin says that “the FBI and DHS assess that Russian government cyber actors probably conducted research and reconnaissance against all US states’ election networks leading up to the 2016 Presidential elections.”
Read more in:
– arstechnica.com: DHS, FBI say election systems in all 50 states were targeted in 2016
City of Ottawa, Canada Was Hit by Business eMail Fraud(April 9, 2019)
In July 2018, the city treasurer of Ottawa, Canada wired nearly US$100,000 (CAD$ 130,000) to scammers in an instance of business email fraud. In a report to the city council, Ottawa auditor general said that city financial staff failed to follow money transfer rules. The report also noted several other problems that helped make the theft possible, including the lack of formal written wire transfer payment rules.
One can only wonder whatever happened to multi-party controls and out-of-band confirmation. Management should prefer such controls to trying to fix human gullibility.
Read more in:
– www.itworldcanada.com: How the city of Ottawa was stung by email fraud
– www.ctvnews.ca: Ottawa city treasurer transfers $130K of taxpayer funds to email fraudsters