Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
POS Malware Continues To Evolve
Newest First  |  Oldest First  |  Threaded View
GonzSTL
50%
50%
GonzSTL,
User Rank: Ninja
11/17/2014 | 11:36:50 AM
Re: Alarming
The two processes critical to the POS operation are: card data capture and communications with the transaction processor, and communications with internal back office applications.  So really, the best way to go is to ensure the security of the local machines and infrastructures. Encryption helps, no doubt, but at some point in time, the data needs to be decrypted so that processing can continue with the actual data, and this takes place within memory, the RAM scraper playground. So really, strict controls on the card transaction computing machine, stripping down services and applications to the bare minimum, file integrity protection, and anti-malware software serve to provide much needed protection to help prevent data leakage. Isolation and continuous monitoring of the card processing network help at the transaction perimeter, and strict controls on the back end internal server and external perimeter infrastructure help to prevent data exfiltration. None of these techniques are new; in fact, they are well established practices that have been preached for a very long time. It all boils down to strict controls and proper enforcement; breaches occur when those controls are violated. Upper management should make sure that there are sufficient resources to properly address and enforce those controls, and that appropriate separation of duties exist to address conflicts of interest.
Marilyn Cohodas
50%
50%
Marilyn Cohodas,
User Rank: Strategist
11/17/2014 | 10:08:36 AM
Retail hacking Radio Show THIS Wednesday @ Noon ET
@Dr.T -- and others. Just a reminder about our DR Radio show this week, which is totally focused on retail industry breaches:  Retail Hacking: What To Expect This Holiday Season (Wednesday at 1:00 p.m. ET (10:00 a.m. PT).  It promises to be a great show, with Kelly Jackson-Higgins interviewing  Nick Pelletier, senior consultant with Mandiant and Arthur Tisi, co-founder and CEO at The Praescripto Group LLC, and former CIO for Natural Markets Food Group. To register and save the date, click here.

 
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/17/2014 | 9:39:45 AM
Re: Alarming
There can always be end to end encryption to reduce the risk of data being compromised. There is no real need to keep data on the POS unencrypted, easy to solve but it will cost more of course.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/17/2014 | 9:37:03 AM
Re: Cyber Security World Conference 2014
I will most likely miss this but hope be able to follow it online. We now know bad guys are winning based on the recent trends, good guys need to come together and address the issues for sure.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/17/2014 | 9:34:17 AM
POS terminals
It looks like we need to increase intelligence and security on POS terminals, they seem to be proven the weakest link on Target and Home Depot attacks. Maybe in the light of Internet of Things we will have better controlled and managed POS devices.
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
11/12/2014 | 7:43:13 AM
Alarming
What a scary notion to ponder before the holiday season where credit cards will be swiped an incredible amount of times. It seems that with the evolution of malware in regards to POS that encryption of the POS points is no longer a strong means of securing customer data since much of the malware is sitting on the boxes themselves according to this article. This means that to perform their job, the machines will eventually have to decrypt the data from the cards and I would believe this would be done on the same system. With this being the case, what are some means of ensuring customer data security, other than persistent scans to detect malware on  daily basis?
KennethW444
50%
50%
KennethW444,
User Rank: Apprentice
11/12/2014 | 1:57:47 AM
Cyber Security World Conference 2014

Along these lines, cyber security experts will be in attendance at Golden Networking's Cyber Security World Conference 2014, November 21, where renowned information security authorities will bring their latest thinking to hundreds of senior executives focused on protecting today's enterprises and government data assets. This conference is organized by Golden Networking.



COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/9/2020
Omdia Research Launches Page on Dark Reading
Tim Wilson, Editor in Chief, Dark Reading 7/9/2020
4 Security Tips as the July 15 Tax-Day Extension Draws Near
Shane Buckley, President & Chief Operating Officer, Gigamon,  7/10/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-15105
PUBLISHED: 2020-07-10
Django Two-Factor Authentication before 1.12, stores the user's password in clear text in the user session (base64-encoded). The password is stored in the session when the user submits their username and password, and is removed once they complete authentication by entering a two-factor authenticati...
CVE-2020-11061
PUBLISHED: 2020-07-10
In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in...
CVE-2020-4042
PUBLISHED: 2020-07-10
Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allows client initiated connection and connects to the client itself. The malicious client can replay the Bareos director's cram-md5 challenge to...
CVE-2020-11081
PUBLISHED: 2020-07-10
osquery before version 4.4.0 enables a priviledge escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables l...
CVE-2020-6114
PUBLISHED: 2020-07-10
An exploitable SQL injection vulnerability exists in the Admin Reports functionality of Glacies IceHRM v26.6.0.OS (Commit bb274de1751ffb9d09482fd2538f9950a94c510a) . A specially crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerabi...