Biometrics: Preparing for a Passwordless Future

From securityboulevard.com

biometrics

In today’s digital world, people can accomplish anything they need to online, from banking to shopping. Yet, the popular authentication for this online activity—passwords and PINs—is putting countless Americans at risk for online fraud. Gartner predicted that by 2020, 75% of omni-channel customer-facing organizations will endure a targeted, cross-channel fraud attack.

Companies need to not only protect their business against the cost of fraud and damaged reputation but also take responsibility for better safeguarding the personal information of their customers, employees and stakeholders.

Read more…

Higher fees from Facebook for vulnerabilities in Hermes

From en.secnews.gr

Hermes

Hermes is an open source JavaScript engine that was released by Facebook a year ago and is used by the company’s React native applications for Android and other software, including Spark AR, an augmented reality platform used to create effects in Facebook, Instagram and even the company’s smart screens.

Read more…

The rollout of 5G will dawn a new era for edge data centres – but there’s work to do yet

From itproportal.com

The arrival of 5G has dawned a new era in connectivity and data sharing, and edge data centres will have a crucial role to play in its full rollout. Gartner’s recent report highlights this, as it predicts that by 2025 edge computing will account for 75 per cent of enterprise-generated data. The first major impact of the introduction of 5G will be the movement of massive amounts of data through faster and virtualised networking, as well as wireless infrastructure. Data centres will be at the heart of enabling 5G in all applications for the foreseeable future, and 5G itself will both drive new edge deployments, and enable new edge use cases.

Read more…

DNC issues another warning on TikTok, citing data security risks

From cyberscoop.com

The Democratic National Committee on Friday reiterated a warning to Democratic campaigns, state parties and committees about the security risks of using the video-sharing app TikTok, which is owned by Chinese tech company ByteDance.

“Because of the amount of data it tracks, we continue to advise campaign staff to refrain from using TikTok on personal devices,” a DNC official told CyberScoop. “[I]f campaigns are using TikTok for campaign work, we recommend they use a separate phone and account.”

Read more…

Week in review: MongoDB attacks, hackers hitting F5 BIG-IP, Citrix devices, Patch Tuesday forecast

From helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and reviews:

Attackers are probing Citrix controllers and gateways through recently patched flaws
SANS ISC’s Dr. Johannes Ullrich spotted attackers attempting to exploit two of the Citrix vulnerabilities on his F5 BigIP honeypot (set up to flag CVE-2020-5902 exploitation attempts).

Attackers are bypassing F5 BIG-IP RCE mitigation – you might want to patch after all
Attackers are bypassing a mitigation for the BIG-IP TMUI RCE vulnerability (CVE-2020-5902) originally provided by F5 Networks.

Read more…