---

How to Keep Security on Life Support After Software End-of-Life

It's the end of support this week for Windows 7 and Server 2008. But what if you truly can't migrate off software, even after security updates stop coming?

---

Apple Denies FBI Request to Unlock Shooter’s iPhone—Again

Refusal to unlock the phones of a Florida shooter could set up another legal battle between Apple and the Feds over data privacy in the case of criminal investigations.

---

Russia responsible for hacking gas firm tied to Trump impeachment: report

The cyberattack bears similar hallmarks to the 2016 DNC hack.

---

49 million user records from US data broker LimeLeads put up for sale online

Data from an exposed LimeLeads Elasticsearch server ends up on a hacking forum.

---

This Trojan hijacks your smartphone to send offensive text messages

The feature is certainly one way to advertise a malware infection.

---

Windows 7 end of life: Time to move on

Today, Microsoft is officially pulling the plug on its support for Windows 7. What’s your plan?

The post Windows 7 end of life: Time to move on appeared first on WeLiveSecurity

---

Windows 7 end of life: Time to move on

Today, Microsoft is officially pulling the plug on its support for Windows 7. What’s your plan?

The post Windows 7 end of life: Time to move on appeared first on WeLiveSecurity

---

Smart Home Devices

Now adays most of us have numerous devices in our homes connect to the Internet. From thermostats and gaming consoles to baby monitors, door locks or even your car. Ensure you change the default passwords on these devices and enable automatic updating.

---

Cryptic Rumblings Ahead of First 2020 Patch Tuesday

Sources tell KrebsOnSecurity that Microsoft Corp. is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. Those sources say Microsoft has quietly shipped a patch for the bug to branches of the U.S. military and to other high-value customers/targets that manage key Internet infrastructure, and that those organizations have been asked to sign agreements preventing them from disclosing details of the flaw prior to Jan. 14, the first Patch Tuesday of 2020.

---

Microsoft to Officially End Support for Windows 7, Server 2008

Windows 7 and Server 2008 will continue to work after Jan. 14, 2020, but will no longer receive security updates.

---

Website Collecting Australian Fire Donations Hit by Magecart

The attack may have compromised donors' payment information.

---

Exploits Released for As-Yet Unpatched Critical Citrix Flaw

Organizations need to apply mitigations for vulnerability in Citrix Application Delivery Controller and Citrix Gateway ASAP, security researchers say.

---

What Questions Should I Keep in Mind to Improve My Security Metrics?

If you can answer these six questions, you'll be off to a great start.

---

Microsoft spots malicious npm package stealing data from UNIX systems

Malicious JavaScript package was only active on the npm repository for two weeks.

---

Scammers Dupe Texas School District Out of $2.3M

The wide-scale phishing scam reportedly started in early November and continued through December, before it was discovered by the Texas school district.

---

Joker Android Malware Snowballs on Google Play

Google has removed 17,000 Joker-infested apps from the Play store to date.

---

CES Surveillance Hype Worries Privacy Advocates

CES wiz-bang surveillance tech gives privacy advocates the willies.

---

An Identity Management Spin on Shaggy's Hit Song

Wondering how this guy could be so clumsy? So is he.

---

Report: Chinese hacking group APT40 hides behind network of front companies

A group of anonymous security analysts have tracked down 13 front companies operating in the island of Hainan through which they say the Chinese state has been recruiting hackers.

---

5 major US wireless carriers vulnerable to SIM swapping attacks

When it comes to protection against this insidious type of scam, the telcos’ authentication procedures leave a lot be desired, a study finds

The post 5 major US wireless carriers vulnerable to SIM swapping attacks appeared first on WeLiveSecurity