Page 11 - Threat Intelligence 11-5-2019

Internal Threats

Major vulnerability patched in the EU's eIDAS authentication system. uropean authorities have released
today a patch for the eIDAS system. The patch fixes two security flaws that could allow an attacker to pose as
any EU citizen or business during official transactions. eIDAS stands for electronic IDentification,
Authentication and trust Services. It is a very complex, cryptographically-secured electronic system for
managing electronic transactions and digital signatures between EU member states, citizens, and businesses.

Source: https://www.zdnet.com/article/major-vulnerability-patched-in-the-eus-eidas-authentication-
system/

Samsung Patched The Galaxy S10 Fingerprint Reader Flaw. Reportedly, Samsung has worked out a patch for
the infamous security flaw in the Galaxy S10 fingerprint reader. The tech giant has begun rolling out the fix in a
gradual manner, starting from South Korea. Almost a week ago, a customer found that her new Galaxy S10
phone had a serious glitch. With an unbranded screen protector on her phone, she could unlock the device
even with other users fingerprints. Upon discovering the flaw, she reported the matter to Samsung, who
acknowledged the vulnerability and scheduled a fix.
Source: https://latesthackingnews.com/2019/10/28/samsung-patched-the-galaxy-s10-fingerprint-
reader-flaw/

Stop ignoring printer security: It's time for CSOs to take control. Printers are an overlooked soft target in the
enterprise that can make an attacker's job much easier, despite extensive built-in security features that rarely
get turned on, according to recent research by two unaffiliated security research teams at Symphion and NCC
Group. Most enterprises outsource their printers to managed print services (MPS) providers, and the intense
competition on price among MPS providers has encouraged many of them to optimize for cost and efficiency,
but not for security. That leaves gaping holes in many organizations' defenses.

Source: https://www.csoonline.com/article/3448058/printers-an-overlooked-security-risk-for-the-
enterprise.html

www.accumepartners.com
11