Forest Global Training Partners

Cyber Risks · Krebs on Security

Oracle, Life Lock Settle FTC Deception Charges

Summary: The U.S. Federal Trade Commission reached settlements with Oracle and LifeLock over separate charges of deceiving users about security, with LifeLock agreeing to pay $100 million for violating a 2010 promise to stop deceptive advertising. The FTC charged that Oracle failed for years to remove older, more vulnerable versions of Java SE when consumers updated, only changing its updater in August 2014, despite Java being installed on more than 850 million computers.

What you should know: The FTC's $100 million penalty against LifeLock is described as a record monetary award for the agency, and Oracle's own internal documents said its Java update mechanism was 'not aggressive enough or simply not working' while hackers targeted older versions to reach usernames, passwords and financial accounts.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related