At the Intersection of Technology and Real Life

aRTy News Headlines – 2018-12-21

Michael York Reading, PA News for aRTy

The Future Book is Here, But it’s Not What We Expected – Wired

Chinese Hackers Tap into EU Diplomatic Communications Network – ZDNet

Hacker Targets Gmail and Other Secure Email Services – ZDNet

Idiots with Drones Have Shutdown London’s Gatwick Airport – The Verge

Volkswagen Buys Volvo’s Connected Car Service – Engadget

Firefox Focus for Android Adds Improved Privacy Tools – Engadget

What is aRTy News?

Leave a Reply Cancel reply

You must be logged in to post a comment.

Latest Headlines

One Man’s Search for the DNA Data That Could Save His Life

19 November 2020

The genetic correlations that could help Bryce Olson find a drug that works against his cancer are a scattered mess. Why don’t we have a better system for analyzing this kind of information? [...]

Death, Love, and the Solace of a Million Motorcycle Parts

17 November 2020

To cope with the uncertainty and sadness around my mother-in-law’s death, I set about building a four-cylinder superbike. [...]

Huawei, 5G, and the Man Who Conquered Noise

16 November 2020

How an obscure Turkish scientist’s obscure theoretical breakthrough helped the Chinese tech giant gain control of the future. US telecoms never had a chance. [...]

The Scammer Who Wanted to Save His Country

13 November 2020

Last year, a hacker gave Glenn Greenwald a trove of damning messages between Brazil’s leaders. Some suspected the Russians. The truth was far less boring. [...]

What Writing a Pandemic Newsletter Showed Me About America

12 November 2020

In April, I started 'Coronavirus News for Black Folks.' It gave me a kind of second sight. I could see where the country is headed—and how blind it’s been. [...]

The Strange and Twisted Tale of Hydroxychloroquine

11 November 2020

The much-hyped drug sparked a battle between power and knowledge. Let’s not repeat it. [...]

The Vulnerable Can Wait. Vaccinate the Covid Super-Spreaders First

10 November 2020

Who gets priority when Covid-19 shots are in short supply? Network theorists have a counterintuitive answer: Start with the social butterflies. [...]

The History of Poop Is Really the History of Technology

6 November 2020

Sure it's gross, but human mastery over its chemistry allowed the success of agriculture—and the rise of civilization. [...]

A Nameless Hiker and the Case the Internet Can’t Crack

2 November 2020

The man on the trail went by “Mostly Harmless." He was friendly and said he worked in tech. After he died in his tent, no one could figure out who he was. [...]

How to Escape a Sinking Ship (Like, Say, the Titanic)

30 October 2020

First, put on your fanciest clothes. And at 1:15 am, consider heading down to Deck D. [...]

The Week in Ransomware - November 27th 2020 - Attacks continue

27 November 2020

With the USA holidays, this has been a relatively slow week in new research being released. We did, though, see some organizations get attacked or report historical attacks. [...]

Office 365 phishing abuses Oracle and Amazon cloud services

27 November 2020

A rather complex phishing scheme for stealing Office 365 credentials from small and medium-sized businesses in the U.S. and Australia combines cloud services from Oracle and Amazon into its infrastructure. [...]

Drupal issues emergency fix for critical bug with known exploits

27 November 2020

Drupal has released emergency security updates to address a critical vulnerability with known exploits that could allow for arbitrary PHP code execution on some CMS versions. [...]

MasterChef, Big Brother producer hit by DoppelPaymer ransomware

27 November 2020

French multinational production and distribution firm Banijay Group SAS was hit earlier this month by a DoppelPaymer ransomware attack and had sensitive information stolen by the ransomware operators during the incident. [...]

Phishing lures employees with fake 'back to work' internal memos

27 November 2020

Scammers are trying to steal email credentials from employees by impersonating their organization's human resources (HR) department in phishing emails camouflaged as internal 'back to work' company memos. [...]

CBS Last.fm fixes admin password leakage via Symfony profiler

27 November 2020

This week, British music streaming service, Last.fm has fixed a credentials leak on their systems. The leak occurred due to a misconfigured Symfony profiler, exposing admin username and password. [...]

Canon publicly confirms August ransomware attack, data theft

26 November 2020

Canon has finally confirmed publicly that the cyberattack suffered in early August was caused by ransomware and that the hackers stole data from company servers. [...]

Truck routing provider Rand McNally hit by cyberattack

26 November 2020

Chicago-based transportation technology firm Rand McNally is working on restoring network functionality following a cyberattack that hit its systems earlier this week. [...]

Warning: Massive Zoom phishing targets Thanksgiving meetings

26 November 2020

Everyone should be on the lookout for a massive ongoing phishing attack today, pretending to be an invite for a Zoom meeting. Hosted on numerous landing pages, BleepingComputer has learned that thousands of users' credentials have already been stolen by the attack. [...]

Walmart Black Friday best deals: $398 Samsung Smart TV, save $60 on Apple Watch SE and Beats Solo 3 - CNET

28 November 2020

The retailer's giant Black Friday sale is continuing over the weekend, with some previously sold-out deals now back in stock. [...]

Best Target Black Friday savings: Save on iRobot Roomba, Fitbit Versa 2, JBL portable speaker, more - CNET

28 November 2020

See the best deals available at Target. [...]

9 great reads from CNET this week - CNET

28 November 2020

Take deep dives into coronavirus vaccines, how GPS works, new game consoles and the big flops of the tech world this year. [...]

Smart bird feeder snaps bird selfies for collectible game and conservation tool - CNET

28 November 2020

The Bird Buddy aims to identify its feathered visitors by selfie or song, and connects to an app for a gamelike collecting experience and conservation effort. [...]

The amazing Vava 4K HDR ultra-short-throw projector is back for $1,950 - CNET

28 November 2020

That's $850 off the regular price. Still expensive? Yes. Still totally worth it? Yes. [...]

AirPods Pro vs. Galaxy Buds Live: Sound quality, noise cancellation compared - CNET

28 November 2020

Can Samsung's Galaxy "Beans" beat Apple's standard bearer, the AirPods Pro? [...]

Best Black Friday home gym deals: Save on treadmills, massage guns, spin bikes and rowers - CNET

28 November 2020

Home gyms are more popular than ever and Black Friday 2020 is the perfect time to get set up with massive reductions on everything from treadmills to yoga mats. [...]

Here's what iPhone 12 Pro cameras can do: Incredible Night Mode photos and more - CNET

28 November 2020

Sunsets, sunrises, wide vistas and aquamarine waters give ample evidence of another leap forward in mobile photography. [...]

Black Friday best kitchen sales: Save on Vitamix, Instant Pot, Nespresso, Ninja Foodi and more - CNET

28 November 2020

Save big bucks on blenders, coffee makers, air fryers, pressure cookers, stand mixers, Dutch ovens, cookware and more. [...]

iPhone 12 vs. Pixel 5: Apple and Google's 5G flagships compared - CNET

28 November 2020

For the operating system agnostic, the choice between Pixel 5 and iPhone 12 might come down to design, camera, battery, performance -- or price. [...]

5 Signs Someone Might be Taking Advantage of Your Security Goodness

27 November 2020

Not everyone in a security department is acting in good faith, and they'll do what they can to bypass those who do. Here's how to spot them. [...]

Failing Toward Zero: Why Your Security Needs to Fail to Get Better

27 November 2020

Each security incident should lead to a successive reduction in future incidences of the same type. Organizations that fail toward zero embrace failure and learn from their mistakes. [...]

Do You Know Who's Lurking in Your Cloud Environment?

25 November 2020

A security researcher explains the dangers of poor visibility in the cloud and a new strategy to evaluate IAM exposure in Google Cloud Platform. [...]

Look Beyond the 'Big 5' in Cyberattacks

25 November 2020

Don't ignore cyber operations outside US and European interests, researcher says. We can learn a lot from methods used by attackers that aren't among the usual suspects. [...]

Prevention Is Better Than the Cure When Securing Cloud-Native Deployments

25 November 2020

The "OODA loop" shows us how to secure cloud-native deployments and prevent breaches before they occur. [...]

Why Security Awareness Training Should Be Backed by Security by Design

25 November 2020

Cybersecurity training needs an overhaul, though the training itself is only one small part of how security teams can influence user behavior. [...]

Latest Version of TrickBot Employs Clever New Obfuscation Trick

24 November 2020

The malware takes advantage of how the Windows command line interpreter works to try and slip past anti-detection tools, Huntress Labs says. [...]

Baidu Apps Leaked Location Data, Machine Learning Reveals

24 November 2020

Several apps available on the Google Play Store, including two made by Chinese Internet giant Baidu, leaked information about the phone's hardware and location without the user's knowledge, research finds. [...]

How Ransomware Defense Is Evolving With Ransomware Attacks

24 November 2020

As data exfiltration threats and bigger ransom requests become the norm, security professionals are advancing from the basic "keep good backups" advice. [...]

CISA Warns of Holiday Online Shopping Scams

24 November 2020

The agency urges shoppers to be cautious of fraudulent websites, unsolicited emails, and unencrypted financial transactions. [...]

How Extreme Weather Will Create Chaos on Infrastructure

21 October 2020

Extreme weather events will soon become more frequent and widespread, devastating areas of the world that typically don’t experience them and amplifying the destruction in areas that do. [...]

BSIMM11 Observes the Cutting Edge of Software Security Initiatives

21 October 2020

In addition to helping an organization start an SSI, the BSIMM also gives them a way to evaluate the maturity of their SSI. [...]

Sustaining Video Collaboration Through End-to-End Encryption

21 October 2020

By infusing end-to-end encryption into any video strategy, it ensures not only the sustainability of the channel, but the businesses that rely on it. [...]

Will Robo-Helpers Help Themselves to Your Data?

8 September 2020

Are you sure that your robo-helpers are secure? [...]

Securing the Hybrid Workforce Begins with Three Crucial Steps

2 September 2020

The global shift to a remote workforce has redefined the way organizations structure their business models. [...]

A New Strategy for DDoS Protection: Log Analysis on Steroids

26 August 2020

Incorporating a data lake philosophy into your security strategy is like putting log analysis on steroids. [...]

COVID-19 Aside, Data Protection Regulations March Ahead: What To Consider

26 August 2020

Despite the COVID-19 pandemic, companies are obligated to comply with many laws governing data security and privacy [...]

SecurityWeek Extends ICS Cyber Security Conference Call for Presentations to August 31, 2020

12 August 2020

The official Call for Presentations (speakers) for SecurityWeek’s 2020 Industrial Control Systems (ICS) Cyber Security Conference, being held October 19 – 22, 2020 in SecurityWeek’s Virtual Conference Center, has been extended to August 31st. [...]

SecurityWeek to Host Cloud Security Summit Virtual Event on August 13, 2020

12 August 2020

SecurityWeek will host its 2020 Cloud Security Summit virtual eventon Thursday, August 13, 2020. [...]

Avoiding Fuelling the Cyber-Crime Economy

11 August 2020

What drives the cyber-crime economy, and how can organizations prevent their data being used as a criminal commodity? [...]

Buy two: Tech gifts and gadgets so cool you'll want one for yourself too

28 November 2020

In the upcoming gift-giving season, these gadgets will tempt you to pick up the same present for yourself, too. [...]

Best gadgets to help you get fit in the new year

28 November 2020

Need to get fit in the new year? Here are the gadgets that can help! [...]

Best gifts: Weird but useful gadgets and gear

28 November 2020

This is 2020. Predictable is out, and it's the perfect time for weird, yet surprisingly useful, gifts. [...]

Best gadgets to help you stay healthy in the new year

28 November 2020

It's more important than ever to stay healthy and these gadgets will help you on your journey. [...]

The best gifts for hackers

28 November 2020

No matter their age, interests, or ability, these gifts will put a smile on any hacker's face this holiday season. [...]

The best tech gifts for non-techies in 2020

28 November 2020

Perfect gifts for the non-techie friends and family in your life. [...]

The best Alexa devices for your home office

28 November 2020

Do you seriously need more automation in the office? Isn't it enough that Alexa turns on your lights for you? No. No it isn't. If there's something we can automate, if there's some form of laziness we can encourage, we're here for you. And by "we're here" we really mean "Alexa is there." Read on. [...]

Best gifts for cooks: Tech gadgets for kitchen nerds

28 November 2020

With these tools in your home kitchen, you can cook just like a pro. [...]

Best gifts for DIYers: IT pro tools

28 November 2020

Gifts for the DIYer and fixer in your life. (Or gifts for your wishlist, if that's you!) [...]

Best gifts: Tech gear to help you stay connected

28 November 2020

This holiday season is going to look very different, but you can stay connected with these cool gadgets. [...]

How a Cybersecurity Training Program Can Recruit From Inside Your Business

24 November 2020

The cybersecurity industry is facing a shortage of trained and experienced professionals. Schools, universities and organizations are doing amazing things to encourage the next generation to pursue a cybersecurity career. However, there is still a huge cybersecurity talent shortage. With the right training, this can change. It is clear that organizations require cybersecurity training for […] The post How a Cybersecurity Training Program Can Recruit From Inside Your Business appeared first on Security Intelligence. [...]

Shadow IT: Addressing the Risks in Remote Work Environments

23 November 2020

Shadow IT can cause big problems for cybersecurity. The trouble is in the name: these connections exist in the shadows outside of IT (information technology) and security personnel’s knowledge. So, what can IT leaders do to address it in a time of growing remote workforces? What is Shadow IT? Shadow IT consists of information technology […] The post Shadow IT: Addressing the Risks in Remote Work Environments appeared first on Security Intelligence. [...]

Be Prepared for Increased DDoS Attacks Ahead of Black Friday

23 November 2020

Black Friday is prime time for distributed denial-of-service (DDoS) attacks, especially as retail goes online even more than usual in 2020. Forecasters predict e-commerce sales will soar to new heights this holiday season, increasing by as much as 35% year-over-year. This explosion in online shopping brings new challenges to retailers, including managing logistics and supply chains. […] The post Be Prepared for Increased DDoS Attacks Ahead of Black Friday appeared first on Security Intelligence. [...]

Security Culture: Putting Digital Literacy First in Your Company

20 November 2020

Building a security-first culture is as important for cybersecurity as investing in the right tech or creating and enforcing the right policies. Defense systems cannot provide 100% of the security organizations need as long as individual employees are making decisions about what to click on, who to trust and, at the leadership levels, where and how much […] The post Security Culture: Putting Digital Literacy First in Your Company appeared first on Security Intelligence. [...]

IBM CISO Perspective: Zero Trust Changes Security From Something You Do to Something You Have

19 November 2020

As the chief information security officer (CISO) for IBM, I’m often asked by peers and colleagues, “What do you think of Zero Trust?” Or, perhaps more often, “What strategies are you using to keep IBM protected?” First, many vendors in the security industry are looking at zero trust security from the wrong perspective. Security isn’t […] The post IBM CISO Perspective: Zero Trust Changes Security From Something You Do to Something You Have appeared first on Security Intelligence. [...]

Stay Calm: Your Supply Chain Cybersecurity Is Solid

19 November 2020

A little over 50 years ago, on July 20, 1969, humans first landed on the moon. Among the many amazing feats involved, it took just over eight years from the time President John F. Kennedy issued his famous challenge for the American space program to Neil Armstrong coming down the ladder with a small step […] The post Stay Calm: Your Supply Chain Cybersecurity Is Solid appeared first on Security Intelligence. [...]

Data Destruction: Importance and Best Practices

19 November 2020

As discussed in an earlier piece, data should be treated as a valuable currency. But there is another aspect to data handling that needs to be considered: data as a liability. Having your data fall into the wrong hands can be incredibly damaging to you and your team, which is all the more reason to […] The post Data Destruction: Importance and Best Practices appeared first on Security Intelligence. [...]

Cybersecurity Framework: How To Create A Resilience Strategy

19 November 2020

A cyber resilience framework, or cybersecurity framework, is a crucial component of modern-day business. In the face of rising threats from malware, phishing and high-tech threat actors, a cyber resilient company can position itself as a secure model for data protection customers can trust. Despite the growing security risks in a remote working world, many […] The post Cybersecurity Framework: How To Create A Resilience Strategy appeared first on Security Intelligence. [...]

Ransomware Response: Time is More Than Just Money

18 November 2020

The initial actions an organization takes in the moments after discovering a ransomware attack can have profound implications on how the attack ends. Virtually every security professional will tell you ransomware-based attacks are rapidly becoming the bane of the digital age, but that may not translate into chief information security officers (CISOs) being certain employees […] The post Ransomware Response: Time is More Than Just Money appeared first on Security Intelligence. [...]

IBM Works With Cisco to Exorcise Ghosts From Webex Meetings

18 November 2020

COVID-19 has changed the way many people work, as organizations have shifted to remote work to slow the spread. In early May, more than 100 million Americans were working from home, creating an increased need for remote collaboration tools like video conferencing. The use of Webex grew 451% between Feb. 17 and June 14 2020. […] The post IBM Works With Cisco to Exorcise Ghosts From Webex Meetings appeared first on Security Intelligence. [...]

Financial Impact of Ransomware Attack on Sopra Steria Could Reach €50 Million

27 November 2020

European IT services provider Sopra Steria estimates that a recent ransomware attack will have a financial impact ranging between €40 million ($48 million) and €50 million ($60 million). read more [...]

U of Vermont Medical Center Continuing Cyber-Attack Recovery

27 November 2020

The University of Vermont Medical Center is continuing to recover from the cyber attack late last month that crippled access to electronic records at the Burlington hospital. read more [...]

Three Nigerians Arrested for Cybercrime Operation Targeting 150 Countries

27 November 2020

Three Nigerian nationals have been arrested in Lagos for their suspected involvement in Business Email Compromise (BEC) scams. The three — identified only as OC, 32, IO, 34, and OI, 35 — are believed to be part of a larger organized crime group called TMT, which has been involved in malware distribution, phishing, and extensive BEC fraud. read more [...]

Canon Says Data Stolen in August 2020 Ransomware Attack

27 November 2020

Canon, ransomware, Maze, data stolenImaging and optical giant Canon this week revealed that data was stolen in a ransomware attack it fell victim to in early August 2020. The incident, discovered on August 4, resulted in threat actors having access to Canon’s network between July 20 and August 6. read more [...]

US Extends TikTok Sale Deadline to December 4

27 November 2020

The US Treasury on Wednesday said it had extended by seven days the November 27 deadline given to the Chinese owner of TikTok to sell the popular social media platform's American business. read more [...]

Drupal Releases Out-of-Band Security Updates Due to Availability of Exploits

27 November 2020

The developers of the Drupal content management system (CMS) released out-of-band security updates right before Thanksgiving due to the availability of exploits. read more [...]

Unofficial Patch Released for Windows 7 Zero-Day Vulnerability

27 November 2020

An unofficial patch is now available through ACROS Security’s 0patch service for a zero-day vulnerability identified earlier this month in Windows 7 and Windows Server 2008 R2. read more [...]

Man United Unable to Fully Restore Systems After Cyberattack

27 November 2020

Manchester United has been unable to fully restore its computer systems a week after being targeted in a cyberattack. The Premier League club’s staff still did not have access to email on Thursday night, and some other functions were also unavailable. read more [...]

EU Plans New Rules Giving Europeans More Control of Data

26 November 2020

The European Union is laying out new standards for data giving Europeans more control over their personal information as it seeks to counter the power of U.S. and Chinese tech companies. read more [...]

Danish News Agency Rejects Ransom Demand After Hacker Attack

25 November 2020

Denmark’s biggest news agency will stay offline for at least another day following a hacking attack this week and has rejected a ransom demand by hackers to release locked data, the wire service said Wednesday. read more [...]

How Ryan Reynolds and Mint Mobile worked without becoming the joke

28 November 2020

In the past decade, celebrity interest and investment in tech companies has significantly increased. But not all celebrity investments are created equally. Some investors, like Ashton Kutcher, have prioritized the VC pursuits. Some have invested casually without getting overly involved. Others have used their considerable platforms to market their portfolio to varying degrees of success. […] [...]

Original Content podcast: Just don’t watch Netflix’s ‘Holidate’ with your parents

28 November 2020

You might think that a new Netflix film called “Holidate” offers holiday-themed romance that’s perfect for a family watch party. You’d be wrong. The film stars Emma Roberts and Luke Bracey as a pair of strangers who agree (in classic romantic comedy style) to keep each other company on holidays. And while the movie can’t […] [...]

Black Friday on track for $8.9B+ in online sales as shoppers stay away from brick-and-mortar stores

28 November 2020

Black Friday — the day that launched 1,000 other shopping holidays — may have lost its place as the “start” of the Christmas shopping season by now (it gets bigger and earlier with each passing year). But the day after Thanksgiving still pulls in a crowd of buyers looking for a bargain and remains a major […] [...]

Tony Hsieh, iconic Las Vegas tech entrepreneur, dies aged 46

28 November 2020

Tony Hsieh, the former head of Zappos who catapulted the shoe company into the big leagues with a sale to Amazon and then used the proceeds of his success in a huge project kickstarting regeneration of a run-down part of Las Vegas, Nevada, with tech and wider business investments, has died at the age of […] [...]

Facebook’s Libra could launch in January

27 November 2020

According to a report from the Financial Times, Facebook-backed cryptocurrency Libra could launch in January. More interestingly, the Libra Association, the consortium created by Facebook, could scale back its ambitions once again. When it was first unveiled, the Libra cryptocurrency was supposed to be a brand new currency tied to a basket of fiat currencies […] [...]

India sets rules for commissions, surge pricing for Uber and Ola

27 November 2020

Ride-hailing firms such as Ola and Uber can only draw a fee of up to 20% on ride fares in India, New Delhi said in guidelines on Friday, a new setback for the SoftBank-backed firms already struggling to improve their finances in the key overseas market. The guidelines, which for the first time bring modern-age […] [...]

There’s no ‘hacker house’ geared toward undergraduate women, so they created one of their own

27 November 2020

Hacker houses are making a comeback for entrepreneurs as remote work drags on. While founders are adapting to quarantine in style, a group of college women in their 20s aren’t waiting until they are done with undergraduate work to plunge into the lifestyle themselves. Started by college juniors Coco Sack and Kendall Titus, Womxn Ignite […] [...]

No Google-Fitbit merger without human rights remedies, says Amnesty to EU

27 November 2020

Human rights NGO, Amnesty International, has written to the EU’s competition regulator calling for Google’s acquisition of wearable maker Fitbit to be blocked — unless meaningful safeguards can be baked in. The tech giant announced its intent to splash $2.1 billion to acquire Fitbit a year ago but has yet to gain regulatory approval for […] [...]

Is Slack overpriced now that the market knows Salesforce might buy it?

27 November 2020

The Exchange is technically off today, but we’re here anyway because there’s neat stuff in the world of startups and money to talk about. So, let’s yammer this morning about Slack’s new valuation and what the market is telling us about what the venerable SaaS company is really worth. The Exchange explores startups, markets and […] [...]

Wall Street needs to relax, as startups show remote work is here to stay

27 November 2020

We are hearing that a COVID-19 vaccine could be on the way sooner than later, and that means we could be returning to normal life some time in 2021. That’s the good news. The perplexing news, however, is that each time some positive news emerges about a vaccine — and believe me I’m not complaining […] [...]

Digitally Signed Bandook Malware Once Again Targets Multiple Sectors

27 November 2020

A cyberespionage group with suspected ties to the Kazakh and Lebanese governments has unleashed a new wave of attacks against a multitude of industries with a retooled version of a 13-year-old backdoor Trojan. Check Point Research called out hackers affiliated with a group named Dark Caracal in a new report published yesterday for their efforts to deploy "dozens of digitally signed variants" of [...]

Become a White Hat Hacker — Get 10 Top-Rated Courses at 97% OFF

26 November 2020

Many of us here would love to turn hacking into a full-time career. To make that dream come true, you need to master your subject and earn some key certifications. To speed up this process, you might want to take a little guidance from the experts. Featuring 98 hours of content from top instructors, The Ultimate 2020 White Hat Hacker Certification Bundle is the ultimate launchpad for your career [...]

Interpol Arrests 3 Nigerian BEC Scammers For Targeting Over 500,000 Entities

26 November 2020

Three Nigerian citizens suspected of being members of an organized cybercrime group behind distributing malware, carrying out phishing campaigns, and extensive Business Email Compromise (BEC) scams have been arrested in the city of Lagos, Interpol reported yesterday. The investigation, dubbed "Operation Falcon," was jointly undertaken by the international police organization along with [...]

2-Factor Authentication Bypass Flaw Reported in cPanel and WHM Software

25 November 2020

cPanel, a provider of popular administrative tools to manage web hosting, has patched a security vulnerability that could have allowed remote attackers with access to valid credentials to bypass two-factor authentication (2FA) protection on an account. The issue, tracked as "SEC-575" and discovered by researchers from Digital Defense, has been remedied by the company in versions 11.92.0.2, [...]

China's Baidu Android Apps Caught Collecting Sensitive User Data

26 November 2020

Two popular Android apps from Chinese tech giant Baidu were temporarily unavailable on the Google Play Store in October after they were caught collecting sensitive user details. The two apps in question—Baidu Maps and Baidu Search Box—were found to collect device identifiers, such as the International Mobile Subscriber Identity (IMSI) number or MAC address, without users' knowledge, thus making [...]

Stantinko Botnet Now Targeting Linux Servers to Hide Behind Proxies

24 November 2020

An adware and coin-miner botnet targeting Russia, Ukraine, Belarus, and Kazakhstan at least since 2012 has now set its sights on Linux servers to fly under the radar. According to a new analysis published by Intezer today and shared with The Hacker News, the trojan masquerades as HTTPd, a commonly used program on Linux servers, and is a new version of the malware belonging to a threat actor [...]

Critical Unpatched VMware Flaw Affects Multiple Corporates Products

24 November 2020

VMware has released temporary workarounds to address a critical vulnerability in its products that could be exploited by an attacker to take control of an affected system. "A malicious actor with network access to the administrative configurator on port 8443 and a valid password for the configurator admin account can execute commands with unrestricted privileges on the underlying operating [...]

Why Replace Traditional Web Application Firewall (WAF) With New Age WAF?

23 November 2020

At present, web applications have become the top targets for attackers because of potential monetization opportunities. Security breaches on the web application can cost millions. Strikingly, DNS (Domain Name System) related outage and Distributed denial of service (DDoS) lead a negative impact on businesses. Among the wide range of countermeasures, a web application firewall is the first line [...]

Facebook Messenger Bug Lets Hackers Listen to You Before You Pick Up the Call

24 November 2020

Facebook has patched a bug in its widely installed Messenger app for Android that could have allowed a remote attacker to call unsuspecting targets and listen to them before even they picked up the audio call. The flaw was discovered and reported to Facebook by Natalie Silvanovich of Google's Project Zero bug-hunting team last month on October 6 with a 90-day deadline, and impacts version [...]

WARNING: Unpatched Bug in GO SMS Pro App Exposes Millions of Media Messages

20 November 2020

GO SMS Pro, a popular messaging app for Android with over 100 million installs, has been found to have an unpatched security flaw that publicly exposes media transferred between users, including private voice messages, photos, and videos. "This means any sensitive media shared between users of this messenger app is at risk of being compromised by an unauthenticated attacker or curious user," [...]

Exploitable Flaw in NPM Private IP App Lurks Everywhere, Anywhere

25 November 2020

A serious security flaw in a commonly used npm security module, private-ip, may affect hundreds of thousands of private and public applications. The post Exploitable Flaw in NPM Private IP App Lurks Everywhere, Anywhere appeared first on The Security Ledger. Related StoriesTV Maker TCL Denies Back Door, Promises Better ProcessSecurity Holes Opened Back Door To TCL Android Smart TVsPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan Hunt [...]

TV Maker TCL Denies Back Door, Promises Better Process

20 November 2020

Chinese electronics giant TCL has acknowledged security holes in some models of its smart television sets, but denies that it maintains a secret "back door" that gives it control over deployed TVs. The post TV Maker TCL Denies Back Door, Promises Better Process appeared first on The Security Ledger. Related StoriesSecurity Holes Opened Back Door To TCL Android Smart TVsPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntEpisode 190: 20 Years, 300 CVEs. Also: COVID’s Lasting Security Lessons [...]

Episode 194: What Happened To All The Election Hacks?

17 November 2020

Cyber attacks meant to disrupt the 2020 presidential election in the US were a foregone conclusion. But two weeks and more than 140 million votes later, predictions of cyber attacks on the U.S. presidential election have fallen flat. What happened? The post Episode 194: What Happened To All The Election Hacks? appeared first on The Security Ledger....Read the whole entry... » Related StoriesSpotlight Podcast: Taking a Risk-Based Approach to Election SecurityEpisode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks?Public Sector Mega-Vendor Tyler Technologies Says It Was Hacked [...]

Security Holes Opened Back Door To TCL Android Smart TVs

12 November 2020

A report by independent researchers warns that TCL brand Android smart TVs contained serious and exploitable security holes. It also raises questions about the China-based electronics firm's ability to remotely access and control deployed devices. The post Security Holes Opened Back Door To TCL Android Smart TVs appeared first on The Security...Read the whole entry... »Related StoriesPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntPublic Sector Mega-Vendor Tyler Technologies Says It Was Hacked“Boothole” Bootloader Flaw Breaks Security on Most Linux, Windows Devices [...]

Episode 193: Repair, Cyber and Your Car with Assaf Harel of Karamba Security

5 November 2020

Assaf Harel of the firm Karamba Security joins us in the Security Ledger studio to discuss connected car security and the right to repair. The post Episode 193: Repair, Cyber and Your Car with Assaf Harel of Karamba Security appeared first on The Security Ledger. Related StoriesEpisode 194: What Happened To All The Election Hacks?Episode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks?Episode 191: Shifting Compliance Left with Galen Emery of Chef [...]

Episode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks?

28 October 2020

Election day is almost here. After years of warnings, are state and local governments ready for what Russia, Iran or any number of ransomware gangs have in store for them? The post Episode 192: It’s Showtime! Are Local Governments Ready To Turn Back Election Hacks? appeared first on The Security Ledger. Related StoriesEpisode 194: What Happened To All The Election Hacks?Spotlight Podcast: Taking a Risk-Based Approach to Election SecurityPublic Sector Mega-Vendor Tyler Technologies Says It Was Hacked [...]

Episode 191: Shifting Compliance Left with Galen Emery of Chef

22 October 2020

Galen Emery of Chef comes into the Security Ledger studios to talk about how security and compliance are "shifting left" with DEVSECOPS. The post Episode 191: Shifting Compliance Left with Galen Emery of Chef appeared first on The Security Ledger. Related StoriesPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntSpotlight Podcast: CTO Zulfikar Ramzan on RSA’s Next Act: Security Start-UpSpotlight Podcast: Taking a Risk-Based Approach to Election Security [...]

Episode 190: 20 Years, 300 CVEs. Also: COVID’s Lasting Security Lessons

11 October 2020

In this episode of the podcast (#190), sponsored by LastPass, Larry Cashdollar of Akamai joins us to talk about how finding his first CVE vulnerability, more than 20 years ago, nearly got him fired. Also: Katie Petrillo of LastPass joins us to talk about how some of the security adjustments we've made for COVID might not go away any time soon. ...Read the whole entry... » Related StoriesPodcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan HuntEpisode 194: What Happened To All The Election Hacks?Spotlight Podcast: Taking a Risk-Based Approach to Election Security [...]

Opinion: Staying Secure Through 5G Migration

8 October 2020

To achieve their 5G transformation, telecommunications providers require security solutions and platforms built from the ground up for modern, dynamic business models. The post Opinion: Staying Secure Through 5G Migration appeared first on The Security Ledger. Related StoriesPKI Points the Way for Identity and Authentication in IoTReport: China Rides Cyber Attacks to Superpower StatusEpisode 185: Attacking COVID, Protecting Privacy [...]

Report: Critical Infrastructure Cyber Attacks A Global Crisis

7 October 2020

The systems we rely on to keep the lights on, heat our homes, make our medicines and move our goods are increasingly connecting to the Internet, and increasingly vulnerable to devastating cyber attacks in what a new report calls a looming "global crisis." The post Report: Critical Infrastructure Cyber Attacks A Global Crisis appeared first on The...Read the whole entry... »Related StoriesPKI Points the Way for Identity and Authentication in IoTChina Attacks Surge as Cyber Criminals Capitalize on COVID-19Episode 190: 20 Years, 300 CVEs. Also: COVID’s Lasting Security Lessons [...]

Here are the best Black Friday and Cyber Monday deals happening at Best Buy

28 November 2020

The 55-inch Vizio OLED TV is $900 at Best Buy. | Image: Vizio Best Buy was one of the first retailers to launch Black Friday deals — all the way back in mid-October to go up against Amazon Prime Day. Now that Black Friday is actually here, with Cyber Monday quickly approaching, Best Buy is back with a bunch of great sales that you can take advantage of. And, you can do all of your shopping online. Below, you’ll find the best deals currently happening at Best Buy. If you want to find out what’s happening at other retailers, check… [...]

The best Black Friday deals that are still happening

28 November 2020

Black Friday is here. You know the deal: it’s the biggest shopping day of the year, followed closely by Cyber Monday, which is happening first thing next week. As you’re expecting, there are some great deals on tech, including TVs, laptops, gadgets, video games, and much more — we have it all below. Unlike most years, the ongoing pandemic saw retailers releasing some of their best Black Friday deals earlier than ever, giving shoppers more opportunities to snag gifts. With that, a few deals might look a little familiar, but we’ve aimed to put in just as many brand-new deals… [...]

These are the best Black Friday and Cyber Monday TV deals

28 November 2020

With a pair of next-gen video game consoles now on the market, it’s a very good time to be shopping for a new 4K TV that can best showcase their capabilities. Even if gaming isn’t your thing, Black Friday and Cyber Monday always bring about excellent discounts on sets from many of the top brands like Samsung, LG, Vizio, Sony, TCL, and others. Whether you’re ready to spend over $1,000 or are looking for something more on the budget side, odds are you can find something to your liking. Looking for more than just a TV? Check out our updating… [...]

The best Black Friday and Cyber Monday deals on Apple devices

28 November 2020

iPhone 12. | Photo by Vjeran Pavic / The Verge It’s rare that Apple slashes the prices on its own products. Fortunately, other retailers are putting a lot of Apple products on sale for Black Friday and Cyber Monday. A bunch of retailers like Amazon, Best Buy, B&H Photo, Walmart, and Woot are slashing the prices on everything from wearables to its wireless earbuds. Additionally, the online Apple store will have a special promotion on Friday, November 27th, and running until Monday, November 30th. The promotion will allow you to get up to $150 in an Apple gift card if… [...]

Apple’s new MacBook Pro with M1 is at its lowest prices yet for Black Friday

28 November 2020

Photo by Alexander Kramer for The Verge Apple’s brand-new computers based on its own custom M1 chip have both been getting sterling reviews due to their great performance and better life. (Well, almost sterling reviews; The Verge’s Nilay Patel is not a fan of the Touch Bar that still adorns the MacBook Pro, and according to reviewer Chris Welch, the Mac mini has a truly awful speaker. But aside from that...) Normally, brand-new Apple computers would not be on sale, even during Black Friday. But the M1-powered MacBook Pro 13 has already had a $50-off sale at Amazon, and now… [...]

Samsung may have just spilled the beans on how its next earbuds won’t be beans

27 November 2020

Photo by Chris Welch / The Verge We kind of loved the beans. The Galaxy Buds Live’s bean-like shape made sense! But though it originally seemed like Samsung was in on the joke — the company called them beans internally, and even printed the word on the circuitry — Samsung’s next earbuds may take a take a different tack. Today, Indonesia’s telecommunications certification authority has revealed the company has a new “Galaxy Buds Pro” set of earbuds waiting in the wings (via MySmartPrice), and SamMobile may have already revealed what to expect: a source says they’ll be a set of… [...]

Alto’s Adventure and Odyssey quietly arrive on Nintendo Switch, on sale for $7.49

27 November 2020

In early August, we learned the lovely Alto’s Adventure and Alto’s Odyssey would come to Nintendo Switch, but we didn’t know exactly when. It turns out yesterday (Thanksgiving) was the day! You can now pick up The Alto Collection from the Nintendo eShop for $7.49, a temporary 25 percent launch discount over what will become its standard $9.99 price. (Check out the video above to get a pretty good sense of what the games are like; we called Alto’s Adventure “the next great iPad game” in our review way back in 2015.) Originally, you’d control Alto and his snowboarding /… [...]

The best Black Friday tech deals happening at Walmart

27 November 2020

Like some of its competitors, Walmart has started offering a ton of discounts on tech products in the weeks leading up to Black Friday. Fortunately, Walmart has some interesting Black Friday deals going on right now, including the lowest price we have seen yet on Apple’s AirPods Pros. Below, we have highlighted the best Black Friday tech deals across different subcategories that Walmart is currently offering. For more Black Friday deals, check out our roundup of the best deals across all the major retailers. Or if you want to compare pricing, we rounded up the best deals available at Amazon,… [...]

The best Black Friday deals on games

27 November 2020

The Last of Us Part II Let’s be honest: gaming is expensive, but the holiday season is a good time to take advantage of deals and sales and buy more than one game. Whether you are adding games to your personal library for your backlog, or you are planning to buy some games for a friend or family member, retailers like Amazon, GameStop, and Target have various discounts on titles. If you are planning to buy a PS5 or an Xbox Series X / S on Black Friday, please keep in mind that both are in high demand, limited supply,… [...]

The best Black Friday laptop deals

27 November 2020

Photo by Vjeran Pavic / The Verge Whether you’re shopping for a student, an older relative, or anyone in between, a laptop can make a great gift. And the internet’s largest retailers are offering all kinds of laptops at discounted prices this Black Friday, whether you’re looking for a convertible, a Chromebook, a gaming rig, or anything else. Note that for some models, only certain configurations may be on sale. Make sure to double-check the specs of the item you’re buying to make sure they’ll suit your workload (and that you’re actually getting the discount) before you check out. To… [...]

The Absolute Best Black Friday Deals Online This Weekend

28 November 2020

Stay at home! Here are the very best discounts we’ve found in every category and at all the major retailers. [...]

11 Early Cyber Monday Weekend Deals on Earth-Friendly Gear

28 November 2020

Conserve water, save our national parks, and offset carbon emissions a bit with these sustainable picks. [...]

Endangered Vancouver Island Marmots Are Making a Comeback

28 November 2020

Canada’s most endangered mammal is back from the brink of extinction—and offers hope as an “ambassador” for the conservation of less adorable species. [...]

These Are Our Favorite Small Businesses and Shops

28 November 2020

For Small Business Saturday—or any day—remember to shop local! Here are some stores we think you'll like too. [...]

The Best Black Friday Deals on Kindle, Fire, and Echo Devices

28 November 2020

Get your Prime on with our favorite deals on Amazon’s ebook readers, tablets, speakers, and more. [...]

These Are the Very Best Laptop Deals for Black Friday

28 November 2020

We scoured the web to find the best deals on notebooks, Chromebooks, external monitors, and more. [...]

Our Fave Headphone and Speaker Deals for Black Friday

28 November 2020

These are our favorite audio deals this holiday weekend, from a pair of Beats to a smart speaker for your kitchen. [...]