At the Intersection of Technology and Real Life

New Zealand’s gun buyback scheme impacted by data breach, SAP to blame

Michael York Reading, PA Syndicated Stories, ZDNet

SAP has been left red-faced for allowing the security lapse to occur.
Read the full article here

Latest Headlines

A People’s History of Black Twitter, Part III

29 July 2021

Joy and pain, harmony and discord, organization and chaos—there’s no single way to define Black Twitter’s complex, ongoing legacy. [...]

Hundreds of Ways to Get S#!+ Done—and We Still Don’t

27 July 2021

You want to be productive. Software wants to help. But even with a glut of tools claiming to make us all into taskmasters, we almost never master our tasks. [...]

A People’s History of Black Twitter, Part II

22 July 2021

No longer just an online movement, Black Twitter takes to the streets—and finds its voice. [...]

A People’s History of Black Twitter, Part I

15 July 2021

From #UKnowUrBlackWhen to #BlackLivesMatter, how a loose online network became a pop culture juggernaut, an engine of social justice, and a lens into the future. [...]

A Son Is Rescued at Sea. But What Happened to His Mother?

13 July 2021

Nathan Carman went fishing with his mom. A week later, he was found on a life raft—alone. Tragic accident or murder? Ocean sensors may point to the truth. [...]

Prisoners, Doctors, and the Battle Over Trans Medical Care

8 July 2021

Those who are incarcerated are suing for their right to gender confirmation surgery—if deemed necessary. Meet the psychiatrist who almost always says it's not. [...]

When the Next Animal Plague Hits, Can This Lab Stop It?

6 July 2021

A new federal facility in Kansas will house the deadliest agricultural pathogens in the world—and researchers working tirelessly to contain them. [...]

How Fringe Stem Cell Treatments Won Allies on the Far Right

1 July 2021

Advocates for dubious therapies (fight Covid with your own fat!) have latched on to conservative grievances—and formed an unholy alliance. [...]

How to Survive the Worst Tornado in US History

24 June 2021

It blew an entire town to pieces, flipping trains and flattening banks. But there’s one place you might try to hide. [...]

He Thought He Could Outfox the Gig Economy. He Was Wrong

22 June 2021

Jeffrey Fang was a ride-hailing legend, a top earner with relentless hustle. Then his minivan was carjacked—with his kids in the back seat. [...]

Chipotle’s marketing account hacked to send phishing emails

29 July 2021

Hackers have compromised an email marketing account belonging to the Chipotle food chain and used it to send out phishing emails luring recipients to malicious links. [...]

DoppelPaymer ransomware gang rebrands as the Grief group

29 July 2021

After a period of little to no activity, the DoppelPaymer ransomware operation has made a rebranding move, now going by the name Grief (a.k.a. Pay or Grief). [...]

New US security memorandum bolsters critical infrastructure cybersecurity

28 July 2021

US President Joe Biden today issued a national security memorandum designed to help strengthen the security of critical infrastructure by setting baseline performance goals for critical infrastructure owners and operators. [...]

Biden: Severe cyberattacks could escalate to 'real shooting war'

28 July 2021

President Joe Biden warned that cyberattacks leading to severe security breaches could lead to a "real shooting war" with another major world power. [...]

Google Play Protect fails Android security tests once more

28 July 2021

Google Play Protect, the Android built-in malware defense system, has failed the real-world tests of antivirus testing lab AV-TEST after detecting just over two thirds out of more than 20,000 malicious apps it was pitted against. [...]

Google: Android apps must provide privacy information by April 2022

28 July 2021

Google has announced today more details regarding their upcoming Google Play 'Safety section' feature that provides users information about the data collected and used by an Android app. [...]

Critical Microsoft Hyper-V bug could haunt orgs for a long time

28 July 2021

Technical details are now available for a vulnerability that affects Hyper-V, Microsoft's native hypervisor for creating virtual machines on Windows systems and in Azure cloud computing environment. [...]

FBI reveals top targeted vulnerabilities of the last two years

28 July 2021

A joint security advisory issued today by several cybersecurity agencies from the US, the UK, and Australia reveals the top 30 most targeted security vulnerabilities of the last two years. [...]

Northern Ireland suspends vaccine passport system after data leak

28 July 2021

Northern Ireland's Department of Health (DoH) has temporarily halted its COVID-19 vaccine certification web service and mobile apps following a data exposure incident. [...]

LockBit ransomware now encrypts Windows domains using group policies

27 July 2021

An new version of the LockBit 2.0 ransomware has been found that automates the encryption of a Windows domain using Active Directory group policies. [...]

BMW expands its R18 line with the Transcontinental and bagger models - Roadshow

29 July 2021

Germany's assault on the American touring motorcycle market just got a lot more serious. [...]

The gut-brain axis: How your gut affects your mental health - CNET

29 July 2021

It's not all in your head. The bacteria in your gut have a distinct effect on your brain and mental health, researchers say. [...]

2022 BMW R18 B and Transcontinental have big bagger style with German tech - Roadshow

29 July 2021

The folks in Munich are clearly looking to take a bite out of Harley-Davidson and Indian's big-displacement touring bike sales. [...]

Best Apple MacBook deals: M1 MacBook Air and MacBook Pro at lowest prices yet - CNET

29 July 2021

You'll find the big discounts on Apple's latest MacBooks right now on Amazon -- and even bigger savings on the 16-inch MacBook Pro. [...]

Twitter reportedly closing San Francisco and New York offices climbing COVID-19 cases - CNET

29 July 2021

The social network is reportedly pausing its plans to reopen. [...]

Save $40 on the AeroGarden Sprout and grow fresh herbs in the kitchen - CNET

29 July 2021

The slim indoor pod garden is down to $60 right now. [...]

Grab a Ring Doorbell and an Echo Show 5 bundle for $65 today - CNET

29 July 2021

This is an incredibly good deal for anyone looking to add security to their home. [...]

Sony's new PS5 software beta allows SSD installation, 3D audio on TVs - CNET

29 July 2021

The console maker also specifies which M.2 SSDs can be used and how to install them. [...]

Star Wars game sale: The Force Unleashed, other classics for $5 each - CNET

29 July 2021

Knights of the Old Republic, Lego Star Wars and Republic Commando are among the excellent games discounted on Xbox. [...]

Intel NUC 11 Extreme Kit powers a wee beastie of a gaming PC - CNET

29 July 2021

Hands-on with Intel's 11th-gen Next Unit of Computing, which lets you pack a lot of power into a very compact PC. [...]

8 Security Tools to be Unveiled at Black Hat USA

28 July 2021

Security researchers and practitioners share a host of new cyber tools for penetration testing, reverse engineering, malware defense, and more. [...]

Biden Administration Responds to Geopolitical Cyber Threats

23 July 2021

In response to growing concerns regarding the recent uptick in large-scale, nation-state-backed ransomware attacks on critical infrastructure, the Biden administration is taking new action to tackle the evolving challenges posed by ransomware attacks. [...]

7 Hot Cyber Threat Trends to Expect at Black Hat

22 July 2021

A sneak peek of some of the main themes at Black Hat USA next month. [...]

Law Firm for Ford, Pfizer, Exxon Discloses Ransomware Attack

19 July 2021

Campbell Conroy & O'Neil reports the attack affected personal data including Social Security numbers, passport numbers, and payment card data for some individuals. [...]

US Accuses China of Using Criminal Hackers in Cyber Espionage Operations

19 July 2021

DOJ indicts four Chinese individuals for alleged role in attacks targeting intellectual property, trade secrets belonging to defense contractors, maritime companies, aircraft service firms, and others. [...]

How Gaming Attack Data Aids Defenders Across Industries

19 July 2021

Web application attacks against the video game industry quadrupled in 2020 compared to the previous year, but companies outside entertainment can learn from the data. [...]

NSO Group Spyware Used On Journalists & Activists Worldwide

19 July 2021

An investigation finds Pegasus spyware, intended for use on criminals and terrorists, has been used in targeted campaigns against others around the world. [...]

When Ransomware Comes to (Your) Town

19 July 2021

While steps for defending against a ransomware attack vary based on the size of the government entity and the resources available to each one, rooting out ransomware ultimately will come down to two things: system architecture and partnerships. [...]

Breaking Down the Threat of Going All-In With Microsoft Security

19 July 2021

Limit risk by dividing responsibility for infrastructure, tools, and security. [...]

7 Ways AI and ML Are Helping and Hurting Cybersecurity

19 July 2021

In the right hands, artificial intelligence and machine learning can enrich our cyber defenses. In the wrong hands, they can create significant harm. [...]

Five Practical Steps to Implementing a Zero-Trust Network

26 May 2021

How should organizations go about applying a Zero Trust blueprint across their complex hybrid networks? Here are five key steps. [...]

Facebook Shuts Down Two Hacking Groups in Palestine

21 April 2021

Facebook says it has taken action against two groups of hackers originating from Palestine that abused its infrastructure for malware distribution and account compromise across the Internet. [...]

Cloud Security Alliance Shares Security Guidance for Crypto-Assets Exchange

13 April 2021

The Cloud Security Alliance (CSA) has released new Crypto-Asset Exchange Security Guidelines, a set of guidelines and best practices for crypto-asset exchange (CaE) security. [...]

Intel Corp. to Speak at SecurityWeek Supply Chain Security Summit

9 March 2021

Join Intel on Wednesday, March 10, at SecurityWeek’s Supply Chain Security Summit, where industry leaders will examine the current state of supply chain attacks. Hear Intel’s experts discuss the need for transparency and integrity across the complete product lifecycle, from build to retire. [...]

GitHub Hires Former Cisco Executive Mike Hanley as Chief Security Officer

24 February 2021

Software development platform GitHub announced on Wednesday that it has hired Mike Hanley as its new Chief Security Officer (CSO). [...]

Reddit Names Allison Miller as Chief Information Security Officer (CISO)

23 February 2021

Social news community site Reddit announced has hired Allison Miller as Chief Information Security Officer (CISO) and VP of Trust. [...]

SecurityWeek Names Ryan Naraine as Editor-at-Large

19 January 2021

SecurityWeek has named Ryan Naraine as Editor-at-Large, adding a veteran cybersecurity journalist and podcaster to its editorial team. [...]

Why Cyber Security Should Be at the Top of Your Christmas List

17 December 2020

To take advantage of emerging trends in both technology and cyberspace, businesses need to manage risks in ways beyond those traditionally handled by the information security function. [...]

United States Federal Government’s Shift to Identity-Centric Security

17 December 2020

Governments are increasingly facing new legislation, standards, frameworks, and policies to protect critical and sensitive information. [...]

How Extreme Weather Will Create Chaos on Infrastructure

21 October 2020

Extreme weather events will soon become more frequent and widespread, devastating areas of the world that typically don’t experience them and amplifying the destruction in areas that do. [...]

Best back to school tech 2021: Remote student gear

29 July 2021

With distance and hybrid learning the new norm, students worldwide need to make sure they have the right equipment to be able to study effectively, no matter where they are. [...]

Best crypto credit card 2021: Cryptocurrency rewards

29 July 2021

Enjoy enhanced rewards and low fees with these five best cryptocurrency credit cards for 2021. [...]

Couchbase releases v7.0 in wake of successful IPO

29 July 2021

With Couchbase 7.0, the emphasis is building on the document database's relational face. [...]

Google Cloud joins SAP RISE program

29 July 2021

SAP RISE customers will be able to leverage Google Cloud's services, including artificial intelligence and machine learning. [...]

Save on gaming accessories: Level-up with these deals

29 July 2021

Don't pass up this opportunity to get some of the best gaming accessories on the market while they're available at such low prices. [...]

What is quantum computing? Everything you need to know about the strange world of quantum computers

29 July 2021

Google, IBM, Microsoft, Amazon are all looking into it, but quantum computing is still widely misunderstood. This is everything you need to know about the next stage of computing, and everything that it could unlock. [...]

United States Marshals Service chooses Anchorage Digital to manage seized or forfeited cryptocurrency

29 July 2021

The Marshals Service handles billions of dollars worth of seized or forfeited crypto assets. [...]

Nokia bounces back as 5G plans start to pay off

29 July 2021

The company's latest earning show an encouraging start to the new plans introduced by CEO Pekka Lundmark. [...]

Ransomware: These are the two most common ways hackers get inside your network

29 July 2021

Two attack methods are the most popular - and most successful - techniques ransomware gangs are using to lay the foundations for their cyber-extortion campaigns. [...]

Dump Google Chrome and keep (almost) all the benefits

29 July 2021

Better performance, longer battery life, and none of the Google stuff. [...]

Data Breach Costs at Record High, Zero Trust, AI and Automation Help Reduce Costs

28 July 2021

Data breaches have been growing in numbers and scale, taking longer to detect and contain. The average total cost of a data breach is at its highest of 17 years, at $4.24 million. The year over year increase of 10% is the largest single year cost increase recorded in the last 7 years. IBM and […] The post Data Breach Costs at Record High, Zero Trust, AI and Automation Help Reduce Costs appeared first on Security Intelligence. [...]

What’s New in the 2021 Cost of a Data Breach Report

28 July 2021

Has cybersecurity ever been more important than it is right now? Even in these extraordinary times, with its focus on manufacturing vaccines and getting shots into arms, new research in the Cost of a Data Breach Report shows that the increasing cost of security breaches makes preventing and responding to these threats a critical concern. […] The post What’s New in the 2021 Cost of a Data Breach Report appeared first on Security Intelligence. [...]

Double Encryption: When Ransomware Recovery Gets Complicated

26 July 2021

Ever hear of double extortion? It’s a technique increasingly employed by ransomware attackers. A malware payload steals a victim’s plaintext information before launching its encryption routine. Those operating the ransomware then go on to demand two ransoms — one for a decryption utility and the other for the deletion of the victim’s stolen information from […] The post Double Encryption: When Ransomware Recovery Gets Complicated appeared first on Security Intelligence. [...]

How AI Will Transform Data Security

23 July 2021

I’ve often wondered whether artificial intelligence (AI) in cybersecurity is a good thing or a bad thing for data security. Yes, I love the convenience of online stores suggesting the perfect items for me based on my search history, but other times it feels a bit creepy to have a pair of shoes I looked […] The post How AI Will Transform Data Security appeared first on Security Intelligence. [...]

API Abuse Is a Data Security Issue Here to Stay

23 July 2021

Just about every app uses an application programming interface (API). From a security standpoint, though, APIs also come with some common problems. Gartner predicted that API abuse will be the most common type of attack seen in 2022. So, what problems exactly do APIs face? And what can data security defenders do about it? Prevalent […] The post API Abuse Is a Data Security Issue Here to Stay appeared first on Security Intelligence. [...]

Thriving in Chaos: How Cyber Resilience Works

22 July 2021

In cybersecurity as in most jobs, problems don’t happen one at a time, you’re bound to have a few at once. Speakers at the RSA Conference 2021 talked about this in terms of maintaining cyber resilience in chaos. So, what does the buzzword ‘cyber resilience’ really mean? And why is it important to be able […] The post Thriving in Chaos: How Cyber Resilience Works appeared first on Security Intelligence. [...]

This Chat is Being Recorded: Egregor Ransomware Negotiations Uncovered

21 July 2021

Ransomware attacks are topping the charts as the most common attack type to target organizations with a constant drumbeat of attacks impacting industries across the board. In fact, IBM Security X-Force has seen a more than 10% increase in ransomware incident response requests compared to this time last year. Ransomware is well on its way […] The post This Chat is Being Recorded: Egregor Ransomware Negotiations Uncovered appeared first on Security Intelligence. [...]

Beyond Ransomware: Four Threats Facing Companies Today

21 July 2021

The recent DarkSide attack makes it clear: no system is safe from ransomware. And while the attackers say they weren’t out to hurt anyone, only to make money, the impact is the same. It could lead to potential disruptions of critical services across the country. At the same time, it stokes fears that similar attacks […] The post Beyond Ransomware: Four Threats Facing Companies Today appeared first on Security Intelligence. [...]

How to Fix the Big Problems With Two-Factor and Multifactor Authentication

20 July 2021

Getting a second opinion is a great idea in both medicine and end-user cybersecurity. Two-factor authentication (2FA) and multifactor authentication (MFA) are powerful tools in the fight against all kinds of cyberattacks that involve end-user devices and internet-based services. There’s just one big problem: it’s far, far too common for people to use text messaging […] The post How to Fix the Big Problems With Two-Factor and Multifactor Authentication appeared first on Security Intelligence. [...]

Avoid Blind Spots: Is Your Incident Response Team Cloud Ready?

20 July 2021

The year 2020 — with all its tumult — ushered in a massive shift in the way most companies work. Much of that transformation included migrating to cloud, with some statisticians reporting that a full 50% of companies across the globe are now using cloud technology. In many ways, that’s good — cloud holds several […] The post Avoid Blind Spots: Is Your Incident Response Team Cloud Ready? appeared first on Security Intelligence. [...]

Leaked Files From Offensive Cyber Unit Show Iran's Interest in Targeting ICS

29 July 2021

Regularly rebooting smartphones can make even the most sophisticated hackers work harder to maintain access and steal data from a phone read more [...]

MSSP SolCyber Emerges From Stealth With $20 Million Series A Funding

29 July 2021

SolCyber has emerged from stealth with $20 million in Series A funding from ForgePoint Capital, claiming to be the first modern MSSP for the mid-market. Venture funding for an MSSP is not unknown, but not common. It indicates that VC has confidence that the MSSP can grow into a sizeable firm. read more [...]

Protect: The Second Pillar in Your Journey to Improve Industrial Cybersecurity Posture

29 July 2021

In the last year, the National Security Agency (NSA) had ramped up its warnings on the risks of connecting industrial networks to IT networks issuing two cybersecurity advisories, the most recent just 10 days prior to the Colonial Pipeline disruption. Now, with the stakes raised and proof that our critical infrastructure is an easy target, the U.S. government is taking immediate action. read more [...]

Researchers Link Mysterious 'MeteorExpress' Wiper to Iranian Train Cyberattack

29 July 2021

Security researchers at SentinelOne have stumbled upon a hitherto unknown data-wiping malware that was part of a disruptive cyberattack against Iran’s train system earlier this month. read more [...]

LogicGate Raises $113 Million in Series C Funding

29 July 2021

Risk and compliance solutions provider LogicGate this week announced that it has raised $113 million in a Series C funding round, bringing the total raised by the company to $156 million. The funding round was led by growth equity firm PSG, with participation from existing investor Greenspring Associates. read more [...]

Google Details New Privacy and Security Policies for Android Apps

29 July 2021

Google this week announced a series of updates to its Google Play policies that are meant to improve overall user privacy and security and provide more control over ads personalization. read more [...]

eCommerce Fraud Prevention Firm Riskified Prices IPO at $21 Per Share

29 July 2021

Israel-based ecommerce fraud prevention company Riskified has announced the pricing of its initial public offering (IPO) as it prepares to start trading publicly on the New York Stock Exchange. read more [...]

Serious Vulnerabilities Found in Firmware Used by Many IP Camera Vendors

29 July 2021

IP cameras offered by a dozen vendors are exposed to remote attacks due to several serious vulnerabilities found in the firmware they all share, according to France-based cybersecurity firm RandoriSec. read more [...]

US Acting to Better Protect Infrastructure From Cyberthreats

28 July 2021

The Biden administration is taking steps to harden cybersecurity defenses for critical infrastructure, announcing on Wednesday the development of performance goals and a voluntary public-private partnership to protect core sectors. read more [...]

PayPal’s new ‘super app’ is ready to launch, will also include messaging

29 July 2021

PayPal’s plan to morph itself into a “super app” have been given a go for launch. According to PayPal CEO Dan Schulman, speaking to investors during this week’s second-quarter earnings, the initial version of PayPal’s new consumer digital wallet app is now “code complete” and the company is preparing to slowly ramp up. Over the […] [...]

Nikola founder Trevor Milton indicted on three counts of fraud

29 July 2021

Trevor Milton, the fast-talking showman founder of Nikola and the electric truck startup’s former CEO and executive chairman, has been charged with three counts of fraud. Milton “engaged in a fraudulent scheme to deceive retail investors” for his own personal benefit, according to the federal indictment unsealed by U.S. Attorney’s Office in Manhattan on Thursday. […] [...]

Talkiatry lands $20M Series A to go all in on in-network psychiatric care

29 July 2021

Talkiatry raised a $20 million Series A to scale a strategy simple in theory yet potentially challenging in execution: bring psychiatry services in-network with insurance providers. [...]

Draft.dev CEO Karl Hughes on the importance of using experts in developer marketing

29 July 2021

Developer marketing came up in our conversation with strategic marketing firm MKT1, so we called on content marketing production company Draft.dev's CEO Karl Hughes to learn more. [...]

Swarm debuts $499 Evaluation Kit for consumers and tinkerers

29 July 2021

The kit is an all-in-one product that includes a Swarm Tile, the company’s flagship modem device, a VHF antenna, a small solar panel, a tripod, a Feather S2 development board and an OLED. [...]

Hello Divorce raises $2M so that couples can say ‘good-bye’ easier

29 July 2021

Divorce is messy and stressful, made even messier and stressful when a couple is unable to go through the legal process because of the cost. [...]

ConverseNow is targeting restaurant drive-thrus with new $15M round

29 July 2021

One year after voice-based AI technology company ConverseNow raised a $3.3 million seed round, the company is back with a cash infusion of $15 million in Series A funding. [...]

Nothing Ear (1) review

29 July 2021

It’s always exciting to see a new company enter the consumer hardware space — and deliver a solid first product out of the game. [...]

Student labor marketplace Pangea closes $2M seed round

29 July 2021

The startup runs a marketplace that links college-age talent to companies in need of their services. Social media and web developer work are popular on the Pangea platform. [...]

Summit invests $215M into Odoo, an open source business management software developer, at a $2.3B+ valuation

29 July 2021

Open source has become a major force in the world of IT, and today a startup that has built a profitable operation by developing business management software on the priniciple is announcing a sizable secondary investment on the back of that growth. Odoo — a Belgium-based provider of open-source-based business software that ranges from inventory […] [...]

New Ransomware Gangs — Haron and BlackMatter — Emerge on Cybercrime Forums

29 July 2021

Two new ransomware-as-service (RaaS) programs have appeared on the threat radar this month, with one group professing to be a successor to DarkSide and REvil, the two infamous ransomware syndicates that went off the grid following major attacks on Colonial Pipeline and Kaseya over the past few months. "The project has incorporated in itself the best features of DarkSide, REvil, and LockBit," the [...]

Best Practices to Thwart Business Email Compromise (BEC) Attacks

29 July 2021

Business email compromise (BEC) refers to all types of email attacks that do not have payloads. Although there are numerous types, there are essentially two main mechanisms through which attackers penetrate organizations utilizing BEC techniques, spoofing and account take-over attacks. In a recent study, 71% of organizations acknowledged they had seen a business email compromise (BEC) attack [...]

New Android Malware Uses VNC to Spy and Steal Passwords from Victims

29 July 2021

A previously undocumented Android-based remote access trojan (RAT) has been found to use screen recording features to steal sensitive information on the device, including banking credentials, and open the door for on-device fraud. Dubbed "Vultur" due to its use of Virtual Network Computing (VNC)'s remote screen-sharing technology to gain full visibility on targeted users, the mobile malware was [...]

Top 30 Critical Security Vulnerabilities Most Exploited by Hackers

29 July 2021

Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, once again demonstrating how threat actors are able to weaponize publicly disclosed flaws to their advantage swiftly. "Cyber actors continue to exploit publicly known—and often dated—software vulnerabilities against broad target sets, [...]

Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers

29 July 2021

A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan (RAT) on compromised systems. Attributing the intrusions to a threat actor named PKPLUG (aka Mustang Panda and HoneyMyte), Palo Alto Networks' Unit 42 threat intelligence team [...]

UBEL is the New Oscorp — Android Credential Stealing Malware Active in the Wild

29 July 2021

An Android malware that was observed abusing accessibility services in the device to hijack user credentials from European banking applications has morphed into an entirely new botnet as part of a renewed campaign that began in May 2021. Italy's CERT-AGID, in late January, disclosed details about Oscorp, a mobile malware developed to attack multiple financial targets with the goal of stealing [...]

Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees

29 July 2021

An Iranian cyberespionage group masqueraded as an aerobics instructor on Facebook in an attempt to infect the machine of an employee of an aerospace defense contractor with malware as part of a years-long social engineering and targeted malware campaign. Enterprise security firm Proofpoint attributed the covert operation to a state-aligned threat actor it tracks as TA456, and by the wider [...]

Dutch Police Arrest Two Hackers Tied to "Fraud Family" Cybercrime Ring

29 July 2021

Law enforcement authorities in the Netherlands have arrested two alleged individuals belonging to a Dutch cybercriminal collective who were involved in developing, selling, and renting sophisticated phishing frameworks to other threat actors in what's known as a "Fraud-as-a-Service" operation. The apprehended suspects, a 24-year-old software engineer and a 15-year-old boy, are said to have been [...]

Hackers Turning to 'Exotic' Programming Languages for Malware Development

28 July 2021

Threat actors are increasingly shifting to "exotic" programming languages such as Go, Rust, Nim, and Dlang that can better circumvent conventional security protections, evade analysis, and hamper reverse engineering efforts. "Malware authors are known for their ability to adapt and modify their skills and behaviors to take advantage of newer technologies," said Eric Milam, Vice President of [...]

Several Bugs Found in 3 Open-Source Software Used by Several Businesses

27 July 2021

Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provide a pathway to more sophisticated attacks. All the security flaws in question, which impact EspoCRM v6.1.6, Pimcore Customer Data Framework [...]

Spotting Hackers at the Pace of XDR – From Alerts to Incidents

27 July 2021

Extended Detection and Response (XDR) technology is gaining traction within enterprises. But how can organizations handle the increased volume of alerts XDR systems produce? Samuel Jones, of cyber AI firm Stellar Cyber, discusses how embracing incident-based systems can reduce the analyst burden of XDR technology, enabling companies to spot and...Read the whole entry... »Related StoriesWhat SolarWinds Tells Us About Securing the Software Development Supply ChainThe SOC Hop Needs to be a Relic of the PastEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security [...]

Episode 221: Biden Unmasked APT 40. But Does It Matter?

23 July 2021

Andrew Sellers, the Chief Technology Officer at QOMPLX joins us to unpack the revelations this week about APT 40, the Chinese group that the US has accused of a string of attacks aimed at stealing sensitive trade secrets. Also: is Salesforce the next SolarWinds The post Episode 221: Biden Unmasked APT 40. But Does It Matter? appeared first on The...Read the whole entry... » Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 217: What Fighting Pirates Teaches Us About Ransomware [...]

Encore Podcast: Is Autonomous Driving Heading for a Crash?

15 July 2021

Elon Musk is a big fan of his company’s Fully Self Driving software. But is it safe? In this encore edition of the podcast from 2018, we speak with Beau Woods of The Atlantic Council about the risks of embracing autonomous driving technology too quickly. The post Encore Podcast: Is Autonomous Driving Heading for a Crash? appeared first on The...Read the whole entry... » Related StoriesEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain SecurityEpisode 215-1: Jeremy O’Sullivan of Kytch On The Tech Serving McDonald’s Ice Cream MonopolyEpisode 214: Darkside Down: What The Colonial Attack Means For The Future… [...]

At Pride Summit: A Warning On Cyber Literacy

11 July 2021

Poor cyber literacy is at the root of many of the cybersecurity problems plaguing the U.S. economy, according to Dr. Alissa Abdullah, Deputy CSO at MasterCard. The post At Pride Summit: A Warning On Cyber Literacy appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureWhat SolarWinds Tells Us About Securing the Software Development Supply Chain [...]

Episode 220: Unpacking The Kaseya Attack And Securing Device Identities on the IoT

8 July 2021

In this episode of the podcast, sponsored by Trusted Computing Group we dig deep on this week’s ransomware attack on the Kaseya IT management software with Adam Meyers of CrowdStrike and Frank Breedijk of the Dutch Institute of Vulnerability Disclosure. Also: Tom Laffey, a product security strategist at Aruba, a Hewlett Packard Enterprise firm,...Read the whole entry... » Related StoriesEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 215-2: Leave the Gun, Take the McFlurryEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware [...]

Episode 219: LGBTQ+Cyber – A Pride Month Conversation On Being Queer In Infosec

30 June 2021

In this week’s episode of the podcast (#219) we speak with four cybersecurity professionals about what it means to be Queer in the industry: their various paths to the information security community, finding support among their peers and the work still left to do to make information security inclusive. All in honor of Pride Month, 2021. The post ...Read the whole entry... » Related StoriesEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 220: Unpacking The Kaseya Attack And Securing Device Identities on the IoTEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security [...]

Episode 218: Denial of Sustenance Attacks -The Cyber Risk To Agriculture

24 June 2021

Forget about Colonial Pipeline and JBS. A coordinated cyber attack on U.S. agriculture could, in short order, lead to foot shortages and hunger in the U.S. and abroad. And history has shown us that when food gets scarce, things get ugly - fast. How likely is such an attack? More likely than you might think, says Rob Wood of NCC Group, our guest on...Read the whole entry... » Related StoriesEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareDeere John: Researcher Warns Ag Giant’s Site Provides a Map to Customers, EquipmentEncore Podcast: Is Autonomous Driving Heading for… [...]

Episode 217: What Fighting Pirates Teaches Us About Ransomware

17 June 2021

Criminal gangs swoop in on unsuspecting merchants to seize their goods. Behind the scenes, rival nations turn a blind eye or offer them safe harbor, in exchange for cooperation. Sound familiar? It should. The post Episode 217: What Fighting Pirates Teaches Us About Ransomware appeared first on The Security Ledger with Paul F. Roberts. Related StoriesEpisode 218: Denial of Sustenance Attacks -The Cyber Risk To AgricultureEpisode 214: Darkside Down: What The Colonial Attack Means For The Future of RansomwareEpisode 221: Biden Unmasked APT 40. But Does It Matter? [...]

Episode 216: Signed, Sealed and Delivered: The Future of Supply Chain Security

10 June 2021

In this episode of the podcast (#216) we talk with Brian Trzupek, Digicert’s Vice President of Product, about the growing urgency of securing software supply chains, and how digital code signing can help prevent compromises like the recent hack of the firm SolarWinds. The post Episode 216: Signed, Sealed and Delivered: The Future of Supply Chain...Read the whole entry... » Related StoriesWhat SolarWinds Tells Us About Securing the Software Development Supply ChainEncore Podcast: Is Autonomous Driving Heading for a Crash?Episode 214: Darkside Down: What The Colonial Attack Means For The Future of Ransomware [...]

What SolarWinds Tells Us About Securing the Software Development Supply Chain

7 June 2021

The recent SolarWinds attack highlights an Achilles heel for enterprises: software updates for critical enterprise applications. Digital signing of code is one solution, but organizations need to modernize their code signing processes to prioritize security and integrity and align with DevOps best practices, writes Brian Trzupek the Senior Vice...Read the whole entry... »Related StoriesEpisode 216: Signed, Sealed and Delivered: The Future of Supply Chain SecurityWant To Prevent Another SolarWinds? Start With DevelopersEpisode 210: Moving The Goal Posts On Vendor Transparency: A Conversation With Intel’s Suzy Greenberg [...]

Airports have a wildlife problem (and vice versa)

29 July 2021

Every summer, hundreds of diamondback terrapins crawl over to New York’s John F. Kennedy International Airport to lay their eggs. In past years, the turtles have been so obstructive, they’ve caused flight delays. To manage situations like these, airports like JFK have entire departments dedicated to keeping wildlife and planes out of each other’s way. While keeping the tarmac clear of turtles allows airports to operate smoothly, the real danger looms in the skies. On average, over 10,000 wildlife strikes are reported each year to the Federal Aviation Administration, most of them birds. As more planes take to the skies… [...]

How to use the PS5’s M.2 SSD expandable storage

29 July 2021

The PS5 software beta now supports M.2 SSDs. | Photo by Tom Warren / The Verge Sony has started beta testing the first software update for the PS5 today, and it includes M.2 SSD expandable storage support. The long-awaited feature is available for testers right now and will launch on all PS5 consoles later this year. We’ll need to test a variety of drives with the PS5, but right now Sony requires at least a PCIe Gen4 SSD, with a minimum capacity of 250GB. Sony is also recommending a drive capable of 5,500MB/s, but slower Gen4 drives may still be… [...]

Nikola founder charged with securities fraud over allegedly fake truck demo

29 July 2021

In Southern District of New York federal court on Thursday, Nikola founder Trevor Milton was charged with securities fraud. The charges allege that Milton made a series of materially false claims which portrayed the electric vehicle company Nikola as far closer to releasing a functional product than it actually was, and raising more than $500 million of investment in the process. “Milton sold a version of Nikola not as it was – an early stage company with a novel idea to commercialize yet-to-be proven products and technology – but rather as a trail-blazing company that had already achieved many groundbreaking… [...]

The children of tech’s guest workers are pushing for immigration relief

29 July 2021

Illustration by Ari Liloan for The Verge ‘Documented Dreamers’ have few good options after aging out of dependent visas Continue reading… [...]

This is Beast Canyon, the evolution of Intel’s modular mini gaming PC

29 July 2021

Photo by Sean Hollister / The Verge This 8-liter desktop upgrades in a snap Continue reading… [...]

Nothing Ear 1 earbuds review: almost something

29 July 2021

Standout design, noise cancellation, and wireless charging for $99 Continue reading… [...]

Uber teaming up with Rosetta Stone to offer free language courses to drivers

29 July 2021

Illustration by Alex Castro / The Verge Uber is teaming up with popular language service Rosetta Stone to provide free classes to drivers and couriers, the company announced Thursday. The deal is being extended to drivers and delivery workers in select markets where Uber operates. Rosetta’s digital language learning programs, which cover 24 languages, will be fully integrated into the Uber app used by its workers. And the company is working with Rosetta on developing language skills directly related to their work as ride-share drivers and delivery workers. Drivers have previously been able to take English-language courses as part of… [...]

Huawei’s P50 announced with Snapdragon 888 and HarmonyOS

29 July 2021

The Huawei P50 Pro. | Image: Huawei Huawei has announced its latest flagship phones for the Chinese market, the P50 and P50 Pro. They’re the company’s first major phones to launch with HarmonyOS, the company’s own branded mobile operating system, which pairs with Huawei’s typically well-specced cameras and hardware that includes Qualcomm’s flagship Snapdragon 888 processor in some models. The launch of the P50 series has come a little later in the year than the P40 did in 2020, thanks to US sanctions which have seriously impacted Huawei’s ability to produce new phones and restricted its ability to buy chips… [...]

Apple’s M1 MacBook Air is at its lowest price ever at Best Buy today

29 July 2021

Apple MacBook Air with the M1 processor | Photo by Vjeran Pavic / The Verge Apple’s latest MacBook Air with the M1 processor is an excellent, lightweight productivity laptop for school or work. It has excellent performance, stellar battery life, and runs completely silently, thanks to its fanless design. At Best Buy, you can save up to $250 off the price of the 8GB RAM / 256GB storage model, bringing it down to just $750, the lowest price we’ve seen yet. Read our review. To get the best deal, you need to be signed into a My Best Buy account… [...]

Facebook’s next hardware launch will be its Ray-Ban ‘smart glasses’

29 July 2021

What exactly the glasses will look like or how they will function is unclear. Facebook’s next hardware launch will be its long-awaited Ray-Ban ‘smart glasses,’ CEO Mark Zuckerberg confirmed on an earnings call this week. When exactly the glasses will arrive is unclear. We least heard they were launching some time in 2021, but the pandemic has changed a lot of companies’ plans, and Zuckerberg did not comment on a time frame. “Looking ahead here, the next product release will be the launch of our first smart glasses from Ray-Ban in partnership with EssilorLuxottica,” said the Facebook CEO. “The glasses… [...]

How Gravity Turns Me Upside Down

29 July 2021

My favorite force belittles me—literally—but also inspires new ways to get high. [...]

China Cracks Down On Its Tech Giants. Sound Familiar?

29 July 2021

Companies like Alibaba, Baidu, and Tencent were once regarded with national pride. Now they’re being slapped with fines and other penalties. [...]

Phantom Warships Are Courting Chaos in Conflict Zones

29 July 2021

The latest weapons in the global information war are fake vessels behaving badly. [...]

Covid Is Pulling the Plug on Beloved Japanese Arcades

29 July 2021

Once home to vibrant live competitions, gaming centers have been bleeding out since before the pandemic. Lockdowns could leave them KO'd for good. [...]

A People’s History of Black Twitter, Part III

29 July 2021

Joy and pain, harmony and discord, organization and chaos—there’s no single way to define Black Twitter’s complex, ongoing legacy. [...]

The Cost of Preventing Deaths by Climate-Driven Heat

29 July 2021

A new formula measures the “mortality cost of carbon,” and how much would have to be removed from the atmosphere to save a single life. [...]

Activision Blizzard Employees Walk Out Over Sexism Complaints

28 July 2021

“We love our jobs, but our jobs don’t love us back,” one worker told WIRED. "So we’re trying to change that.” [...]

Toyota Whiffed on EVs. Now It’s Trying to Slow Their Rise

28 July 2021

In a bid to protect its investments in hybrids and hydrogen fuel cells, the carmaker is lobbying against the transition to electric vehicles. [...]

How Nothing Designed 'Ear 1s' to Beat Apple AirPods

28 July 2021

The head of design at Nothing explains how their product could take on Apple's all-conquering wireless earbuds, at a fraction of the cost. [...]

The Best Cheap Phones for (Almost) Every Budget

28 July 2021

There’s little reason to pay top dollar for a phone these days. These are our favorite Android devices and iPhones for $200 to $500. [...]

New Zealand’s gun buyback scheme impacted by data breach, SAP to blame

Related Posts

aRTy News Headlines – 2018-12-22

aRTy News Headlines – 2018-12-21

aRTy News Headlines – 2018-12-20