Cybersecurity News

Shopping Online Securely

by

The holiday season is nearing for many of us, and soon millions of people around the world will be looking to buy the perfect gifts. Many of us will choose to shop online in search of great deals and to avoid long lines and impatient crowds. Unfortunately, this is also the time of year many … Read more

Știrile săptămânii din cybersecurity (2.10.2018)

by

– Securitatea cibernetică este o responsabilitate comună: începe Luna europeană a securității cibernetice 2018 – Aproximativ 50 de milioane de utilizatori ai rețelelor sociale Facebook și Instagram, afectați de o breșă de securitate – Vulnerabilitate Zero-Day în noua variantă a sistemului de operare MacOS Mojave – Black Rose Lucy, un nou malware-as-a-service afectează utilizatorii de … Read more

EnGenius routers found in Mirai-like botnet

by

EnGenius routers were recently found in a Mirai-like botnet with a distinct network traffic fingerprint. Locating this botnet subset was a joint effort between myself and Dr. Neal Krawetz. This Mirai-like botnet traffic was fingerprinted after a distinct pattern in the packets received was identified by Dr. Krawetz. While the source port was usually randomized, … Read more

Google Project Zero Discloses New Linux Kernel Flaw

by

Google Project Zero this week disclosed the details and released a proof-of-concept (PoC) exploit for a potentially serious Linux kernel vulnerability. The flaw, tracked as CVE-2018-17182 and assigned a severity rating of “high,” was discovered by Google Project Zero’s Jann Horn. The security hole is a use-after-free introduced in August 2014 with the release of … Read more

New National Cyber Strategy Message: Deterrence Through U.S. Strength

by

The new White House cybersecurity strategy makes one message was clear: America will not sit back and watch when attacked in cyberspace. On the contrary, in areas ranging from critical infrastructure to space exploration to intellectual property protection, the USA will respond offensively as well as defensively in cyberspace. The best defense is a good … Read more

Cybersecurity Researchers Spotted First-Ever UEFI Rootkit in the Wild

by

Cybersecurity researchers at ESET have unveiled what they claim to be the first-ever UEFI rootkit being used in the wild, allowing hackers to implant persistent malware on the targeted computers that could survive a complete hard-drive wipe. Dubbed LoJax, the UEFI rootkit is part of a malware campaign conducted by the infamous Sednit group, also … Read more

We hired ethical hackers to hack a family’s smart home — here’s how it turned out

by

Vulnerabilities revealed in smart home devices prompt 1 manufacturer to immediately beef up protections All it took was a white van, a team of three hackers and a phishing email to remotely unlock Johanna Kenwood and Peter Yarema’s front door. The couple’s home in Oakville, Ont., is automated with a number of smart devices, including … Read more

Dans la course aux cyberarmes, tous les coups sont permis

by

Que se passe-t-il lorsque des entreprises privées disposent d’armes informatiques aussi puissantes que celles des États? Le premier SMS arriva sur le portable d’Ahmed Mansoor à 9h38, par un étouffant matin d’août 2016. «Nouvelles preuves de tortures d’Émiriens dans les prisons d’État», annonçait le message laconique, rédigé en arabe. Un lien hypertexte suivait la phrase. … Read more

New regulations to boost cybersecurity

by

The Executive Yuan’s Department of Cyber Security has drafted six sets of regulations to complement the Information and Communication Security Management Act (資通安全管理法) passed by the Legislative Yuan in May. The regulations are to take effect on Jan. 1 next year alongside the act. Under the act, central and local government agency heads must appoint … Read more

Facebook announced it was hacked – 50 million users affected

by

Știre în curs de actualizare. “Our investigation is still in its early stages. But it’s clear that attackers exploited a vulnerability in Facebook’s code that impacted ‘View As’, a feature that lets people see what their own profile looks like to someone else. This allowed them to steal Facebook access tokens which they could then … Read more

Cybersecurity start-up Darktrace raises $50 million

by

Cybersecurity business Darktrace has raised $50m (£38m) in new funding, bringing the company’s valuation to $1.65bn, up from a valuation of $1.25bn in May. Darktrace uses artificial intelligence software to automatically detect cyber threats to customers’ networks. The business says its Antigena product can respond automatically to cybersecurity problems within two seconds. Clients include Gatwick … Read more

Axis Capital : Recognized as GCHQ Certified Training (“GCT”) Provider

by

AXIS Specialty UK Holdings Limited announced today it has been certified as a GCHQ Certified Training provider for its course “Understanding Cybersecurity and Insurance.” AXIS offers GCHQ Certified Training and related resources to insureds and brokers through the AXIS Cyber Center of Excellence, a global resource that provides mentorship, education, consulting services and solutions to … Read more

Cyber security, un’industria da 153 miliardi di dollari nel 2018

by

Roma, 27 set. (askanews) – L’industria della cyber-security muoverà circa 153 miliardi di dollari in tutto il 2018, con la previsione che questa cifra potrebbe salire ad oltre 248 miliardi nel 2023. E’ quanto emerge da uno studio di esperti del settore, che attribuisce alla Sanità e alle soluzioni di crittografia il primato degli investimenti.

Cyber-attack at fashion website SheIn.com hits 6.4m customers

by

Retail website SheIn.com has notified customers of a serious data breach after malicious hackers stole the details of 6.42 million people. The ‘affordable fashion’ site, which ships worldwide, was made aware of the cyber-attack on August 22, though it is believed to have started in June. During an investigation, the company’s servers were scanned and … Read more

73% dintre angajații din Europa suferă de stres cibernetic. Ce este și cum se manifestă

by

Stresul ne urmărește acum și în mediul online, nu doar la serviciu ori acasă, în fiecare zi. În pas cu vremurile, specialiștii l-au numit “stres cibernetic”. Un studiu recent arată că 73% dintre angajații din Europa sunt stresați de numărul de parole pe care trebuie să le țină minte, mai ales că 54% recunosc că … Read more

Un ex-employé de la NSA condamné pour une fuite via l’antivirus Kaspersky

by

Un ancien employé de la NSA, qui s’était fait voler par négligence des documents confidentiels sur son ordinateur personnel piraté via l’antivirus russe Kaspersky, a été condamné mardi à 66 mois de prison. Nghia Hoang Pho, 68 ans, était employé d’une unité spécialisée contre la cybercriminalité de la NSA, l’agence de renseignement militaire américaine. Il … Read more

The CyberWar Map

by

The CyberWar Map is a visual guide to some of the most prominent players and events in state-to-state cyberconflict created as a part of the National Security Archive’s Cyber Vault Project. This resource focuses on state-sponsored hacking and cyber-attacks.

IN CYBERWAR, THERE ARE NO RULES

by

In 1984, a science fiction movie starring an up-and-coming Austrian-American actor took the box office by storm. A cybernetic organism is sent back in time to seek out and kill the mother of a great war hero to prevent his subsequent birth. The cyborg scans a phone book page and begins methodically killing all women … Read more

Government Planning New Offensive Cyber-War Unit

by

The proposal would expand the UK’s existing offensive cyber capabilities fourfold, with funding in the hundreds of millions of pounds The government is planning to expand the UK’s offensive cyber-war capabilities by approximately fourfold with a new cyber warfare unit amidst increased threats from the likes of Russia, North Korea and Iran.

German cyber defense blends military and commerce

by

A cyber defense training pact has been signed by Deutsche Telekom and Germany’s Bundeswehr. Their deal expands a network of commercial and federal information security hubs centered in Bonn. Cyber experts would “profit” from the skill exchanges, said Thomas Tschersich, head of cyber security at Telekom which has been running its own Security Operation Center … Read more

Protecting the Power Grid from Cyber Attacks

by

As the national power grid becomes increasingly dependent on computers and data sharing—providing significant benefits for utilities, customers, and communities—it has also become more vulnerable to both physical and cyber threats. While evolving standards with strict enforcement help reduce risks, efforts focused on response and recovery capabilities are just as critical––as is research aimed at … Read more

Cyber security talk to be held in Aberdeen

by

Aberdeen-based social enterprise AFBE-UK Scotland has organised a series of seminars, dubbed Real Projects, to highlight issues facing the oil and gas industry. Ben Dickinson, a cyber security consultant with global engineering and technology business ABB, will give the presentation, entitled The State of Industrial Cyber Security, at Robert Gordon University.

Cybertech Europe 2018 – Rome, Italy – 26-27 September 2018

by

Cybertech Europe 2018 is your chance to meet technology company executives, start-ups, government officials and contractors, investors, leading academics and legal, media and marketing professionals changing the global cyber landscape. High-profile speakers and panelists will focus on the global cyber threat, and strategies and solutions for diverse challenges in sectors including finance, transportation, utilities, defense, … Read more

Cybersécurité : le marché de l’emploi va encore grandir

by

Plus personnes ne peut s’en passer. La cybersécurité va devenir un besoin essentiel de toutes les entreprises. Le marché, porté par la numérisation massive de toutes les activités de la société, est en plus soutenu par des réglementations qui rendent obligatoires certains dispositifs. … A titre d’exemple, entre 2014 et 2016, les offres de postes … Read more

Microsoft refuerza la ciberseguridad y democratiza la IA en Ignite 2018

by

Durante la primera jornada de Ignite 2018, el evento anual de TI de Microsoft, la compañía ha subrayado la necesidad de reforzar la seguridad informática y, para ello, ha lanzado nuevas iniciativas y productos. Entre ellos se encuentran Microsoft Secure Score, un informe dinámico que evalúa los entornos de clientes de Microsoft 365 y proporciona … Read more

Squad accélère en Australie en participant au «Australia-France Defence Industry Symposium » à Adélaïde

by

Éric Guillerm, Président de Squad « Après avoir participé à la première édition des Maritime Connection Days in Australia, nous avons identifié de premiers clients et différentes opportunités de développement auprès de nombreux acteurs de l’industrie maritime en quête de solutions de cybersécurité. »

Tunisie : vers une stratégie nationale pour lutter contre la cybercriminalité

by

Tunisie : vers une stratégie nationale pour lutter contre la cybercriminalité TUNIS — Face à une conjoncture mondiale en métamorphose technologique en continu, “la Tunisie œuvre d’arrache-pied à renfoncer ses capacités de cyberdéfense via l’instauration d’une stratégie nationale en la matière”, a souligné lundi Kamel Akrout, conseiller principal pour la sécurité nationale à la présidence … Read more

VPNFilter Malware Infects 500k Routers Including Linksys, MikroTik, NETGEAR

by

Researchers warn of malware infecting 500,000 popular routers in a campaign mostly targeting the Ukraine, but also 54 other countries. Malware called VPNFilter has infected 500,000 router brands ranging from Linksys, MikroTik, NETGEAR and TP-Link that are mostly used in home offices. Researchers at Cisco Talos said they decided to warn the public of the … Read more

Online Cheating Site AshleyMadison Hacked

by

Large caches of data stolen from online cheating site AshleyMadison.com have been posted online by an individual or group that claims to have completely compromised the company’s user databases, financial records and other proprietary information. The still-unfolding leak could be quite damaging to some 37 million users of the hookup service, whose slogan is “Life … Read more

Sources: Target Investigating Data Breach

by

Nationwide retail giant Target is investigating a data breach potentially involving millions of customer credit and debit card records, multiple reliable sources tell KrebsOnSecurity. The sources said the breach appears to have begun on or around Black Friday 2013 — by far the busiest shopping day the year.