cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• Senators introduce bill to counter bad cybersecurity practices in credit reporting industry (cyberscoop.com)
  Two Democrats want to provide new regulatory powers for the Federal Trade Commission so that it can punish companies like Equifax and other…
• Feds charge Ohio man with creating invasive 'Fruitfly' malware (cyberscoop.com)
  An Ohio man faces a 16-count indictment for allegedly creating a piece of malware that spied on victims in order to commit a litany of crim…
• Russian anti-virus company Kaspersky Lab files for injunction in U.S. court, seeking to counter (cyberscoop.com)
  The Moscow-based company has filed a motion for a preliminary injunction in U.S. federal court in hopes of halting the ongoing efforts to c…
• Wyden urges DHS to adopt secure email authentication protocol (cyberscoop.com)
  The driving force behind Wyden's increasingly granular push to improve U.S. government cybersecurity is Chris Soghoian, the former ACLU tec…
• Kaspersky products banned in Pentagon draft budget (cyberscoop.com)
  The newest draft of the National Defense Authorization Act, bans Kaspersky due to unspecified reports that the company "might be vulnerable…
• Serial crook posed as Anonymous and extorted news websites with DDoS, officials say (cyberscoop.com)
  Federal officers arrested a Seattle man this week for allegedly launching denial-of-service attacks against the legal news site Leagle.com…
• Russian hacker gets 46 months in U.S. prison for role in creating huge botnet (cyberscoop.com)
  Maxim Senakh utilized malware known as Ebury to steal credentials and build up a global botnet involving tens of thousands of compromised m…
• Marcus Hutchins prosecutors outline secret evidence to be introduced (cyberscoop.com)
  Prosecutors in the case against researcher Marcus Hutchins were this week granted a protective order keeping much of their evidence out of…
• Multiple class-action lawsuits filed in wake of Equifax breach (cyberscoop.com)
  Not even 24 hours after the Georgia-based credit reporting company announced the incident, lawsuits were filed against Equifax.
• Researcher responsible for halting 'WannaCry' virus arrested by FBI (cyberscoop.com)
  Marcus Hutchins, 23, was arrested for his alleged role in creating the Kronos banking trojan.
• Cyber Command lacks authorities, capabilities, Pentagon watchdog says (cyberscoop.com)
  In a heavily redacted 2015 report released to CyberScoop, the Department of Defense's inspector general says the fledgling command lacks th…
• DHS will scan agencies for DMARC, other hygiene measures (cyberscoop.com)
  The department is collecting data about federal agencies' use of an industry-standard cybersecurity measure that blocks hackers' forged ema…
• Read: DHS releases details on Kaspersky product ban (cyberscoop.com)
  The recent order to remove Kaspersky products from federal networks impacts almost every government agency within the next 90 days.
• Wyden pushes Supreme Court to adopt email encryption standards that it currently doesn't use (cyberscoop.com)
  Ron Wyden pushed the court to adopt STARTTLS encryption "to better protect the privacy and security of the Court's email communications."
• ISPs 'likely' helped infect targets of state surveillance (cyberscoop.com)
  A spying tool known as FinFisher is involved in a seven-country campaign that most likely involve "complicit" internet providers helping to…
• Why was North Korea running a phantom cybersecurity startup in Malaysia? (cyberscoop.com)
  The United Nations is trying to unravel a web of shell companies while the isolated regime tries to sidestep international sanctions.
• Alfa Bank threatens researcher with CFAA lawsuit over DNS request data (cyberscoop.com)
  The Russian bank is considering litigation against an Indiana University researcher under the Computer Fraud and Abuse Act’s civil action p…
• Justice Dept. to charge four over Yahoo mega breaches (cyberscoop.com)
  The Department of Justice is said to target one individual based in Canada and three based in Russia.
• Economists have now studied how criminals can make the most out of ransomware (cyberscoop.com)
  If ransomware is supposed to pay, three University of Kent researchers have figured out how criminals should maximize profits.
• Health care industry is king of the malicious insider threat (cyberscoop.com)
  The health care sector's IT suffered from malicious insider attacks at a rate far higher than any other major industry in 2016.
• Sen. Wyden calls out Pentagon for not adopting email encryption technology (cyberscoop.com)
  The senator from Oregon wants to know why DISA, which runs email for various military branches, isn't using STARTTLS.
• Insider charged with writing malware to steal Wall Street firm's crown jewel algorithms (cyberscoop.com)
  The accused senior systems administrator was caught only when his luck ran out, according to the FBI.
• DOJ moves to topple Kelihos, one of the world's largest botnets (cyberscoop.com)
  The Department of Justice announced Monday an effort to take down a global network of over 100,000 enslaved computers.
• Senate IT systems are 'far behind' on basic cybersecurity and 2FA, Wyden charges (cyberscoop.com)
  While the executive branch has long since been adopting two-factor authentication, the senate neither requires nor even offers it, the Sena…
• Yahoo shareholders suing over failure to disclose breaches (cyberscoop.com)
  On top of consumer lawsuits, Yahoo faces a shareholder lawsuit over its cybersecurity catastrophes which include losing 1.5 billion user cr…
• DHS: more authority needed to secure mobile networks (cyberscoop.com)
  The Department of Homeland Security's study on mobile cybersecurity threats is finally out and it's alarming reading.
• Prolific Russian credit-card hacker gets 27 years (cyberscoop.com)
  Prosecutors had asked for 30 years, saying he personally helped create the multi-billion dollar market for stolen data he serviced.
• DOJ praises vastly expanded government hacking power (cyberscoop.com)
  After months of debate, new rule changes are set to go into effect on Dec. 1 that vastly expand government hacking power. The debate isn't…
• Weakening encryption runs against national interest, according to congressional report (cyberscoop.com)
  A new committee report recommends against weakening encryption, as doing so would damage national security and individual privacy
• Obama advisers back Trump's cybersecurity executive order (cyberscoop.com)
  Experts told CyberScoop “It does show that the Trump administration is taking cybersecurity seriously."
• Cellebrite can now unlock iPhone 6 and 6+ and extract data from array of popular apps (cyberscoop.com)
  Thanks to Israel-based Cellebrite, It's easier than ever for police to grab all the data they want (and much more) from smartphones
• After social engineering hack, judge rules 'very poor' contract won't save hosting company (cyberscoop.com)
  After allowing social engineering hackers to damage a customer, an American web hosting service's broad contracts are not going to protect…
• U.S. government still fighting to keep security audits of Anthem hack secret (cyberscoop.com)
  Information on the breach that saw hackers gain access to to nearly 80 million records is still buried in protections afforded to the feder…
• Rosenstein warns encryption can have 'significant detriment' on public safety (cyberscoop.com)
  U.S. Deputy AG Rod Rosenstein warned tech companies that Americans will not accept a culture in which encryption makes it impossible for la…
• Amazon keeps tight-lipped about pre-Black Friday security incident (cyberscoop.com)
  Amazon “fixed the issue” and has emailed customers who may have been affected, though the company declined to say how many users may have b…
• Passport numbers stolen from Marriott provide scammers with another ID theft tool (cyberscoop.com)
  A passport number is another piece of data that can be used to sell "fullz," or full stolen profiles used to commit identity theft.
• DOJ indictment spotlights China’s civilian intel agency (cyberscoop.com)
  In unsealing charges Tuesday against 10 Chinese nationals, the Department of Justice showed its focus is on China’s Ministry of State Secur…
• New bipartisan bill proposes international election security cooperation (cyberscoop.com)
  The bill aims to have U.S. election officials collaborate on election security with their foreign counterparts.
• Ransomware infects hospitals in Ohio, West Virginia (cyberscoop.com)
  The pair of hospitals are the latest health care organizations to be hit by ransomware.
• Marriott announces data breach impacting 500 million hotel guests (cyberscoop.com)
  Marriott announced Friday that information contained in a Starwood Hotels database was compromised, potentially affecting up to 500 million…
• EULA out, equity in: Why startups are now a part of larger companies' security budgets (cyberscoop.com)
  Large companies are starting to invest in cybersecurity startups instead of buying their services through the usual licensing agreements.
• Here's how the private sector wants to fight botnets (cyberscoop.com)
  In an effort protect internet denizens from coordinated, automated cyberattacks, an industry group released an "International Anti-Botnet G…
• Dell reveals ‘unauthorized' attempt to extract customer passwords (cyberscoop.com)
  “Though it is possible some of this information was removed from Dell’s network, our investigations found no conclusive evidence that any w…
• How cyberwarfare is playing into Yemen's civil war (cyberscoop.com)
  The war in Yemen has been accompanied by a digital aspect in which combatants have used surveillance and cryptocurrency to their advantage.
• Accenture: Russian hackers using Brexit talks to disguise phishing lures (cyberscoop.com)
  Accenture researchers say APT28 has been using Brexit-themed phishing lures to spread backdoors.
• Dunkin Donuts struck in latest credential stuffing attack (cyberscoop.com)
  Dunkin’ Donuts has alerted customers to a data breach that may impact those who signed up to DD Perks, the company’s loyalty program.
• Data about 57 million people exposed by Elasticsearch servers (cyberscoop.com)
  Cybersecurity organization Hacken said it found the misconfigured servers as part of a regular security audit. The data appears to come fro…
• CyberGRX raises $30 million for collaborative risk auditing service (cyberscoop.com)
  CyberGRX says its platform is designed to help companies and their third parties collaborate over risk and stop supply chain threats.
• Alleged LinkedIn hacker to undergo psychiatric evaluation, trial pushed to February (cyberscoop.com)
  Yevgeniy Nikulin is scheduled to visit a psychiatric facility, where a doctor will determine whether he is fit to stand trial.
• Uber fined $1.17 million by U.K., Dutch authorities for 2016 breach (cyberscoop.com)
  The company could be getting fined a lot more if its breach was subject to GDPR.