cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• Apple's new T2 security chip kills access to MacBook microphone (cyberscoop.com)
  The company says that the T2 chip will completely cut off access to a MacBook's microphone when the device's lid is shut.
• Here's how to defend your enterprise from Magecart (cyberscoop.com)
  With the body of forensic evidence tied to Magecart growing, researchers have released recommendations for defending against the group.
• INKY emerges from stealth with email spoofing, phishing protection service (cyberscoop.com)
  INKY, a startup that provides protection against email spoofing and phishing services, emerged from stealth mode and announced its “INKY Ph…
• FBI to private industry: Attribution won’t deter North Korean hacking (cyberscoop.com)
  North Korean hacking “will continue unabated, regardless of the U.S. government public attribution" the FBI said in an alert obtained by Cy…
• Center for Internet Security looks to expand threat sharing program to political campaigns (cyberscoop.com)
  The goal is to chip away at the security-resource deficit facing candidates, as numerous tech companies are trying to do by offering free s…
• Signal Messenger tests feature to encrypt sender identity along with message (cyberscoop.com)
  Signal, the encrypted messaging app, is testing a new “sealed sender” feature that aims to limit even further the amount of information it…
• Report: Zoho's domain regularly exploited to move keylogger data (cyberscoop.com)
  Keyloggers often use email, rather than C2 servers, to exfiltrate data. Cofense says a huge chunk of that is done using Zoho servers.
• Government website encryption needs help from DHS, Sen. Wyden says (cyberscoop.com)
  Despite significant improvements to government website encryption, some metadata is still transmitted insecurely, the Oregon Democrat said.
• Facebook gets fined £500,000 by U.K. for Cambridge Analytica ordeal (cyberscoop.com)
  It's first official financial consequence of the scandal.
• University DDoS attack leads to $8.6 million fine, house arrest for New Jersey man (cyberscoop.com)
  Paras Jha is one of the masterminds behind the Mirari botnet, which has been used in several large-scale attacks.
• CMS portal breach exposes 75,000 individuals' records (cyberscoop.com)
  CMS says it's working to restore the breached portal and that the incident doesn't affect the operation of HealthCare.gov or open enrollmen…
• Arctic Wolf Networks raises $45 million for cloud SOC platform (cyberscoop.com)
  Arctic Wolf argues that its model is more economical given the shortage of cybersecurity skills and “cost-prohibitive nature” for an organi…
• Researcher finds trove of political fundraising, old voter data on open internet (cyberscoop.com)
  A consulting firm that works with Democratic campaigns unknowingly left sensitive information and credentials to old voter records open on…
• FireEye links Russia-owned lab to Trisis developers (cyberscoop.com)
  A Russian lab very likely helped build tools used by an infamous hacking group known for its Trisis malware, FireEye says.
• DHS's top cyber office is about to get a name that reflects its mission (cyberscoop.com)
  The CISA act would rebrand NPPD, giving it a more cyber-relevant name and cementing the office into law.
• Experts advocate for 'ATT&CK' as go-to framework to share threat intel (cyberscoop.com)
  Advocates say "ATT&CK" is ballooning as a popular way for people performing different roles in cybersecurity to speak the same language.
• Ex-NSA employees criticize Mike Rogers' role with Israeli venture firm (cyberscoop.com)
  Some former military officials aren't happy with ex-NSA Director Adm. Michael Rogers joining the advisory board of Team8, an Israeli-run ve…
• Super Micro conducting investigation into Bloomberg claims (cyberscoop.com)
  Super Micro Computer says it's conducting an investigation into the claims made by Bloomberg Businessweek, according to a letter it sent it…
• The key to protecting the midterms is resilience for election systems, experts say (cyberscoop.com)
  DHS's top cybersecurity official, Chris Krebs, says he's "a little nervous" about the midterms, but he and his peers argue that the country…
• GitHub rolls out new token scanning, security alert features (cyberscoop.com)
  GitHub will automatically scan for access tokens in public code with its new beta. It's also launching an API for security advisories.
• Coats: ODNI has seen 'no evidence' of supply chain hack detailed in Bloomberg story (cyberscoop.com)
  Director of National Intelligence Dan Coats says that he’s seen no evidence of Chinese actors tampering with motherboards made by Super Mic…
• Lawfare editor on persistent DDoS attack: 'We wish they'd knock it off' (cyberscoop.com)
  Influential national security blog Lawfare has been the target of a distributed denial-of-service attack since Wednesday.
• Meet GreyEnergy, the newest hacking group hitting Ukraine’s power grid (cyberscoop.com)
  Cybersecurity researchers at ESET have identified a spinoff to the infamous Russian hacking group.
• Ex-DHS official on PPD-20 repeal: Consider potential blowback to private sector (cyberscoop.com)
  Suzanne Spaulding says the U.S. government should carefully consider the potential private-sector repercussions of conducting offensive cyb…
• New research highlights Vietnamese group's custom hacking tools (cyberscoop.com)
  Researchers at Cylance have uncovered remote access tools linked to the infamous Vietnamese hacking group APT32.
• Report: People are crowdfunding to buy voter data off hacker forums (cyberscoop.com)
  While data is being illicitly sold, it was not necessarily illicitly obtained, as voter records are in many cases public records.
• Ransomware hits computer networks of North Carolina water utility (cyberscoop.com)
  The utility has vowed not to pay a ransom for the attack, which will force the company to rebuild its computer systems.
• WhiteSource raises $35 million for open source flaw detection platform (cyberscoop.com)
  WhiteSource says that as more organizations implement open source components, there's a growing need for automated open source bug monitori…
• FDA warns users of cyber vulnerability in pacemaker programmers (cyberscoop.com)
  The FDA has issued a cybersecurity advisory for two models of programmers used on cardiac devices like pacemakers and defibrillators.
• Breach of Pentagon travel records exposes defense personnel PII (cyberscoop.com)
  The Pentagon identified the breach on Oct. 4 and is still investigating.
• Two bills seek transparency in ownership of election vendors (cyberscoop.com)
  The bills' backers aren't too happy about July reports that a Russian oligarch purchased an election vendor operating in Maryland.
• Researchers link tools used in NotPetya and Ukraine grid hacks (cyberscoop.com)
  New research provides evidence that TeleBots, a group with Russian military ties, was involved with the NotPetya and BlackEnergy incidents…
• GAO report shows how easy it is to hack DOD weapons systems (cyberscoop.com)
  In cybersecurity probes of DOD weapons systems in recent years, penetration testers were able to wrest control of systems with relative eas…
• U.S. officials say supply-chain threat is 'very real' regardless of Bloomberg story accuracy (cyberscoop.com)
  Senators sought answers from the DHS and FBI head about a reported widespread supply chain attack, as well as foreign election interference.
• Chinese spy extradited to U.S. on economic espionage charges (cyberscoop.com)
  A Chinese intelligence official has been extradited to the U.S. to face charges of economic espionage, the U.S. Department of Justice annou…
• NSA official: Bloomberg story created a frenzied, fruitless search for supporting evidence (cyberscoop.com)
  A news report claiming a compromise of U.S. companies’ supply chains by Chinese spies has triggered an extensive search for evidence that h…
• Magecart group compromises customer ratings tool, affecting 'hundreds' of online stores (cyberscoop.com)
  RiskIQ says certain factors limited the scope of this compromise, and there are lessons learned as to how to avoid it.
• ES&S security lead: We trust our process over DEF CON village findings (cyberscoop.com)
  Christopher Wlaschin spoke with CyberScoop for a lengthy Q&A on the fallout from the DEF CON voting village and its security work ahead of…
• Google shuts down Google+ for consumers due to bug found months ago (cyberscoop.com)
  Discovered in March, Google found that a flaw in its Google+ People API exposed data including name, email address, occupation, gender and…
• Randori enters automated red-teaming scene with $9.75 million seed investment (cyberscoop.com)
  “Nation-state” hacking is a phrase often used to talk about the the scariest cyberthreats out there, but cybersecurity startup Randori is u…
• We're running out of time with IoT security (cyberscoop.com)
  Op-Ed: Wannacry has shown us that we have a very short time to develop strategies and policies to address the potentially catastrophic dama…
• Report: The bigger the company, the messier the password practices (cyberscoop.com)
  A new report from password management company LogMeIn found that the bigger the enterprise, the bigger the problem when it comes to managin…
• DHS, Apple continue to push back on Bloomberg supply chain story (cyberscoop.com)
  U.S. and British security agencies have backed statements by Apple and Amazon Web Services disputing a report claiming that China compromis…
• Hackable IoT washing machine provides channel for breaching hospital IT (cyberscoop.com)
  A software bug in the Miele PG 8528 — a model used in hospitals and other healthcare facilities to disinfect medical equipment — would allo…
• Symantec: Look for cryptojacking to tie into IoT devices (cyberscoop.com)
  Symantec says internet-connected devices are becoming a target for hackers looking to use their processing power to mine cryptocurrency.
• What Congress faces when comes to cybersecurity-focused bills in 2018 (cyberscoop.com)
  CyberScoop polled a half dozen people who work on cybersecurity policy issues to come up with a verdict on each piece of possible legislati…
• A vulnerability in IoT software has opened a door into thousands of internet-connected devices (cyberscoop.com)
  Coding flaws evident in a popular open source software library known as gSOAP could allow a hacker to remotely control and infect internet-…
• Experts: Internet of Things security will change when consumers demand it (cyberscoop.com)
  Consumers need to use their buying power to send a message that they value security, experts said Saturday at a SXSW panel.
• Hackers could hijack Sonos speakers in order to Rickroll users (cyberscoop.com)
  Hackers can hijack several internet-connected speakers, including some devices sold by audio technology giants Bose and Sonos.
• Report: hospitals are flooded with vulnerable IoT devices (cyberscoop.com)
  The researchers found exposed medical images, protocols, databases, industrial controllers and healthcare systems software.