cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• Hide it well or market it well: Two reports show how point-of-sale malware has users in mind (cyberscoop.com)
  A generation of cybercriminals have relied on point-of-sale (PoS) malware to access customer credit information from victims including e-co…
• North Korea reuses code in major hacks, researchers find (cyberscoop.com)
  New research found that everything from DDoS attacks to WannaCry was done with reused code.
• Nation-state hacking kit ‘Flame’ had a second life, researchers say (cyberscoop.com)
  The Flame malware platform has been repurposed, according to Juan Andres Guerrero-Saade and Silas Cutler, researchers with Alphabet’s Chron…
• Get those Verizon Fios routers patched, Tenable says (cyberscoop.com)
  The research highlights the extent to which routers can be a gateway for hackers into networked homes.
• Craigslist founder's organization gifts $1 million for election security (cyberscoop.com)
  Craigslist founder Craig Newmark’s philanthropic organization will provide more than $1 million to the Global Cyber Alliance with the aim o…
• Cyberattack at med-tech conglomerate Hoya slowed production at Thai factory by 60 percent (cyberscoop.com)
  Roughly 100 computers were infected with malicious software that stole user credentials, then tried to install a program that would co-opt…
• Kirstjen Nielsen, a cyber-minded DHS chief, resigns (cyberscoop.com)
  Kirstjen Nielsen resigned on Sunday as DHS secretary, ending the tenure of one of the most cybersecurity-focused secretaries the department…
• In issuing 5G recommendations, European Union spurns U.S. hardline on Huawei (cyberscoop.com)
  Compared to the U.S. hardline on Huawei, the E.U. is taking a middle-of-the-road approach to 5G security.
• Backdoor vulnerability in open source tool exposes thousands of apps to remote code execution (cyberscoop.com)
  The 2017 data breach at Equifax was possible because the company did not act to resolve a flaw in the open source Apache Struts framework.
• Facebook hosted over 70 cybercrime groups that advertised all types of illicit activity (cyberscoop.com)
  Cybercriminals used Facebook groups to buy and sell hacking tools, stolen info and rent out spam services, according to Cisco’s Talos secur…
• DHS official sounds alarm on authoritarian states ‘operationalizing their tech sectors’ (cyberscoop.com)
  The problem lies with foreign tech companies that are subject to government demands in opaque legal environments, he said.
• German drug giant Bayer breached by Chinese hacking group Wicked Panda: report (cyberscoop.com)
  The pharmaceutical giant said it found malicious software on its computer networks last year.
• SamSam outbreak led to FBI restructuring, top official says (cyberscoop.com)
  The notorious ransomware forced the FBI to rethink how the bureau tackles cyber investigations.
• Kaspersky Lab looks to combat 'stalkerware' with new Android feature (cyberscoop.com)
  A surge in commercial spyware is one of the more pernicious trends in cybersecurity that affects users worldwide.
• The 'permission' question is much different for iOS and Android apps, researchers say (cyberscoop.com)
  An Android app might be more likely to ask for access to technical functions. An iOS app might seek to use sensitive features, like the mic…
• Nevada data center used to distribute Dridex, GandCrab malware right under the FBI's nose (cyberscoop.com)
  Scammers used data centers located in the United States to launch nasty strains of malware against English-speaking web users, according to…
• Kaspersky Lab appeals to court of public opinion with 'unbiased' assessment of Russian law (cyberscoop.com)
  The legal battle between Kaspersky Lab and the U.S. government has quieted, but the court of public opinion is still open for arguments.
• Third-party Facebook apps left people's data publicly exposed, researchers say (cyberscoop.com)
  The Silicon Valley security firm identified exposures by Mexico-based media company Cultura Colectiva and the now-defunct "At the Pool" app.
• Magecart is the most infamous payment skimmer. But it's hardly the only one. (cyberscoop.com)
  The infamous Magecart is used by just 12 of the 38 JavaScript-sniffer groups analyzed by the security company Group-IB
• Woman illegally entered Mar-a-Lago with thumb drive full of malware (cyberscoop.com)
  Yujing Zhang has been charged with with making false statements toward federal law enforcement agents and unlawfully entering a restricted…
• Microsoft Edge, Internet Explorer zero-days could allow spying on your browsing activity (cyberscoop.com)
  The browser vulnerabilities were first made public a 20-year-old security researcher who says he first notified Microsoft about the issues…
• Inspector general finds deficiencies in how FBI tells companies they've been breached (cyberscoop.com)
  Many FBI agents tasked with responding to cyber crimes fail to properly index victims properly in a bureau reporting platform, a problem th…
• How DHS is following the DOD's plan for internal cybersecurity (cyberscoop.com)
  The Department of Homeland Security (DHS) is trying to replicate a plan used by the Department of Defense to protect and defend its network.
• Gustuff malware can steal from banking apps, then spread via contact lists (cyberscoop.com)
  The hacking tool now is available for a monthly subscription of $800 on black market forums.
• 'Small stickers' were enough to trick a Tesla's autopilot to drive into the wrong lane (cyberscoop.com)
  A vulnerability made it possible for outsiders to take remote control over a Tesla’s steering and push it into an opposite lane.
• Toyota data breach affects up to 3.1 million customers (cyberscoop.com)
  The Toyota data breach was the second high-profile cybersecurity incident at the global automotive giant in as many months.
• Harold Martin pleads guilty to vast classified data leak, faces up to 9 years in prison (cyberscoop.com)
  Harold Martin, who worked as an intelligence contractor for multiple firms for over two decades, allegedly stole some 50 terabytes of data…
• Facebook links Duterte campaign volunteer to 200 bogus accounts (cyberscoop.com)
  The specific identification of Nic Gabunada, former chief executive of Omnicom Media Group Philippines, marks a departure for Facebook in i…
• Chinese-speaking phone scammers stole $40 million, mostly from Chinese targets in the U.S., FBI says (cyberscoop.com)
  The FBI has received a rash of complaints from scammers who claimed to be calling from the Chinese embassy, with the average loss more than…
• Office Depot to pay $25 million to settle tech support scam charges (cyberscoop.com)
  Office Depot and Support.com will pay $25 million and $10 million, respectively, for their role in a years-long scheme that defrauded consu…
• Cyber specialists will be watching — and learning from — Ukraine’s election (cyberscoop.com)
  Regardless of what unfolds during Ukraine’s election, there will likely be data points that analysts at DHS and Cyber Command can learn fro…
• Harold Martin set to plead guilty for theft of top secret information (cyberscoop.com)
  Harold Martin is expected to plead guilty Thursday in federal court. He has been charged with 20 counts of unauthorized and willful retenti…
• Microsoft uses court order to shut down APT35 websites (cyberscoop.com)
  Court orders are becoming an important tool in tech companies’ fight against nation-state-backed hacking groups.
• Dark web marketplace Dream Market to close after U.S. police nab suspected vendors (cyberscoop.com)
  Dream Market, one of the most popular dark web marketplaces, says it will shut down next month, after the FBI arrested some of its sellers.
• Voting-machine vendors have some serious questions to answer, senators say (cyberscoop.com)
  A letter sent Wednesday by Sen. Amy Klobuchar of Minnesota and three other top Democrats asks the three companies that make voting technolo…
• Elfin espionage group is focused on Saudi, U.S. organizations, Symantec says (cyberscoop.com)
  The Elfin group, a significant component of Tehran's hacking arsenal, uses a trojan to wipe victim hard drives.
• Facebook removes accounts for masquerading as news outlets in the Middle East (cyberscoop.com)
  Facebook in recent months has announced similar takedowns of accounts targeting users in Moldova and for spreading disinformation in the Mi…
• Tesla Model 3's onboard browser attacked successfully at Pwn2Own (cyberscoop.com)
  Team "Flouroacetate" — aka Amat Cama and Richard Zhu — used the Tesla hack on Friday to cap off a dominant run in the competition.
• Firefox Lockbox app aims to reduce password management hassles for Android users (cyberscoop.com)
  The main selling point seems to be convenience: Firefox Lockbox is directly tied to whatever an Android user saves all day within their bro…
• Dark web intelligence competition escalates as Terbium raises $2 million from Omidyar Network (cyberscoop.com)
  The investment comes as competition among dark web vendors has intensified, with competitors like Recorded Future, Digital Shadows and Flas…
• Apple, Oracle, VMware products successfully hacked at Pwn2Own (cyberscoop.com)
  The white-hat hacking team known as "Flouroacetate," took home the majority of the prize money available on Thursday at Pwn2Own 2019.
• ASUS issues patch, downplays scope of APT hack of its supply chain (cyberscoop.com)
  ASUS's statement contrasted with the findings of researchers who called the hack seemingly “one of the biggest supply-chain incidents ever.”
• Tesla's Model 3 is a big target at the next Pwn2Own (cyberscoop.com)
  The hacker competition added an automotive category for its upcoming event in Vancouver, with the full blessing of the car company. One win…
• Schneider Electric's car charging stations get crucial patches (cyberscoop.com)
  Hardcoded credentials and two other flaws could give hackers remote access to EVlink charging stations. Schneider Electric has issued firmw…
• Security flaw in Medtronic heart defibrillators is serious, DHS says, but don't panic (cyberscoop.com)
  The issue involves Conexus, Medtronic’s radio-frequency protocol that’s used for communication between medical technology such as defibrill…
• FEMA exposed personal data on 2.3 million disaster survivors, violated privacy law, IG finds (cyberscoop.com)
  The negligence leaves the survivors of disasters at increased risk to identity fraud schemes.
• Second flaw found in Swiss election system could change 'valid votes into nonsense,' researchers say (cyberscoop.com)
  It's yet another reminder of what can go wrong when governments shift to electronic voting with no alternative plan.
• Facebook: hundreds of millions of passwords were stored in plaintext on internal networks (cyberscoop.com)
  Facebook plans to notify users their passwords were in an insecure format that could have allowed company employees to access and view logi…
• APT32 ramps up targeting of global car companies (cyberscoop.com)
  Vietnamese hacking group APT32 has been targeting multinational automotive companies in an apparent bid to support the country’s domestic a…
• Astronomical costs, geopolitical headaches: Telecom fraud is too big to ignore, report says (cyberscoop.com)
  The illicit activities cost companies and consumers about $33 billion per year, according to Europol and Trend Micro.