cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• Feds still dragging in DMARC configuration (cyberscoop.com)
  More than a third of U.S. government agencies have still failed to implement DMARC, according to an analysis of public records.
• Financial industry pushing for weakness to built into TLS 1.3 (cyberscoop.com)
  Critics are charging that the financial industry is pushing for a weakness in TLS 1.3, all for the sake of saving a little money.
• Equifax says 2.4 million more Americans impacted by 2017 mega-breach (cyberscoop.com)
  Congratulations if you've somehow avoided this mess.
• Nuance Communications says NotPetya cost it $98 million since June (cyberscoop.com)
  Nuance Communications — a U.S. software company that provides applications to financial and healthcare companies — is struggling in the wak…
• DHS pushes cybersecurity risk assessment program for critical infrastructure companies (cyberscoop.com)
  The program comes as DHS has moved to rid networks of products that could be used for nation-state led surveillance.
• New Android malware steals user data, records audio and incurs phone charges (cyberscoop.com)
  The malware has invasive capabilities that Wandera says can be used in blackmailing victims.
• Trustico revokes 23,000 SSL certificates due to compromise (cyberscoop.com)
  A bizarre security mess has resulted in over 23,000 Trustico SSL certificates revoked in one fell swoop, accusations of malpractice and leg…
• Enemies of U.S. continue cyberattacks without fear of reprisal, NSA director nominee says (cyberscoop.com)
  Lt. Gen. Paul Nakasone indicated that deterrence against foreign cyberattacks is lacking, but that he would develop options to present to p…
• NSA chief ripped by Congress for cyberwar process he doesn't control (cyberscoop.com)
  Neither President Donald Trump nor Secretary of Defense Jim Mattis has specifically directed Michael Rogers to “disrupt Russian cyberthreat…
• Report: APT28 breached German foreign and defense ministries (cyberscoop.com)
  The Russian group infamous for hacking the DNC successfully breached German government agencies, German media report.
• Here's what the newly signed NDAA means for cybersecurity (cyberscoop.com)
  President Trump signed the National Defense Authorization Act (NDAA) Tuesday, approving the $700 billion spending bill designed to fund the…
• Cybersecurity policy needs 'bureaucracy hackers' for better focus (cyberscoop.com)
  The people writing cybersecurity policies don’t actually understand the basics of software and computer code. It’s not their fault.
• Splunk acquires Phantom Cybersecurity for $350 million (cyberscoop.com)
  Big data analyzation platform company Splunk announced that it will acquire security automation company Phantom Cybersecurity in a deal wor…
• Winter Olympics hack shows how advanced groups can fake attribution (cyberscoop.com)
  The recent Winter Olympics hack has served as a reminder of an information security fundamental: figuring out who carried out an attack is…
• Thomas Hicks will continue election security focus as new EAC chairman (cyberscoop.com)
  Thomas Hicks plans to focus on replacing aging voting equipment, enhancing election security and enacting new Voluntary Voting System Guide…
• Shari Steele, Tor executive director, to step down at end of year (cyberscoop.com)
  Shari Steele resigned from her role leading the prominent organization dedicated to building online anonymity software, CyberScoop has lear…
• Russian Embassy spokesperson confronts FBI, DHS officials in public event (cyberscoop.com)
  The Russian official asked a panel featuring officials from the FBI and DHS why the U.S. hasn't agreed to start a dialogue on cyber issues.
• Criminals sell counterfeit certificates to make malware look legitimate (cyberscoop.com)
  The fraudulent files, which act like valid code signing certificates, allowed malware to go undetected by most anti-virus scans, Recorded F…
• Why Salon Media Group is turning to cryptomining (cyberscoop.com)
  CyberScoop spoke with Salon CEO Jordan Hoffner on cryptomining: "I’m not sure if it’s a smart move, not sure if it’s a dumb move, but it’s…
• Hackers will target Putin's reelection effort, Russian security chief warns (cyberscoop.com)
  "There has been considerable expansion in the range of tasks pursued by foreign computer intelligence services," Patrushev said.
• There's a new 'text bomb' that will crash iPhones with a single symbol (cyberscoop.com)
  An Apple bug in its latest software update is crashing applications that display a single letter from the south India language Telugu. The…
• Tesla falls victim to cryptomining scheme, minor breach (cyberscoop.com)
  Cloud security company RedLock found that hackers discovered exposed elements of Tesla’s cloud environment, allowing them to secretly mine…
• Two Russians sentenced to prison for role in hacks against U.S. companies (cyberscoop.com)
  Just three of the corporate victims lost more than $300 million, according to prosecutors.
• U.S. and U.K. blame Russia for infamous 'NotPetya' cyberattacks (cyberscoop.com)
  The U.S. and United Kingdom's governments are blaming the Russian military for a famous cyberattack that took place last June.
• Shopify pays $15,250 bug bounty for a Christmas Eve vulnerability (cyberscoop.com)
  "The bug was filed on Christmas Eve, and within 12 hours the Shopify team rolled out a fix to address the immediate issue."
• Atos, IT provider for Winter Olympics, hacked months before Opening Ceremony cyberattack (cyberscoop.com)
  Hackers appear to have compromised Atos, the main IT service provider for the Winter Olympic Games months before last week's highly publici…
• Association of banks and fintech companies releases API for safer data sharing (cyberscoop.com)
  The FS-ISAC is releasing the API in order “to foster universal adoption of a more secure and robust data sharing framework."
• White House official: Paul Nakasone nominated for NSA Director (cyberscoop.com)
  The Trump administration plans to nominate the head of Army Cyber Command, Lt. Gen. Paul Nakasone, to be the next NSA director and commande…
• U.S. Air Force pays out $103,883 to hackers in bug bounties (cyberscoop.com)
  Add up all the U.S. military's bug bounty programs and over 3,000 vulnerabilities have been found in federal government systems.
• Trump's decision to elevate Cyber Command will be a boon for defense contractors (cyberscoop.com)
  With President Donald Trump's move to elevate U.S. Cyber Command to a Combatant Command, the Fort Meade-based outfit is on track for additi…
• Trump orders that U.S. Cyber Command receive new authority to conduct cyberwarfare (cyberscoop.com)
  Trump's decision moves Cyber Command one step closer from being moved away from the National Security Agency.
• Trump adviser proposes broader cybersecurity oversight for private-sector critical infrastructure (cyberscoop.com)
  The U.S. government may have a more extensive role to play in defending computer networks belonging specifically to American critical infra…
• U.S. moves to develop grand cybersecurity partnership with Ukraine (cyberscoop.com)
  Known as the "Ukraine Cybersecurity Cooperation Act of 2017," the bipartisan legislation was first introduced by Rep. Brendan Boyle, D-Pa.,
• Here's what the military's 'flight simulator' for cyber warfare might look like (cyberscoop.com)
  The project is meant to make it easier for military leaders and soldiers to conceptualize how they can both deploy cyber capabilities and d…
• Cryptomining scheme ropes in dozens of government websites (cyberscoop.com)
  A third-party plugin co-opted sites, including ones belonging to the U.S. federal courts and D.C.'s public transit system, to mine Monero.
• How did North Korean hackers become the world's most unpredictable bank robbers? (cyberscoop.com)
  Conventional wisdom says North Korea is an arsenal-craving backwater under the rule of despots. The regime, however, is driving a furious g…
• Salon will use readers' CPUs to mine Monero (cyberscoop.com)
  Searching for new revenue in the cash-strapped and ad-blocked world of media, the blog Salon.com is turning to the new hotness: Cryptocurre…
• Senators question Pentagon over workforce's use of data-leaking fitness app Strava (cyberscoop.com)
  A bipartisan group of Senators have called on the Defense Department to answer for how a popular fitness app apparently used by some U.S. s…
• Equifax names Home Depot infosec lead Jamil Farshchi as new CISO (cyberscoop.com)
  Home Depot Chief Information Security Officer Jamil Farshchi has been hired by Equifax, the credit monitoring company announced Monday.
• French marketing firm Octoly publicly exposes sensitive data of over 12,000 clients (cyberscoop.com)
  Octoly accidentally publicly exposed an Amazon Web Services S3 cloud storage bucket containing sensitive information about the company's IT…