cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• U.S. warns countries not to 'manipulate the extradition process' for cybercriminals (cyberscoop.com)
  The U.S. processes extraditions “without regard to the nationality of the offender, but that cooperation must be reciprocated,” Rod Rosenst…
• NSO Group spyware used against two Mexican journalists following assassination (cyberscoop.com)
  Pegasus is sold by NSO Group, an Israeli digital arms dealer that provides governments with tools meant only to help combat terrorism and c…
• Mozilla Firefox, Microsoft Edge succumb in web browser competition at Pwn2Own (cyberscoop.com)
  The second day of Pwn2Own 2019 featured more successful attacks from the "Flouroacetate" team of Amat Cama and Richard Zhu.
• FBI will increasingly rely on foreign help to stop hackers, assistant AG says (cyberscoop.com)
  The emergence of cybercrime as a global phenomenon is causing the FBI and Justice Department to increasingly rely on international law enfo…
• NSO Group spyware used to target widow of Mexican journalist, researchers say (cyberscoop.com)
  A notorious piece of spyware created by NSO Group has been used to target the wife of a slain Mexican journalist, according to Citizen Lab
• Feds shutter xDedic, a black market used to commit $68 million in fraud (cyberscoop.com)
  No arrests were reported as part of the operation. U.S. authorities worked closely with law enforcement in Belgium, Ukraine and the Europea…
• What actually happens when a company examines third party risk (cyberscoop.com)
  People in charge of information security at large U.S. companies spend the majority of their time assessing third party risk. How are they…
• DHS officials plan Europe trip to brief allies on election security, gather intel for 2020 (cyberscoop.com)
  “If I can go over there and get ahead of the curve … and bring those defensive measures back to the blue team here, I think we’ll be better…
• Old devices are filled with personal data, Rapid7 research finds (cyberscoop.com)
  Despite warnings that people should erase personal data from old devices, a researcher found computers with SSNs, dates of birth, and credi…
• DHS prepares emergency order to prevent DNS hijacking (cyberscoop.com)
  DHS is preparing to issue a rare "emergency" directive ordering federal civilian agencies to secure login credentials for internet domain r…
• Mirai offshoot offers 'greater firepower' for DDoS attacks, researchers warn (cyberscoop.com)
  Operators of the new variant have gone after devices that are popular with businesses, such as wireless presentation systems, according to…
• Kaspersky alleges Apple violated Russian antitrust law by abusing App Store influence (cyberscoop.com)
  The Moscow-based security vendor said Apple forced developers to remove two features from Kaspersky’s Safe Kids iOS app.
• Email scammers stole more than $150K from defense contractors and a university, FBI says (cyberscoop.com)
  Scammers were able to obtain fraudulent lines of credit to buy expensive technical equipment in the organizations’ names, the FBI said last…
• Blistering report scolds Navy for longstanding cybersecurity challenges (cyberscoop.com)
  To longtime observers of the Navy’s cybersecurity practices, this week’s review will feel like déjà-vu.
• Spookstock: The secretive concert where spies mingle with rock 'n' roll royalty (cyberscoop.com)
  Spookstock is an annual invite-only concert organized by a nonprofit organization that raises money for the families of fallen soldiers and…
• Chinese e-commerce giant Gearbest leaks millions of records, researcher finds (cyberscoop.com)
  “Gearbest’s database isn’t just unsecured. It’s also providing potentially malicious agents with a constantly-updated supply of fresh data.”
• Erin Joe tapped to lead DNI's Cyber Threat Intelligence Integration Center (cyberscoop.com)
  Erin Joe becomes the second director of the Cyber Threat Intelligence Integration Center at a time when nation-state hacking threats have b…
• Cyber Command’s midterm election work included trips to Ukraine, Montenegro, and North Macedonia (cyberscoop.com)
  Cyber Command personnel visited Montenegro, North Macedonia, and Ukraine to collaborate on network defense ahead of the 2018 midterm electi…
• Microsoft patches two zero-days exploited by FruityArmor, SandCat hacking groups (cyberscoop.com)
  Both Microsoft zero-days are known as elevation of privilege vulnerabilities, and could allow outsiders to manipulate Windows machines
• Lawmakers want data on the number of times Senate computers have been hacked (cyberscoop.com)
  Right now, lawmakers appear to be in the dark on the issue.
• UN report links North Korean hackers to theft of $571 million from cryptocurrency exchanges (cyberscoop.com)
  The U.N. panel is increasingly taking note of North Korea's use of cyber operations to circumvent sanctions.
• Kremlin interference in EU vote is likely, says Estonian spy agency (cyberscoop.com)
  Russia' meddling will likely focus on France, Germany and Italy in an effort to secure as many parliamentary seats for pro-Kremlin candidat…
• Lawyers for Yevgeniy Nikulin appear ready to fight results of psychiatric evaluation (cyberscoop.com)
  The court case tied to accused Russian hacker Yevgeniy Nikulin took another turn when results of his psychiatric evaluation became a topic…
• Swiss voting system found to have flaw that would have allowed vote changes (cyberscoop.com)
  A team of security researchers revealed flaws in the Switzerland's electronic voting system that would allow legitimate votes to be switche…
• Nearly 6,000 Twitter accounts magnified recent far-right messaging on Brexit, F-Secure says (cyberscoop.com)
  Typical messages examined during the timeframe in question included posts criticizing credible media outlets, accusations that immigrants w…
• Bad Box configurations lead to leaks of sensitive corporate data (cyberscoop.com)
  Dozens of organizations left terabytes of data exposed online through links hosted on data-sharing platform Box, according to research publ…
• To prepare for 2020, DNC security chief tries to make hackers’ lives harder (cyberscoop.com)
  Former Yahoo CISO Bob Lord has the challenge of broadening adoption of good security practices at campaigns and state parties scattered acr…
• Facebook suit accuses two Ukrainians of distributing adware disguised as quizzes (cyberscoop.com)
  When Facebook users installed malicious software extensions that masqueraded as online quizzes, they were unwittingly injecting advertiseme…
• Can Google's security push overcome the public's eroded trust? (cyberscoop.com)
  Google, in the coming months, will embark on a campaign to raise awareness about a service the company says will better protect people on w…
• Think of satellites as big, vulnerable IoT devices, researcher says (cyberscoop.com)
  Bill Malik of Trend Micro is calling on manufacturers to think of satellites in similar terms as any other connected device. The risks, tho…
• Citrix says FBI investigating network breach by 'international cyber criminals' (cyberscoop.com)
  Citrix, a widely used log-in service in the corporate world, revealed Friday that the FBI is investigating a breach to its internal network…
• How state, local government can build a strategy for cyber resilience (cyberscoop.com)
  With an ever-increasing number of threats coming toward state and local government agencies, leaders must think more strategically about cy…
• Latest Pakistan bank-card fraud looks like an actual breach, researchers say (cyberscoop.com)
  New York-based threat intelligence company Gemini Advisory says it appears that a card-information dump in January points to a more aggress…
• No 'smoking gun' evidence coming on Huawei, NSA official says (cyberscoop.com)
  In interviews with CyberScoop, top NSA and DHS officials explain their security concerns with 5G communications.
• How China used Western social media for a late-2018 charm offensive (cyberscoop.com)
  Xinhua, People’s Daily and others sought to subtly manipulate public opinion in the U.S. by promoting flattering images of Chinese culture,…
• Facebook purges accounts for spreading hate speech, this time in the U.K. and Romania (cyberscoop.com)
  The social media giant says it shut down dozens of accounts, pages and groups intended to "engage in hate speech and spread divisive commen…
• A bot doesn't need to talk like a bot for Twitter to notice (cyberscoop.com)
  The approach is an attempt to solve a problem that keeps changing.
• Google researchers uncover two zero-days affecting Chrome, Windows (cyberscoop.com)
  Both vulnerabilities could allow hackers to escape the “sandboxes” that software programs use as safeguards against malicious activity.
• NSA puts ‘Ghidra,’ its reverse-engineering tool for malware, in the hands of the public (cyberscoop.com)
  “We absolutely want people to understand the defensive mission, that we’re making a contribution," the NSA's Rob Joyce told CyberScoop.
• First RunSafe Pwn Index finds mobile exploits earn the most money on the dark web (cyberscoop.com)
  In order to give enterprises a look at what attackers are paying for, CyberScoop has teamed up with RunSafe Security to bring you the RunSa…
• U.S. Chamber of Commerce calls for cyber (anti-)regulation czar (cyberscoop.com)
  The next president should appoint an official whose job it is to cut excessive red tape related to cybersecurity, the nation's leading busi…
• NIST issues draft update to Cybersecurity Framework (cyberscoop.com)
  NIST issued a draft update to its celebrated Cybersecurity Framework, adding for the first time a way of quantifying risk and security outc…
• What's in the NIST cybersecurity controls catalogue update? (cyberscoop.com)
  For federal IT managers, the NIST catalogue of cybersecurity controls called SP 800-53 is the English Hymnal and the Book of Common Prayer…
• New draft of Trump's cybersecurity executive order would burden tech sector (cyberscoop.com)
  The large companies that own and operate U.S. internet and telecom backbones will have to do more to tackle automated cyberattacks under th…
• Business lobby pushes back on NIST Framework measurement plans (cyberscoop.com)
  Business groups don't like the new NIST framework's section on measurement. Cybersecurity mavens think it needs a section on vulnerability…
• NIST urged to include multi-factor authentication in cyber framework (cyberscoop.com)
  Why is Teen Vogue advocating multi-factor authentication, like a key stick or a biometric on top of a password, and the NIST cybersecurity…
• HHS working on cybersecurity guidelines for health care industry (cyberscoop.com)
  The U.S. Department of Health and Human Services, taking a cue from Congress, has begun developing principles and best practices for cybers…
• With flexibility in mind, NIST unveils latest draft of cybersecurity framework (cyberscoop.com)
  Organizations already using version 1.0 of the NIST Cybersecurity Framework will be able to seamlessly adopt the new version 1.1.
• Bill aims at new role in federal cybersecurity for NIST and its framework (cyberscoop.com)
  The National Institutes of Standards and Technology would show federal agencies how to implement the Cybersecurity Framework that it develo…
• Why CISOs must get better at connecting to the rest of the company (cyberscoop.com)
  Too few companies have leaders who work together effectively, as evidenced by the number of data breaches originating at misconfigured clou…