cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• By hacking one of their own homes, researchers want to open a window on IoT security (cyberscoop.com)
  Trend Micro researchers look to make home-automation systems less susceptible to hacking and tampering.
• Why the NIST Cybersecurity Framework is so popular in Japan (cyberscoop.com)
  Japan is turning to two U.S. government technology frameworks to help manage its own information security manpower shortages.
• The struggle with simplifying the government's cybersecurity efforts (cyberscoop.com)
  Protecting the federal government from cyberattacks is not simple. That was the message during multiple panels at the 2019 RSA Public Secto…
• A GDPR ripple effect will help bring internet privacy back from the dead, Jon Callas predicts (cyberscoop.com)
  Jon Callas, a computer security expert who left Apple for the ACLU last year, said Monday it’s become too easy to become nihilistic about p…
• IBM interns find 19 vulnerabilities in corporate check-in systems (cyberscoop.com)
  Two university students who work for IBM’s red-teaming unit have found 19 previously undisclosed flaws in the automated systems that compan…
• All of a sudden, HackerOne wants to be a pen test company (cyberscoop.com)
  HackerOne says its expanding to offer crowdsourced pen-testing, a market CEO Mårten Mickos suggested now stands at roughly $1 billion.
• NSA’s Rob Joyce outlines how U.S. can disrupt and deter foreign hacking (cyberscoop.com)
  “We have to impose costs in a visible way to start deterrence,” the NSA's Rob Joyce told an industry association.
• A server likely used by Lazarus Group offers clues to a broader espionage campaign (cyberscoop.com)
  An analysis of a suspected Lazarus C2 server hows it was the centerpiece of a espionage campaign that is broader and longer-running than pr…
• Microsoft issues 'critical' warning for Internet Explorer zero-day (cyberscoop.com)
  Microsoft issued a patch Tuesday to close a zero-day exploit in all supported versions of Internet Explorer.
• 'Thunderclap' collection of hardware vulnerabilities affects Mac, Windows, Linux systems (cyberscoop.com)
  Many modern computers are vulnerable to a number of security flaws that could exploit a machine’s Thunderbolt connection to its network car…
• U.S. urged to be more transparent about zero-days (cyberscoop.com)
  The Department of Homeland Security, not the NSA, should be in charge of deciding whether and when the U.S. government discloses new softwa…
• Deadline passes for companies to comply with New York's cybersecurity regulation (cyberscoop.com)
  The New York State Department of Financial Services Cybersecurity Regulation goes into full effect Friday.
• Expert: U.S. spies don't have as many zero-days as you think (cyberscoop.com)
  The quantity of zero-day exploits stockpiled by the U.S. government is much less than what you may think, according to Jason Healey​, a Col…
• How the U.S. government could disrupt the zero-day market (cyberscoop.com)
  The market for zero-days — a business largely focused on the indiscriminate sale of undisclosed security flaws — exists in a quasi-legal gr…
• NSA: No zero-days were used in any high profile breaches over last 24 months (cyberscoop.com)
  Over the last 24 months, the National Security Agency has been involved in incident response and mitigation efforts for “all the high profi…
• 'Gray hat' cyber firm outbidding Apple for iOS zero-days (cyberscoop.com)
  A Texas-based cybersecurity firm announced this week it will offer up to $500,000 for newly discovered security holes in Apple's iPhone ope…
• WikiLeaks dump reignites debate over feds hoarding zero days (cyberscoop.com)
  The dump by Wikileaks of documents identifying alleged CIA hacking tools reopens a vigorous debate about whether the U.S. should stockpile…
• FBI: Zero-days aren't 'scalable' enough for law enforcement (cyberscoop.com)
  FBI Director James Comey explained to a group of lawmakers last week that it would be impractical for the bureau to repetitively rely on co…
• Zero-day study: Hoarding exploits less harmful than generally thought (cyberscoop.com)
  The newly discovered software vulnerabilities known as zero days, if kept secret by the people that find them, tend to stay that way for ma…
• Millions hit with banking malware using new Microsoft Word zero-day (cyberscoop.com)
  The campaign of spam email using the new vulnerability underlines the dangers of disclosing zero day vulnerabilities unilaterally, as McAfe…
• Symantec links CIA tools to mysterious group that hacked 40 organizations globally (cyberscoop.com)
  Malware linked to the CIA, according to documents published by WikiLeaks, was used to hack into government, financial, telecom, energy, aer…
• Researcher finds vulnerability in popular microchips used in Android and iPhones (cyberscoop.com)
  Security researchers have found a crucial vulnerability in a popular chipset used in smartphones that allows for an attackers to launch a r…
• Microsoft will patch zero day vuln revealed by McAfee, FireEye (cyberscoop.com)
  McAfee chose to disclose the vulnerability four days before the Microsoft patch was due to be published, but won't say why.
• 'Pegasus for Android': Newly discovered spyware allows attacker to record conversations (cyberscoop.com)
  Pretty sophisticated spyware was found on a few dozen Android devices.
• Software flaw that allowed Stuxnet virus to spread was the most exploited in 2016 (cyberscoop.com)
  Software updates aren’t the cybersecurity silver bullet that some computer experts make them out to be.
• Leaked NSA hacking tools are a hit on the dark web (cyberscoop.com)
  A shadowy cast of random hackers are now sharing, promoting and working to reverse engineer the tools in the latest Shadow Brokers dump.
• Shadow Brokers latest leak a gold mine for both criminals and researchers (cyberscoop.com)
  Security researchers are learning how the NSA operates while criminals are starting to take the tools for a spin on the open web.
• Basic phishing emails are so effective that most hackers don't use exploit kits anymore (cyberscoop.com)
  Hackers overwhelmingly prefer to target email accounts as their entry point into organizations, today, and that’s causing a massive drop in…
• Zero-day exploits are rarer and more expensive than ever, researchers say (cyberscoop.com)
  "It's pushing the bad guys to find other ways," said one researcher.
• U.S. launches 'Hack the Air Force' bug bounty program (cyberscoop.com)
  The contest continues a trend within the U.S. military that began last year with Hack the Pentagon and Hack the Army.
• Malware sniffer is latest cyber technology to get DHS push toward marketplace (cyberscoop.com)
  Officials say the success of Hyperion shows that technology developed by government scientists can make it to the marketplace — with the ri…
• That was fast: Thousands of computers now compromised with leaked NSA tools, researchers say (cyberscoop.com)
  The findings by security researchers are significant because they illustrate, among other things, the rapid pace at which cybercriminals ca…
• Should the government stockpile zero-day software vulnerabilities? (cyberscoop.com)
  Storm clouds are rising over federal policy on software flaw disclosure after the massive WannaCry infection spread using a cyberweapon dev…
• Microsoft uncovers hacking operation aimed at software supply chain (cyberscoop.com)
  The recent findings underscore the threat organizations face through vulnerable, third-party applications.
• ISS World: The traveling spyware roadshow for dictatorships and democracies (cyberscoop.com)
  The conference brings together spies, police, hackers and powerful bureaucrats to spend money on some of the latest in spying kits.
• Bill to reform NSA hacking policy has skeptics in White House (cyberscoop.com)
  The Trump administration has concerns about a proposed reform of the policy process the U.S. government uses when deciding how to handle ne…
• Israeli hacking company NSO Group is on sale for more than $1 billion (cyberscoop.com)
  The Israeli hacking firm best known for the Pegasus mobile malware is looking for a buyer.
• Why reforming the Vulnerability Equities Process would be a disaster (cyberscoop.com)
  The leak of NSA exploits is not the worst that could happen — and trying to reform the vulnerability equities process will not make things…
• Russia-linked hackers impersonate NATO in attempt to hack Romanian government (cyberscoop.com)
  An elite hacking group linked to the Russian government masqueraded as a NATO representative to send a barrage of phishing emails to diplom…
• As investigation against Assange is dropped, WikiLeaks releases new CIA malware (cyberscoop.com)
  Another Friday, another dump from WikiLeaks: "Athena" is malware created by a U.S. military contractor and used by the CIA.
• Study: Zero-days rediscovered much faster (cyberscoop.com)
  The Harvard study shows up to a third of zero days found in the wild might have been secretly known to U.S. agencies, meaning they could ha…
• Malware targets North Korea following nuclear ICBM tests (cyberscoop.com)
  Researchers have stitched together two malware campaigns targeting North Korea, raising suspicion over counteractions tied to the country's…
• Leaked Hacking Team tools were used by group stealing East Asian IP (cyberscoop.com)
  A sophisticated and "well-funded" hacking group with a penchant for stealing intellectual property and other trade secrets is wreaking havo…
• New Microsoft Word zero-day used to spread 'lawful intercept' malware, analysts say (cyberscoop.com)
  A well-funded spy group appears to have recently acquired a highly-sophisticated zero day vulnerability to deploy a remote access trojan, d…
• BlueBorne: The latest Bluetooth vulnerability that impacts billions of devices (cyberscoop.com)
  "These vulnerabilities are the most serious Bluetooth vulnerabilities identified to date," Armis researchers explained.
• Private firm puts $500K bounty on Signal, WhatsApp zero-day vulnerabilities (cyberscoop.com)
  Supply is down and demand is up, driving the price of certain zero-day vulnerabilities skyward.
• Senators want spies to disclose more about secret zero-day policy (cyberscoop.com)
  The Senate Intelligence Committee hopes to learn more about how American spies handle the disclosure of software vulnerabilities continuous…
• This one matters, too: Carnegie Mellon issues guide to disclosing software vulnerabilities (cyberscoop.com)
  These days a big chunk of the work in producing cybersecurity guidance like this is making sure it doesn't contradict other advice already…
• Black Hat attendees are very vocal about the VEP (cyberscoop.com)
  Las Vegas has been buzzing with questions about the government's process for disclosing newly discovered software vulnerabilities.
• Responsible vulnerability disclosure is becoming an international norm (cyberscoop.com)
  More and more democracies are adopting a policy of disclosing vulnerabilities as opposed sitting on them for their own intelligence gains.