cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• There's business in the basics as corporate America embraces opsec apps (cyberscoop.com)
  KnowBe4 adoption grew by 178 percent, while LastPass and Proofpoint each grew by at least 100 percent, a new Okta report found.
• Foreign VPN apps need a close look from DHS, senators say (cyberscoop.com)
  If the U.S. intelligence community worries about Huawei and Kaspersky, DHS should worry about federal government use of certain foreign VPN…
• Hack of billion-dollar Norwegian firm Visma is tied to Chinese espionage group APT10 (cyberscoop.com)
  The research underscores APT10's global reach and interest in the supply chain.
• New report looks at how the U.S. can better defend against a cascading cyberattack (cyberscoop.com)
  A new study identifies the missing links are – in terms of authorities and collaboration – in defending against such a large-scale cyberatt…
• Pay the ransom? Corporate lawyers say meeting some hackers' demands may be worth it (cyberscoop.com)
  “Law enforcement has to have a policy, and that has to be their policy,” said one consultant.
• DHS briefs industry on shift in Chinese hacking that 'increases the risk for all of us' (cyberscoop.com)
  In a webinar for the private sector, DHS detailed how APT10 and other groups have evolved. The U.S. officials urged companies to better sec…
• Inside the online fight among DerbyCon leaders, illmob, and harassed infosec women (cyberscoop.com)
  The controversy around a popular infosec conference being cancelled has called into question how the greater community allows women and min…
• Zcash, Chase's cryptocurrency partner, fixes bug that could have allowed 'unlimited' counterfeits (cyberscoop.com)
  Developers behind the cryptocurrency Zcash have patched a security flaw that could have allowed hackers to create an unlimited amount of co…
• How hackers used a PowerPoint file to spy on Tibet’s government-in-exile (cyberscoop.com)
  The Tibetan diaspora has been targeted in a series of malware campaigns since 2016.
• WhatsApp adds biometric feature to help protect messages (cyberscoop.com)
  Even end-to-end encryption can’t protect WhatsApp users’ messages if someone has physical control of their device — a problem this update s…
• Google wants Chrome users to avoid ‘boring’ security problems with new extension (cyberscoop.com)
  Google needs you to trust the internet to stay successful.
• Security experts: No doubt Clinton smartphone was hacked (cyberscoop.com)
  Hillary Clinton’s mishandling of classified information may have resulted in a hacker accessing sensitive data stored on her smartphone and…
• Clinton's cyber working group already recruiting top talent for a new administration (cyberscoop.com)
  A small, volunteer group of prominent cybersecurity professionals are working to ensure that if Democratic presidential nominee Hillary Cli…
• Clinton aides could face security hurdles, say lawyers (cyberscoop.com)
  Some of Hillary Clinton’s most important aides like former deputy chief of staff Huma Abedin and senior policy advisor Jake Sullivan could…
• Here’s how DHS prepared to keep hackers out of the Super Bowl (cyberscoop.com)
  The 2019 Super Bowl is likely the biggest cybersecurity operation for CISA since it got rebranded in November.
• Fake Clinton scandal video delivers malware to viewers (cyberscoop.com)
  When the supposed video download link is clicked, malware is installed onto the victim’s computer. The video falsely says Clinton exchanged…
• U.S. official: American companies avoided government help when WannaCry, NotPetya hit (cyberscoop.com)
  A top Homeland Security official says the U.S. government was unable to fully measure the scale and impact of two recent ransomware outbrea…
• FBI: Someone broke into an email account on Clinton's private server (cyberscoop.com)
  Newly released FBI documents, focused on an investigation into the use of a private email server used by former Secretary of State Hillary…
• National intelligence strategy seeks better insight into adversaries’ cyber-capabilities (cyberscoop.com)
  The stakes are high; America’s spies must keep pace with growing list of hacking capabilities at adversaries’ disposal.
• Senate to review fusion center plan to deter Russian cyberattacks (cyberscoop.com)
  Victoria Nuland, a former U.S. ambassador to NATO, told lawmakers that it would be pragmatic for the country to consider a new "fusion cent…
• Hacked Podesta emails reveal Clinton's encryption opinion (cyberscoop.com)
  Hillary Clinton appears to disfavor policy that would mandate tech companies to create backdoors for law enforcement, according to an alleg…
• 'Chafer' group advances espionage tactics by hacking Windows machines in Middle East (cyberscoop.com)
  The Chafer group deployed a malware variant known as Remexi to hit a bunch of organizations, including one located in the U.S.
• Clinton's encryption solution would require a ton of oversight (cyberscoop.com)
  If Hillary Clinton wins the White House, her supposed opinion on encryption could lead to unintended consequences and regulatory necessitie…
• Facebook removes nearly 800 pages for magnifying state media throughout the Middle East (cyberscoop.com)
  About 2 million accounts followed at least one of the pages, and nearly $30,0000 in advertising spending was tied to them, Facebook said.
• U.S. announces disruption of ‘Joanap’ botnet linked with North Korea (cyberscoop.com)
  The Justice Department on Wednesday announced a wide-ranging operation to map and disrupt the Joanap botnet, which is linked to North Korea.
• CenturyLink sounds the alarm about TheMoon botnet, a versatile tool for fraud (cyberscoop.com)
  New research is a reminder of how versatile the hordes of infected computers can be in catering to hackers’ needs.
• Discover replaces customer cards following breach at unidentified outside entity (cyberscoop.com)
  Discover stresses the breach was not its own, but it's issuing some new cards because of it.
• Facebook beefs up privacy, security staff amid ongoing scrutiny over data collection practices (cyberscoop.com)
  Two big hires were announced on the same day news broke that Facebook paid users between 13 and 35 years old up to $20 to install an app th…
• Fortanix raises $23 million in funding for cloud security and encryption (cyberscoop.com)
  The company offers two main platforms that are meant to protect the data clients use and the various keys they need to run their applicatio…
• Facebook revises impacted account number to 30 million, investigation ongoing (cyberscoop.com)
  The company also says the FBI has been brought in for an investigation.
• FireEye: New APT goes after individual targets by hitting telecom, travel companies (cyberscoop.com)
  Say hello to APT39.
• U.S. charges Huawei and affiliates with extensive list of crimes (cyberscoop.com)
  Monday’s announcement is the latest move in an extensive U.S. crackdown on alleged Chinese commercial espionage.
• North Korea could accelerate commercial espionage to meet Kim's economic deadline (cyberscoop.com)
  Kim Jong Un's New Year message was clear: it's time to develop the economy.
• Senators ask Trump administration how badly shutdown hurt federal cybersecurity (cyberscoop.com)
  Just how bad is the damage from the government shutdown? Senators want to know.
• Congress again wants the State Department to pay more attention to the internet (cyberscoop.com)
  The Cyber Diplomacy Act proposes the State Department position report directly to the secretary of State or deputy secretary of State, an e…
• Apple disables group chat on FaceTime after discovery of bad bug (cyberscoop.com)
  Apple has disabled the group chat feature in FaceTime after a bug was discovered that allows users to eavesdrop on others via audio and vid…
• Tech startups are making security moves sooner. They don't have much of a choice. (cyberscoop.com)
  Smaller firms are incorporating cybersecurity into their culture sooner than ever, in part because potential partners are fearful of hacker…
• Cyberthreats rise to the top at Senate hearing on worldwide dangers for U.S. (cyberscoop.com)
  The hearing gives a snapshot of the threats at the forefront of U.S. intelligence chiefs’ minds, and foreign hacking featured prominently.
• Shutdown erodes feds' ability to set cyber strategies, say lawmaker and ex-DHS officials (cyberscoop.com)
  The shutdown has stalled some of DHS’s more anticipatory work, like vulnerability assessments of critical systems and election-security ini…
• Rep. Langevin: We need a DHS briefing to understand extent of DNS hijacking threat (cyberscoop.com)
  “We need to understand the scope of this action and how many agencies were actually affected,” Rep. Jim Langevin, D-R.I., told CyberScoop.
• Two suspected Russian hacking groups share tools and techniques, Kaspersky says (cyberscoop.com)
  GreyEnergy and Zebrocy used the same command-and-control servers, simultaneously, according to the Moscow-based security vendor.
• 'Gold mine' of customer loan, tax and other records exposed on open server (cyberscoop.com)
  24 million records, one server, no password.
• Corporate CISOs turn to invite-only meetings to compare notes (cyberscoop.com)
  While it’s not new for CISOs to compare notes with their counterparts in other companies, the number of invite-only sessions is growing as…
• From the NSA to Silicon Valley, a new kind of encryption is going commercial (cyberscoop.com)
  Homomorphic encryption would better protect both personal users and businesses, but it needs to be fleshed out over the coming years.
• Former WPML employee hacks plugin website to spam customers (cyberscoop.com)
  The makers of the WPML plugin said they're taking legal action against the attacker.
• Facebook bug gave developers access to private photos of 6.8 million users (cyberscoop.com)
  The flaw was in Facebook's photo API, the company said, and accidentally gave developers access to private photos. The bug was discovered o…
• Senators worry that new D.C. Metro railcars could carry cyber risk (cyberscoop.com)
  The lawmakers exhorted the subway system's leadership to “take the necessary steps to mitigate growing cyber risks" to new railcars that co…
• DNC officials say Russians unsuccessfully tried to hack them after 2018 midterms (cyberscoop.com)
  Dozens of DNC officials received spearphishing emails from Cozy Bear after the midterms, according to a court filing.
• Sneaky motion-detection feature found on Android malware (cyberscoop.com)
  The logic seems to be that if a hacked phone was moving, the device probably wasn’t a research tool being used by a security company trying…
• Nearly 773 million email addresses leaked, spelling trouble for people who re-use passwords (cyberscoop.com)
  Some 140 million email addresses and 10 million passwords are new to Hunt’s Have I Been Pwned website, the free service that tracks whether…