cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• Rocke cryptojacking malware gets past cloud security programs by uninstalling them (cyberscoop.com)
  A piece of cryptojacking malware observed by Palo Alto Networks researchers is equipped to uninstall cloud security services from Linux-bas…
• Ticketmaster UK trades blame with chat app provider over payment data breach (cyberscoop.com)
  Ticketmaster blames a chat app it used on its site made by Inbenta. But Inbenta claims Ticketmaster improperly deployed the app on its paym…
• New 'Magecart' group used ad plugin to steal payment data from hundreds of websites (cyberscoop.com)
  The attack bears similarity to Magecart activity, but researchers say a new Magecart group is behind it.
• Report suggests Ticketmaster breach was broader than initial disclosure (cyberscoop.com)
  A payment data breach disclosed by Ticketmaster UK last month was just one effort amid a much wider skimming campaign, according to a repor…
• Cybercriminals 'hide in plain sight' to shake down West African financial players (cyberscoop.com)
  Institutions in Cameroon, Congo, Ghana, Equatorial Guinea and Ivory Coast have been hit with cyberattacks that rely on known forms of malwa…
• Fortnite developer Epic Games login tokens were susceptible to theft, research shows (cyberscoop.com)
  Researchers say it was possible to hijack old Epic Games domains and use them break into other users' accounts, stealing Fortnite's in-game…
• Trisis investigator says Saudi plant outage could have been prevented (cyberscoop.com)
  A researcher who responded to the attack on Saudi petrochemical plant says the initial incident was not thoroughly investigated.
• Alphabet's Jigsaw offers political campaigns free DDoS protection (cyberscoop.com)
  U.S. political organizations are now being offered a free tool to defend against DDoS attacks, courtesy of Alphabet, ahead of the 2018 midt…
• How hackers could control cranes by abusing radio frequencies (cyberscoop.com)
  Vulnerabilities in radio frequency protocols could allow hackers to move cranes and other big machinery at construction sites and factories.
• Before joining Trump's White House, Michael Flynn advised cybersecurity firms (cyberscoop.com)
  Lt. Gen. Michael Flynn used his public sector connections to advise and guide multiple private sector cybersecurity firms into federal mark…
• NSA official: U.S. has yet to hit Russia back 'where it hurts' for cyber aggression (cyberscoop.com)
  Natalie Laing, the deputy director of operations at the NSA, said that the U.S. doesn't "yet have the political fortitude to say how we'll…
• Former head of Trump national security team says big cyberattack is 'inevitable' (cyberscoop.com)
  The man once responsible for leading the president-elect’s national security transition team warned Thursday that a “significant” cyber-eve…
• Trump backs paper ballot backups for voting systems (cyberscoop.com)
  President Donald Trump said Tuesday that he supports states moving toward voting technology that offers a paper backup ballot.
• U.S. Cyber Command chief calls for debate around hacking unit's authorities (cyberscoop.com)
  Lawmakers and Pentagon leadership are considering plans that could one day provide U.S. Cyber Command with additional authorities to operat…
• North Korea hasn't stopped cyberattacks amid peace talks (cyberscoop.com)
  As Kim Jong-un speaks publicly about nuclear disarmament, North Korea's hacker army continues to target different businesses across Europe,…
• SEC EDGAR hack the work of two Ukrainian nationals, according to DOJ (cyberscoop.com)
  The two men helped traders access nonpublic information on the commission’s corporate filing system in order to facilitate illegal financia…
• Talos: Android trojan resembling Play Store installs sophisticated spyware (cyberscoop.com)
  While some companies are choosing to avoid the Google Play Store, Talos says "GPlayed" highlights the risks of downloading apps from third-…
• Justice Department seizes 15 DDoS-for-hire websites ahead of Christmas (cyberscoop.com)
  The Department of Justice announced it had seized 15 internet domains that made it possible for web users to launch distributed denial-of-s…
• New gaming and hospitality cybersecurity alliance formed by Retail ISAC (cyberscoop.com)
  The Retail Cyber Intelligence Sharing Center (R-CISC) announced the formation of the Gaming and Hospitality Cybersecurity Alliance. This ne…
• Fake 'Fortnite' apps for Android spread adware, cryptojackers and spyware (cyberscoop.com)
  Keep the pwnage on the battlefield, not in your call logs and text messages.
• Feds get guilty plea in 'DerpTrolling' attacks on video game sites (cyberscoop.com)
  Austin Thompson could get up to a decade in prison for DDoS attacks against Sonly Online Entertainment and other sites.
• Lizard Squad's '@fbiarelosers' hacker gets smaller sentence for rolling on his friends (cyberscoop.com)
  Zachary Buchta was facing 10 years before helping the FBI arrest his fellow Lizard Squad members.Buchta will have to pay nearly $350,000 in…
• Report: Criminals loved to target PowerPoint in 2017 (cyberscoop.com)
  Recorded Future found that cybercriminals exploited PowerPoint the most in 2017 to steal money and information.
• Stressed security bosses try to forget hackers by fixing classic cars or getting beat up (cyberscoop.com)
  Cybersecurity professionals are saddled with stress. Here's how some decompress after playing defense against hackers on the daily.
• The reason a recent international cyber exercise was so unique (cyberscoop.com)
  A recent NATO cyber wargames allowed operators inside simulated civilian networks that illustrate the difficulties that dog real cyber oper…
• Huawei's reclusive founder emerges to deny espionage allegations, flatter Trump (cyberscoop.com)
  In his first interview with foreign media in nearly four years, Ren Zhengfei told reporters Huawei does not have regular contact with Beiji…
• Researchers find hardcoded passwords Premisys access control system (cyberscoop.com)
  Researchers found hardcoded credentials providing administrator access to the entire Premisys service via an endpoint that controls the sys…
• Hackers hiding malware, porn ads inside kids apps on Google Play Store (cyberscoop.com)
  Infected apps for kids were downloaded over 3 million times to push illegitimate ads, scareware and effectively steal money from victims.
• Can’t hack? You can buy the tools on the dark web instead (cyberscoop.com)
  Someone running a cybercriminal operation does not need much technical expertise or to build anything from scratch. A report shows that con…
• U.S. officials wary of fake voter fraud stories hitting social media (cyberscoop.com)
  While evidence of such a plot remains unclear, the threat of a malicious, precisely tailored, online misinformation campaign is being taken…
• Proposed bill would make DOD tell Congress when 'special cyber operations' are taking place (cyberscoop.com)
  A bipartisan group of lawmakers from the House Armed Services Committee wants to codify a process that is currently done only as a courtesy.
• Secretive industry groups share best cyberthreat intel, experts say (cyberscoop.com)
  Some of the most valuable threat intelligence is closely held and shared amongst a series of exclusive private sector groups, experts said…
• New vuln discovered in Schneider Electric software, patches already issued (cyberscoop.com)
  Tenable found a flaw that would allow attackers to execute code and move laterally within an organization’s network via Schneider Electric…
• APT heist of Singapore health data exploited Microsoft Outlook, inquiry finds (cyberscoop.com)
  Hackers will always take the path of least resistance.
• DHS 'Cyber Storm' exercise tests manufacturing and transportation sectors (cyberscoop.com)
  DHS Cyber Storm is a global drill hosted Tuesday by DHS served to “push participants out of their comfort zone” and test critical infrastru…
• Ryuk ransomware shows Russian criminal group is going big or going home (cyberscoop.com)
  A subset of a Russian hacking group, which U.S. cybersecurity company Crowdstrike calls Grim Spider, has raked in $3.7 million since August…
• Poland calls for NATO, EU action on Huawei technology (cyberscoop.com)
  Poland’s internal affairs minister says EU and NATO should work together to form a joint position on whether to allow Huawei's products ins…
• Poland arrests Huawei executive, former security official for alleged espionage (cyberscoop.com)
  The arrests came amid ongoing efforts by the U.S. and its allies to limit the use of technology manufactured by firms with ties to Beijing…
• Broad DNS hijacking campaign could originate in Middle East: FireEye (cyberscoop.com)
  The campaign is targeting organizations in the Middle East, North America and Europe, researchers say.
• All the election security measures in the House Democrats' massive new bill (cyberscoop.com)
  A giant bill House Democrats proposed on Friday includes a number of measures aimed at improving election security and voter confidence.
• Personal data on 202 million Chinese job-seekers left exposed on insecure database (cyberscoop.com)
  The database did not require visitors to enter a username or password to access the information.
• Government shutdown shows CyberCorps students a bleak look at their federal future (cyberscoop.com)
  The shutdown's effects were on full display for CyberCorps students this week, as multiple agencies had to skip out on an OPM-run job fair.
• Booz Allen Hamilton hires former FBI director to investigate high-profile thefts (cyberscoop.com)
  Former FBI Director Robert Mueller will oversee an internal review after the arrest of a former contractor.
• Mandatory insider-threat detection program may help Booz Allen and hurt startups (cyberscoop.com)
  Newly implemented federal rules that call for the creation of mandatory insider threat detection programs will make competing for lucrative…
• Hyatt launches public bug bounty program (cyberscoop.com)
  Global hospitality chain Hyatt Hotels announced Wednesday that it’s launching a public bug bounty program through HackerOne.
• NSA contractor pleads guilty to charge of hoarding troves of classified docs (cyberscoop.com)
  A former U.S. defense contractor who spent nearly two decades mishandling classified information at the NSA and other intelligence agencies…
• Former NSA contractor indicted for stealing massive trove of classified documents (cyberscoop.com)
  A federal grand jury returned an indictment Wednesday accusing former defense contractor Harold T. Martin III of stealing classified and to…
• Intelligence community seeks answers in aftermath of Harold Martin case (cyberscoop.com)
  The Harold Martin case has caused leaders on Capitol Hill and in the Office of the Director of National Intelligence to re-examine exactly…
• Americans resigned to cyberattacks on infrastructure, elections, survey finds (cyberscoop.com)
  A survey of 26 countries has found that Americans are among the most likely to expect a cyberattack on assets like public infrastructure an…
• Shadow Brokers investigation is focusing on former NSA insider (cyberscoop.com)
  The U.S. government's counterintelligence investigation into the so-called Shadow Brokers group is currently focused on identifying a disgr…