Blog
-
CIA Accused of Long-Term Campaign of “Cyber Weapons” Use in China, Other Countries
National Computer Virus Emergency Response Centre (CVERC), in partnership with Chinese security firm 360, are accusing the CIA of deploying cyber weapons to promote “color revolutions” that aim for government regime change.
-
T-Mobile Data Breaches Continue With Another Involving SSNs, Account PINs Stolen in February/March
A string of data breaches for T-Mobile that now dates back several years seems to be continuing without end, as the company has experienced two already in 2023. Those impacted in the latest breach are dealing with the loss of some very sensitive information.
-
1.4 Million Bad Apps Blocked, 173,000 Developers Removed From Google Play Store in 2022
Google indicated that it continues to see no shortage of bad apps, as it recently reported knocking some 1.43 million off the Google Play Store in the past year (along with about 173,000 developers that violated the rules of the road).
-
China’s Cyber Capabilities Are Expanding to Capture or Disrupt Satellites
The cyber capabilities that China is reportedly developing for space are a step beyond the current deck of options. They involve directly intercepting and fabricating the signals that satellites use to communicate.
-
Supply Chain Attack on Trading Platform Was the First Step in 3CX’s Supply Chain Breach
Report suggests a never before seen case of one supply chain attack being directly leveraged into another, as the 3CX breach has been traced back to a compromised trading software.
-
First U.S. Government Security-by-Design” Guidelines Roll Out From Global Partnership
The security-by-design guidance shows that governments are increasingly expecting manufacturers and developers to have their products reasonably locked down when they ship, and to be configured for updates that allow new vulnerabilities to be addressed.
-
When It Comes to Operating Expenses, Cyber Crime Groups Spend Nearly All of It on Payroll
Cyber crime groups of all sizes are putting around 80% of their operating expenses toward paying their workforce. The situation reflects an increasing adoption of a professional corporate-modeled structure among cyber crime groups.
-
Bing Search Results Were Vulnerable to an Easy Hack
Attackers would have been able to change the top Bing search results to whatever they like for any particular keyword or phrase that users might search. This could have been used to unwittingly redirect searchers to attack sites.
-
Samsung’s Sensitive Data Becomes a Part of ChatGPT as Employees Use It for Work Shortcuts
While ChatGPT may be a productivity enhancer, organizations need to carefully consider the situations in which it is used. Samsung has learned this lesson the hard way as employees unwittingly fed sensitive data into its training model while doing code reviews and preparing internal presentations.
-
New Spyware Rising to Fill Pegasus’ Role in Dissident Tracking
Citizen Lab says that the UAE, Hungary and Mexico are “countries of concern” and notes that the QuaDream spyware has been sold to Saudi Arabia and Ghana among other nations. Spyware has at least one zero-click exploit in its arsenal.