Tag: Info Security News

DIU awards $45M contract for weapon systems cybersecurity

Read the original article: DIU awards $45M contract for weapon systems cybersecurity Posted by InfoSec News on May 13 https://www.fifthdomain.com/dod/2020/05/12/diu-awards-45m-contract-for-weapon-systems-cybersecurity/ By Andrew Eversden Fifth Domain May 12, 2020 The Defense Innovation Unit awarded a $45 million to a Silicon Valley-based…

Thunderspy: What it is, why it’s not scary, and what to do about it

Read the original article: Thunderspy: What it is, why it’s not scary, and what to do about it Posted by InfoSec News on May 13 https://arstechnica.com/information-technology/2020/05/thunderspy-what-is-is-why-its-not-scary-and-what-to-do-about-it/ By Dan Goodin Ars Technica May 12, 2020 There’s a new attack that uses…

Ransomware attack disables Texas Supreme Court’s website

Read the original article: Ransomware attack disables Texas Supreme Court’s website Posted by InfoSec News on May 13 https://www.infosecnews.org/ransomware-attack-disables-texas-supreme-courts-website/ By William Knowles @c4i Senior Editor InfoSec News May 13, 2020 On Friday, May 8th, the Office of Court Administration (OCA),…

Ransomware attack disables Texas Supreme Court’s website

Read the original article: Ransomware attack disables Texas Supreme Court’s website Posted by InfoSec News on May 13 https://www.infosecnews.org/ransomware-attack-disables-texas-supreme-courts-website/ By William Knowles @c4i Senior Editor InfoSec News May 13, 2020 On Friday, May 8th, the Office of Court Administration (OCA),…

DIU awards $45M contract for weapon systems cybersecurity

Read the original article: DIU awards $45M contract for weapon systems cybersecurity Posted by InfoSec News on May 13 https://www.fifthdomain.com/dod/2020/05/12/diu-awards-45m-contract-for-weapon-systems-cybersecurity/ By Andrew Eversden Fifth Domain May 12, 2020 The Defense Innovation Unit awarded a $45 million to a Silicon Valley-based…

Thunderspy: What it is, why it’s not scary, and what to do about it

Read the original article: Thunderspy: What it is, why it’s not scary, and what to do about it Posted by InfoSec News on May 13 https://arstechnica.com/information-technology/2020/05/thunderspy-what-is-is-why-its-not-scary-and-what-to-do-about-it/ By Dan Goodin Ars Technica May 12, 2020 There’s a new attack that uses…

Putin Is Well on His Way to Stealing the Next Election

Read the original article: Putin Is Well on His Way to Stealing the Next Election Posted by InfoSec News on May 12 https://www.theatlantic.com/magazine/archive/2020/06/putin-american-democracy/610570/ By Franklin Foer The Atlantic June 2020 Issue Jack cable sat down at the desk in his…

Law Firm Representing Lady Gaga, Madonna, Bruce Springsteen, Others Suffers Major Data Breach

Read the original article: Law Firm Representing Lady Gaga, Madonna, Bruce Springsteen, Others Suffers Major Data Breach Posted by InfoSec News on May 12 https://variety.com/2020/digital/news/entertainment-law-firm-hacked-data-breach-lady-gaga-madonna-bruce-springsteen-1234602737/ By Todd Spangler, Shirley Halperin Variety.com May 9, 2020 Grubman Shire Meiselas & Sacks, a…

Secrets, Surveillance and Snowden

Read the original article: Secrets, Surveillance and Snowden Posted by InfoSec News on May 12 https://www.washingtonpost.com/magazine/2020/05/11/2013-edward-snowden-leaked-top-secret-national-security-agency-documents-showing-how-us-was-spying-its-citizens-heres-what-happened-next/ By Barton Gellman The Washington Post May 11, 2020 The inbox logged a message as I slept. Many hours passed before I checked. Probably…

She Saved Saudi Arabia. Can She Save the World From Cyberwarfare?

Read the original article: She Saved Saudi Arabia. Can She Save the World From Cyberwarfare? Posted by InfoSec News on May 12 https://www.ozy.com/news-and-politics/she-saved-saudi-arabia-now-shes-protecting-the-world-from-cyber-warfare/318820/ By Nick Fouriezos OZY.com May 11, 2020 A cyberattack brought a Czech coronavirus testing laboratory to its…

Cybercriminals are ‘already taking advantage’ of the COVID-19 crisis

Read the original article: Cybercriminals are ‘already taking advantage’ of the COVID-19 crisis Posted by InfoSec News on May 07 https://www.healthcareitnews.com/news/cyber-criminals-are-already-taking-advantage-covid-19-crisis By Kat Jercich Healthcare IT News May 07, 2020 The COVID-19 pandemic has necessitated an increase in information collection…

Cybersecurity, Internet infrastructure companies hold up relatively well amid COVID-19 pandemic

Read the original article: Cybersecurity, Internet infrastructure companies hold up relatively well amid COVID-19 pandemic Posted by InfoSec News on Apr 29 https://www.zdnet.com/article/cybersecurity-internet-infrastructure-companies-hold-up-relatively-well-amid-covid-19-pandemic/ By Larry Dignan Between the Lines ZDNet April 28, 2020 Information security and technologies that speed up…

Rapid7 is acquiring DivvyCloud for $145M to beef up cloud security

Read the original article: Rapid7 is acquiring DivvyCloud for $145M to beef up cloud security Posted by InfoSec News on Apr 29 https://techcrunch.com/2020/04/28/rapid7-is-acquiring-divvycloud-for-145m-to-beef-up-cloud-security/ By Ron Miller TechCrunch April 28, 2020 Rapid7 announced today after the closing bell that it will…

National Security Agency releases guide to secure video conferencing

Read the original article: National Security Agency releases guide to secure video conferencing Posted by InfoSec News on Apr 29 https://www.infosecnews.org/national-security-agency-releases-guide-to-secure-video-conferencing/ By William Knowles @c4i Senior Editor InfoSec News April 29, 2020 Last Friday, the National Security Agency released a…

Rapid7 is acquiring DivvyCloud for $145M to beef up cloud security

Read the original article: Rapid7 is acquiring DivvyCloud for $145M to beef up cloud security Posted by InfoSec News on Apr 29 https://techcrunch.com/2020/04/28/rapid7-is-acquiring-divvycloud-for-145m-to-beef-up-cloud-security/ By Ron Miller TechCrunch April 28, 2020 Rapid7 announced today after the closing bell that it will…

National Security Agency releases guide to secure video conferencing

Read the original article: National Security Agency releases guide to secure video conferencing Posted by InfoSec News on Apr 29 https://www.infosecnews.org/national-security-agency-releases-guide-to-secure-video-conferencing/ By William Knowles @c4i Senior Editor InfoSec News April 29, 2020 Last Friday, the National Security Agency released a…

Ethical Data Privacy in a Time of COVID-19

Read the original article: Ethical Data Privacy in a Time of COVID-19 Posted by InfoSec News on Apr 27 https://www.cpomagazine.com/data-privacy/ethical-data-privacy-in-a-time-of-covid-19/ By Pam Hrubey cpomagazine.com April 27, 2020 As COVID-19 continues to spread, the data collected from those who are infected…

Hackers spoof SBA to try to compromise companies’ computers

Read the original article: Hackers spoof SBA to try to compromise companies’ computers Posted by InfoSec News on Apr 27 https://www.cyberscoop.com/small-business-administration-spoof-ibm-coronavirus/ By Sean Lyngaas CYBERSCOOP April 27, 2020 With the U.S. Small Business Administration continuing to play a high-profile role…

Europe’s Privacy Law Hasn’t Shown Its Teeth, Frustrating Advocates

Read the original article: Europe’s Privacy Law Hasn’t Shown Its Teeth, Frustrating Advocates Posted by InfoSec News on Apr 27 https://www.nytimes.com/2020/04/27/technology/GDPR-privacy-law-europe.html By Adam Satariano NYTimes.com April 27, 2020 LONDON — When Europe enacted the world’s toughest online privacy law nearly…

Pentagon Seeks Continuous Monitoring of Defense Contractors’ Cybersecurity

Read the original article: Pentagon Seeks Continuous Monitoring of Defense Contractors’ Cybersecurity Posted by InfoSec News on Apr 27 https://www.defenseone.com/technology/2020/04/pentagon-seeks-continuous-monitoring-defense-contractors-cybersecurity/164834/ By Mariam Baksh Nextgov April 23, 2020 A new monitoring system is just part of a larger plan that will…

Vietnamese cyber-espionage has pivoted to Beijing’s coronavirus response

Read the original article: Vietnamese cyber-espionage has pivoted to Beijing’s coronavirus response Posted by InfoSec News on Apr 23 https://www.cyberscoop.com/vietnam-coronavirus-china-apt32-fireeye/ By Shannon Vavra CYBERSCOOP April 22, 2020 Hackers working on behalf of the Vietnamese government have been targeting Chinese government…

New York payments startup exposed millions of credit card numbers

Read the original article: New York payments startup exposed millions of credit card numbers Posted by InfoSec News on Apr 23 https://techcrunch.com/2020/04/22/paay-unencrypted-credit-card-data/ By Zack Whittaker TechCrunch April 22, 2020 A massive database storing millions of credit card transactions has been…

Flaw in iPhone, iPads may have allowed hackers to steal data for years

Read the original article: Flaw in iPhone, iPads may have allowed hackers to steal data for years Posted by InfoSec News on Apr 23 https://www.reuters.com/article/us-usa-apple-cyber/flaw-in-iphone-ipads-may-have-allowed-hackers-to-steal-data-for-years-idUSKCN2242IK By Christopher Bing, Joseph Menn Reuters.com April 22, 2020 WASHINGTON/SAN FRANCISCO (Reuters) – Apple Inc…

Temporary hospitals are rife with cybersecurity vulnerabilities

Read the original article: Temporary hospitals are rife with cybersecurity vulnerabilities Posted by InfoSec News on Apr 23 https://www.healthcareitnews.com/news/temporary-hospitals-are-rife-cybersecurity-vulnerabilities By Nathan Eddy Healthcare IT News April 22, 2020 The COVID-19 outbreak has led to a series of rapidly established medical-treatment…

U.S. Supreme Court to consider limiting reach of computer fraud law

Read the original article: U.S. Supreme Court to consider limiting reach of computer fraud law Posted by InfoSec News on Apr 22 https://www.reuters.com/article/us-usa-court-computer/u-s-supreme-court-to-consider-limiting-reach-of-computer-fraud-law-idUSKBN2221XD By Lawrence Hurley Reuters.com April 20, 2020 WASHINGTON (Reuters) – The U.S. Supreme Court will consider whether…

Multiple Vulnerabilities in IBM Data Risk Manager

Read the original article: Multiple Vulnerabilities in IBM Data Risk Manager Posted by InfoSec News on Apr 22 https://github.com/pedrib/PoC/blob/master/advisories/IBM/ibm_drm/ibm_drm_rce.md By Pedro Ribeiro (pedrib () gmail com | @pedrib1337) from Agile Information Security Disclosure Date: 21/04/2020 | Last Updated: 22/04/2020 Introduction…

Zoom’s Security Woes Were No Secret to Business Partners Like Dropbox

Read the original article: Zoom’s Security Woes Were No Secret to Business Partners Like Dropbox Posted by InfoSec News on Apr 20 https://www.nytimes.com/2020/04/20/technology/zoom-security-dropbox-hackers.html By Natasha Singer and Nicole Perlroth nytimes.com April 20, 2020 One year ago, two Australian hackers found…

China-linked ‘Electric Panda’ hackers seek U.S. targets, intel agency warns

Read the original article: China-linked ‘Electric Panda’ hackers seek U.S. targets, intel agency warns Posted by InfoSec News on Apr 17 https://www.politico.com/news/2020/04/16/china-electric-panda-hackers-seek-us-targets-191220 By Natasha Bertrand Politico.com 04/16/2020 Nearly 40 U.S. contracting facilities with access to classified information have been targeted…

Security lapse exposed Clearview AI source code

Read the original article: Security lapse exposed Clearview AI source code Posted by InfoSec News on Apr 17 https://techcrunch.com/2020/04/16/clearview-source-code-lapse/ By Zack Whittaker TechCrunch April 16, 2020 Since it exploded onto the scene in January after a newspaper exposé, Clearview AI…

Czechs warn of imminent, large-scale cyberattacks on hospitals

Read the original article: Czechs warn of imminent, large-scale cyberattacks on hospitals Posted by InfoSec News on Apr 17 https://uk.reuters.com/article/uk-czech-cyber/czechs-warn-of-imminent-large-scale-cyberattacks-on-hospitals-idUKKBN21Z00N By Jason Hovet, Christopher Bing, Jack Stubbs Reuters April 16, 2020 PRAGUE/WASHINGTON/LONDON (Reuters) – The Czech Republic warned international allies…

AMA, AHA partner on COVID-19 cyber threats guidance for hospitals, physicians

Read the original article: AMA, AHA partner on COVID-19 cyber threats guidance for hospitals, physicians Posted by InfoSec News on Apr 17 https://www.healthcareitnews.com/news/ama-aha-partner-covid-19-cyber-threats-guidance-hospitals-physicians By Nathan Eddy Healthcare IT News April 16, 2020 The American Medical Association and the American Hospital…

Ethical hackers find hundreds of vulnerabilities during latest Air Force bug bounty

Read the original article: Ethical hackers find hundreds of vulnerabilities during latest Air Force bug bounty Posted by InfoSec News on Apr 15 https://www.fifthdomain.com/2020/04/15/ethical-hackers-find-hundreds-of-vulnerabilities-during-latest-air-force-bug-bounty/ By Andrew Eversden Fifth Domain April 15, 2020 Ethical hackers found more than 460 vulnerabilities in…

Penn Medicine CISO offers tips for COVID-19 cybersecurity response

Read the original article: Penn Medicine CISO offers tips for COVID-19 cybersecurity response Posted by InfoSec News on Apr 15 https://www.healthcareitnews.com/news/penn-medicine-ciso-offers-tips-covid-19-cybersecurity-response By Mike Miliard Healthcare IT News April 15, 2020 As hospitals and health systems nationwide grapple with the fast-moving…

Microsoft patches 4 Windows 0days under active exploit

Posted by InfoSec News on Apr 14 https://arstechnica.com/information-technology/2020/04/4-windows-0days-under-active-exploit-get-fixes-in-this-months-update-tuesday/ By Dan Goodin Ars Technica 4/14/2020 Microsoft has patched four actively exploited vulnerabilities that allow attackers to execute malicious code or elevate system privileges on devices that run Windows. Two of the…

Shipbuilder Austal was hacked with stolen creds sold on dark web

Posted by InfoSec News on Apr 10 https://www.itnews.com.au/news/shipbuilder-austal-was-hacked-with-stolen-creds-sold-on-dark-web-546165 By Ry Crozier iTnews.com.au April 8, 2020 Austal, the ASX-listed shipbuilder and defence contractor, was compromised in late 2018 by an attacker who used login credentials purchased on a dark web forum,…

Hackers are scanning for vulnerable VPNs in order to launch attacks against remote workers

Posted by InfoSec News on Apr 10 https://www.zdnet.com/article/hackers-are-scanning-for-vulnerable-vpns-in-order-to-launch-attacks-against-remote-workers/ By Danny Palmer ZDNet.com April 8, 2020 The number of cyberattacks attempting to exploit the coronavirus outbreak for their own gain continues to rise as both cyber-criminal groups and nation-state-backed hacking operations…

Travelex paid $2.3M in Bitcoin to get its systems back from hackers

Posted by InfoSec News on Apr 10 https://thenextweb.com/hardfork/2020/04/09/travelex-paid-2-3m-in-bitcoin-to-get-its-systems-back-from-hackers/ By David Canellis The Next Web 04/09/2020 Travelex paid hackers $2.3 million worth of Bitcoin to regain access to its computer systems after a devastating ransomware attack on New Year’s Eve, reports…

Winnetka schools get ‘Zoombombed’ with pornography, racist rants during online meetings with students; police investigating

Posted by InfoSec News on Apr 08 https://www.chicagotribune.com/coronavirus/ct-coronavirus-zoombombing-winnetka-schools-20200406-6uodnrw2nfajppquiolmk5wvpu-story.html By Karen Ann Cullotta Chicago Tribune April 07, 2020 Winnetka police are investigating recent reports of so-called Zoombombing incidents at two local schools, with hackers hijacking online student learning by posting pornographic…

Winnetka schools get ‘Zoombombed’ with pornography, racist rants during online meetings with students; police investigating

Posted by InfoSec News on Apr 08 https://www.chicagotribune.com/coronavirus/ct-coronavirus-zoombombing-winnetka-schools-20200406-6uodnrw2nfajppquiolmk5wvpu-story.html By Karen Ann Cullotta Chicago Tribune April 07, 2020 Winnetka police are investigating recent reports of so-called Zoombombing incidents at two local schools, with hackers hijacking online student learning by posting pornographic…

Data allegedly stolen in ransomware attack on cybersecurity insurance provider Chubb

Posted by InfoSec News on Mar 27 https://siliconangle.com/2020/03/26/data-allegedly-stolen-ransomware-attack-cybersecurity-insurance-provider-chubb/ BY DUNCAN RILEY SiliconAngle 03/26/2020 Cybersecurity insurance provider Chubb Group Holdings Inc. is allegedly the latest victim of a ransomware attack. Details of the attack, which came to light today, are somewhat…

InfoSec News Signal Boost – Request for Resumes

Posted by InfoSec News on Mar 27 [Moderators note: Since I didn't get any replies, I crowdsourced the following and will work to find more, but also post requests from the InfoSec community. – WK] -=- The popular Infosec R&D…

How to Prioritize Your Mental Health While Self-Isolating

Posted by InfoSec News on Mar 27 https://onemedical.com/blog/live-well/mental-health-self-isolation By Christine Celio One Medical Group Mar 26, 2020 As local governments and health authorities look to curb the spread of COVID-19, more and more people throughout the U.S. are being told…

Beazley: Ransomware Attacks Increasingly Paired With Data Breach

Posted by InfoSec News on Mar 25 https://www.claimsjournal.com/news/national/2020/03/24/296164.htm Claims Journal March 24, 2020 Ransomware attacks became both more frequent and more brutal in 2019, according to a new report by speciality insurer Beazley. Beazley said its Breach Response Services unit…

(Moderators Note – March 25th 2020)

Posted by InfoSec News on Mar 25 I'm sorry this is the first batch of InfoSec News for this year, and if you want off the list, I totally get it. the unsubscribe details are in the headers of each…

A Mysterious Database Exposed 200 Million Americans’ Personal Info

Posted by InfoSec News on Mar 25 https://www.tomshardware.com/news/a-mysterious-database-exposed-200-million-americans-personal-info By Nathaniel Mott Toms Hardware 03/23/2020 Here's a strange one: CyberNews reported Friday that a Google Cloud database exposed the personal information of roughly 200 million Americans. It's not clear who owned…

Windows code-execution zeroday is under active exploit, Microsoft warns

Posted by InfoSec News on Mar 25 https://arstechnica.com/information-technology/2020/03/attackers-exploit-windows-zeroday-that-can-execute-malicious-code/ By Dan Goodin Ars Technica 03/23/2020 Attackers are actively exploiting a Windows zero-day vulnerability that can execute malicious code on fully updated systems, Microsoft warned on Monday. The font-parsing remote code-execution vulnerability…