Schneier on Security

SEPTEMBER 24, 2019

Yahoo News reported that the Russians have successfully targeted an FBI communications system: American officials discovered that the Russians had dramatically improved their ability to decrypt certain types of secure communications and had successfully tracked devices used by elite FBI surveillance teams. counterintelligence vulnerabilities.

Hacking 223

Hacking Surveillance Encryption Internet 223

WIRED Threat Level

JUNE 15, 2022

In occupied Ukraine, people’s internet is being routed to Russia—and subjected to its powerful censorship and surveillance machine.

Internet 98

Internet Internet Surveillance Hacking 98

Naked Security

AUGUST 17, 2021

Internet of Things. Home automation. Cloud management. And a security bug that could let other people watch you online.

Surveillance 141

Surveillance Hacking Internet Internet 141

Schneier on Security

SEPTEMBER 28, 2020

Although electronic surveillance programs authorized by EO 12333 generally target foreign intelligence from foreign targets, its permissive targeting standards allow for the substantial collection of Americans’ communications containing little to no foreign intelligence value.

Surveillance 307

Surveillance Telecommunications Internet Internet 307

Security Affairs

JULY 15, 2021

Experts said that Israeli surveillance firm Candiru, tracked as Sourgum, exploited zero-days to deliver a new Windows spyware. Microsoft and Citizen Lab believe that the secretive Israel-based Israeli surveillance firm Candiru, tracked as Sourgum, used Windows zero-day exploits to deliver a new Windows spyware dubbed DevilsTongue.

Spyware 109

Spyware Surveillance Manufacturing Government 109

Security Affairs

JUNE 24, 2022

Researchers from Google’s Threat Analysis Group (TAG) revealed that the Italian surveillance firm RCS Labs was helped by some Internet service providers (ISPs) in Italy and Kazakhstan to infect Android and iOS users with their spyware. SecurityAffairs – hacking, RCS Labs). Pierluigi Paganini.

Surveillance 105

Surveillance Mobile Spyware Telecommunications 105

Schneier on Security

SEPTEMBER 13, 2018

Some of us -- myself included -- have proposed lawful government hacking as an alternative to backdoors. A new report from the Center of Internet and Society looks at the security risks of allowing government hacking. From the report's conclusion: Government hacking is often lauded as a solution to the "going dark" problem.

Government 158

Government Hacking Risk Surveillance 158

CyberSecurity Insiders

SEPTEMBER 5, 2022

For the first time in the history of cyber attacks, a China-based university serving Aviation industry has accused the United States National Security Agency (NSA) for hacking into its servers to steal intelligence related to aviation, aerospace and navigation study material.

Hacking 121

Hacking Surveillance Education Cyber Attacks 121

SC Magazine

MARCH 10, 2021

A hacking collective compromised roughly 150,000 internet-connected surveillance cameras from Verkada, Inc., Hacktivist Tillie Kottmann is reportedly among those asserting responsibility for the incident, telling Bloomberg that their act helped expose the security holes of modern-day surveillance platforms.

Surveillance 129

Surveillance IoT Accountability Passwords 129

Security Affairs

APRIL 1, 2023

Five of the issues added by CISA to its catalog are part of the exploits used by surveillance vendors to target mobile devices with their commercial spyware: CVE-2021-30900 – Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability. The exploits were used to install commercial spyware and malicious apps on targets’ devices.

Spyware 75

Spyware Surveillance Mobile Education 75

Security Boulevard

MARCH 15, 2021

That particular breach has garnered widespread press coverage as the group claims to have gained access to live video feeds from more than 150,000 surveillance cameras. The post Microsoft Exchange and Verkada Hacks: Isolate Your Apps and APIs from the Internet Cesspool appeared first on Security Boulevard.

Internet 59

Internet Internet Hacking Surveillance 59

Webroot

MARCH 9, 2021

Once the criminal redirects internet traffic to malicious websites or takes control of servers, the damage is inevitable. One of the most common methods of infiltration includes internet-based attacks, such as Denial of Service (DoS), Distributed Denial of Service (DDoS) and DNS poisoning. The post Who’s Hacking You?

Hacking 115

Hacking DNS Surveillance Cybercrime 115

Security Affairs

JULY 28, 2022

The Microsoft Threat Intelligence Center (MSTIC) and the Microsoft Security Response Center (MSRC) researchers linked a threat group known as Knotweed to an Austrian surveillance firm named DSIRF, known for using multiple Windows and Adobe zero-day exploits. SecurityAffairs – hacking, Subzero malware). ” concludes Microsoft.

Surveillance 85

Surveillance Malware Authentication DNS 85

Security Affairs

FEBRUARY 10, 2022

I transcribed a recent interview, here some questions and answers about nation-state hacking, spyware, and cyber warfare. What will cyber security look like now that those tools are all over the internet? Pegasus is probably the most popular surveillance software on the market, it has been developed by the Israeli NSO Group.

Spyware 85

Spyware Hacking Ransomware Surveillance 85

The Security Ledger

AUGUST 21, 2020

In this episode of the Security Ledger Podcast (#188), sponsored* by LastPass, we take a look at the fast-expanding world of crowdsourced surveillance by doing a deep dive on Flock Safety, a start up that sells inexpensive license plate scanners to homeowners and police departments. Flying in Surveillance’s Gray Zone.

Surveillance 52

Surveillance Passwords Technology Internet 52

Security Affairs

DECEMBER 23, 2022

An Iranian group hacked dozens of CCTV cameras in Israel in 2021 and maintained access for a long period of time. A picture shows a security camera of a big security organization that was hacked by Iranian hackers, in Jerusalem, November 24, 2022. The Moses Staff group claimed it had hacked security cameras. Pierluigi Paganini.

Hacking 83

Hacking Surveillance Internet Internet 83

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. Xiongmai hereinafter) that are open to hack. Security Affairs – Xiongmai, hacking ). The flaws could be exploited to spy on camera feeds of unaware users. Pierluigi Paganini.

Surveillance 80

Surveillance Hacking Firmware Manufacturing 80

Security Affairs

MARCH 12, 2021

Experts at the NetBlocks Internet Observatory observed this week a temporary disruption of internet service in Russia due to new restrictions. On Wednesday 10 March 2021, researchers from Network data from the NetBlocks Internet Observatory observed the disruption of internet service provided by the Russian operator Rostelecom.

Internet 100

Internet Internet Mobile Hacking 100

The Security Ledger

AUGUST 21, 2020

In this episode of the Security Ledger Podcast (#188), sponsored* by LastPass, we take a look at the fast-expanding world of crowdsourced surveillance by doing a deep dive on Flock Safety, a start up that sells inexpensive license plate scanners to homeowners and police departments. Flying in Surveillance’s Gray Zone.

Surveillance 52

Surveillance Passwords Technology Internet 52

Security Affairs

AUGUST 30, 2019

A Russian security researcher has found that hardware wiretapping equipment composing Russia’s SORM surveillance system had been leaking user data. SORM is a mass surveillance system that allows the Government of Moscow to track online activities of single individuals thanks to the support of the Russian ISPs. Pierluigi Paganini.

Surveillance 79

Surveillance Firmware Mobile Advertising 79

Malwarebytes

MARCH 12, 2021

Hackers were able to gain access to camera feeds from Verkada, a tech company that specializes in video security and physical access control, to demonstrate how prevalent surveillance is, reports say. Swiss hacker and member of the hacking collective “APT-69420 Arson Cats,” Tillie Kottmann, claimed credit for the Verkada hack.

Hacking 88

Hacking Surveillance Computers and Electronics Accountability 88

Security Affairs

FEBRUARY 6, 2024

The latest report published by Google Threat Analysis Group (TAG), titled “ Buying Spying, an in-depth report with our insights into Commercial Surveillance Vendors (CSVs )”, warns of the rise of commercial spyware vendors and the risks to free speech, the free press, and the open internet. ” concludes Google. .

Spyware 98

Spyware Surveillance Government Software 98

The Security Ledger

AUGUST 21, 2020

In this episode of the Security Ledger Podcast (#188), sponsored* by LastPass, we take a look at the fast-expanding world of crowdsourced surveillance by doing a deep dive on Flock Safety, a start up that sells inexpensive license plate scanners to homeowners and police departments. Flying in Surveillance’s Gray Zone.

Surveillance 40

Surveillance Passwords Technology Internet 40

Security Affairs

DECEMBER 14, 2022

The number of internet-facing cameras in the world is growing exponentially. Businesses and homeowners increasingly rely on internet protocol (IP) cameras for surveillance. New research by Cybernews shows an exponential rise in the uptake of internet-facing cameras. Surge in internet-facing cameras.

Surveillance 122

Surveillance Manufacturing Passwords Internet 122

Schneier on Security

SEPTEMBER 26, 2019

The reason these threats are so real is that it's not difficult to hide surveillance or control infrastructure in computer components, and if they're not turned on, they're very difficult to find. Even so, these examples illustrate an important point: there's no escaping the technology of inevitable surveillance. Our allies do it.

Surveillance 218

Surveillance Wireless Government Internet 218

Security Affairs

MAY 22, 2024

Parents often use the app to monitor their children’s online activities or by employers to keep track of employee productivity and internet usage. Daigle discovered the commercial surveillance software on the hotel check-in systems while investigating consumer-grade spyware (aka stalkerware ).

Spyware 112

Spyware Surveillance Software Internet 112

Security Affairs

MARCH 3, 2023

According to rumors, the Polish special services are using surveillance software to spy on government opponents. The news of the hack was reported by the Gazeta Wyborcza daily, and unfortunately, it isn’t the first time that the Pegasus spyware was used in the country.

Spyware 86

Spyware Surveillance Hacking Government 86

Schneier on Security

MARCH 5, 2020

To do so, they are using a variety of digital communications and surveillance systems. Like much of the medical infrastructure, these systems are highly vulnerable to hacking and interference. Numerous health surveillance systems are monitoring the spread of COVID-19 cases, including the CDC's influenza surveillance network.

Surveillance 338

Surveillance Hacking Government Risk 338

SecureWorld News

MARCH 10, 2021

Founded in 2016, Verkada is a security company that focuses on surveillance and facial recognition through the use of sophisticated software in security cameras. Now a hacking group says they accessed thousands of live feeds from Verkada's cameras around the world. The Verkada camera hack: what happened?

Hacking 66

Hacking Surveillance Passwords Internet 66

Security Affairs

AUGUST 2, 2022

At the end of July, Microsoft Threat Intelligence Center (MSTIC) and the Microsoft Security Response Center (MSRC) researchers linked a threat group known as Knotweed to an Austrian surveillance firm named DSIRF, known for using multiple Windows and Adobe zero-day exploits. SecurityAffairs – hacking, DSIRF). Pierluigi Paganini.

Spyware 82

Spyware Surveillance Banking Hacking 82

Security Affairs

JUNE 20, 2020

Malicious Chrome browser extensions were employed in a surveillance campaign on a large scale, millions of users potentially impacted. According to Awake Security, the extensions were downloaded 33 million times and they were part of a massive surveillance campaign that was aided by the internet domain registrar CommuniGal Communication Ltd.

Surveillance 111

Surveillance Internet Internet Advertising 111

Schneier on Security

JUNE 6, 2023

In 2013 and 2014, I wrote extensively about new revelations regarding NSA surveillance based on the documents provided by Edward Snowden. Reading about the NSA’s hacking abilities will do that to you. Could agents take control of my computer over the Internet if they wanted to? I wrote the essay below in September 2013.

Surveillance 306

Surveillance Computers and Electronics Encryption Government 306

Security Affairs

NOVEMBER 30, 2022

Google’s Threat Analysis Group (TAG) linked three exploitation frameworks to a Spanish surveillance spyware vendor named Variston. TAG’s research suggests that the above issues were utilized as zero-days in the wild by the surveillance vendor. SecurityAffairs – hacking, Variston). ” TAG concludes.

Spyware 97

Spyware Surveillance Risk Internet 97

Krebs on Security

MARCH 22, 2021

“And Norse’s much-vaunted interactive attack map was indeed some serious eye candy: It purported to track the source and destination of countless Internet attacks in near real-time, and showed what appeared to be multicolored fireballs continuously arcing across the globe.”

Surveillance 275

Surveillance Computers and Electronics Internet Internet 275

Schneier on Security

DECEMBER 28, 2020

Sometime before March, hackers working for the Russian SVR — previously known as the KGB — hacked into SolarWinds and slipped a backdoor into an Orion software update. (We Other examples of this sort of attack include fake apps in the Google Play store, and hacked replacement screens for your smartphone. Probably.).

Hacking 358

Hacking Government Internet Internet 358

Security Affairs

JULY 22, 2019

The Kazakhstan authorities issued an advisory to local Internet Service Providers (ISPs) asking them to allow their customers to access the Internet only after the installation on their devices of government-issued root certificates. SecurityAffairs – Kazakhstan, surveillance). ” states Tele2. Pierluigi Paganini.

Internet 77

Internet Internet Encryption Government 77

ForAllSecure

NOVEMBER 3, 2021

His talk was nostalgic, reflecting on the 40+ years of computer hacking. Moss also said that all hacking is not infosec and that all infosec is not hacking. “Hacking can provide a lot of joy and absolutely no income. But hacking, not so much. Where with infosec the goal is to produce income. It’s a job.

Hacking 52

Hacking InfoSec Internet Internet 52