Schneier on Security

APRIL 7, 2025

In “ Secrets and Lies ” (2000), I wrote: It is poor civic hygiene to install technologies that could someday facilitate a police state. It’s something a bunch of us were saying at the time, in reference to the vast NSA’s surveillance capabilities.

Surveillance

Zero Day

JULY 11, 2025

It features a Jackery Solar Generator 2000 Plus power station and an expansion battery offering a massive 4085.6 Show more View now at Amazon Jackery Solar Generator 4000 Kit Save $2,500 Adrian Kingsley-Hughes/ZDNET Current price: $2,499 Original price: $4,999 Looking to power your home for a week? This is what you need!

Artificial Intelligence

Zero Day

JULY 8, 2025

Written by Webb Wright, Contributing Writer Contributing Writer July 8, 2025 at 4:43 a.m. PT Ignatiev/Getty Images Sci-fi authors and screenwriters have long envisioned AI companions helping humans as they explore the cosmos.

Artificial Intelligence

Schneier on Security

SEPTEMBER 22, 2020

No real surprises, but we finally have the story. The story he went on to tell is strikingly straightforward. De Guzman was poor, and internet access was expensive. He felt that getting online was almost akin to a human right (a view that was ahead of its time).

Passwords

Zero Day

AUGUST 1, 2025

Jackery Explorer 2000 Plus Solar Portable Power Station | for $1,1822 2. Jackery Explorer 2000 Plus Solar Portable Power Station for $1,1822 View now View at Amazon 3. AA Wireless Android Auto Adapter | for $65 1. AA Wireless Android Auto Adapter for $65 View now View at Amazon 2. Chipolo Card Point Bluetooth Tracker | for $24 3.

Wireless

Security Affairs

FEBRUARY 11, 2020

According to IBM, OT attacks increased by over 2000 percent in 2019, most of them involved the Echobot IoT malware. According to IBM X-Force, attacks targeting operational technology (OT) infrastructure increased by over 2000 p ercent in 2019 compared to 2018, and most of them involved the Echobot malware. Pierluigi Paganini.

Malware

CyberSecurity Insiders

JUNE 17, 2022

In what appears as an operation first of its kind, Interpol has arrested over 2000 criminals who launched social engineering attacks worldwide. The post Interpol arrests 2000 criminals launching social engineering attacks appeared first on Cybersecurity Insiders. More details about the scam will be updated shortly! .

Social Engineering

Schneier on Security

JANUARY 10, 2024

In 2000, I wrote : “If McDonald’s offered three free Big Macs for a DNA sample, there would be lines around the block.” ” Burger King in Brazil is almost there , offering discounts in exchange for a facial scan. ” The stunt runs until January 2nd.

Marketing

Security Affairs

JANUARY 10, 2022

The malware campaign is still active and threat actors have already stolen data and credentials of more than 2000 victims across 111 countries as of 2 Jan 2022. The post New ZLoader malware campaign hit more than 2000 victims across 111 countries appeared first on Security Affairs. Pierluigi Paganini.

Malware

Schneier on Security

APRIL 13, 2023

I wrote about this kind of thing in 2000, in Secrets and Lies (page 318): My favorite example is a band of California art thieves that would break into people’s houses by cutting a hole in their walls with a chainsaw. Thieves cut through the wall of a coffee shop to get to an Apple store, bypassing the alarms in the process.

Zero Day

JULY 8, 2025

Also:  The best cheap tablets of 2025: Expert tested and reviewed The Mega 2 starts with a 12-inch FHD+ 2K (1200 x 2000 pixel) display with a 16:10 aspect ratio. The latest Mega 2 tablet is no exception, offering a solid combination of features and performance at a price that's hard to beat. It boasts an impressive 84.9%

Computers and Electronics

Schneier on Security

MAY 12, 2021

I have 80 copies of my 2000 book Beyond Fear available at the very cheap price of $5 plus shipping. Note that there is a 20% chance that your book will have a “BT Counterpane” sticker on the front cover. Order your signed copy here.

Zero Day

AUGUST 12, 2025

In January 2000, AOL was the US's biggest Internet Service Provider (ISP) and was worth billions. Also: The best VPN services (and how to choose the right one for you) The company dreamed then that, after its merger with Time-Warner , it would be worth billions more.

Internet

Penetration Testing

MARCH 18, 2025

The issue, tracked as CVE-2025-2000 The post CVE-2025-2000 (CVSS 9.8): Qiskit SDK Vulnerability Allows Arbitrary Code Execution appeared first on Cybersecurity News. A security vulnerability has been discovered in the Qiskit Software Development Kit (SDK).

Software

Naked Security

JUNE 20, 2022

Friends don't let friends get scammed. Not everyone knows how typical scams unfold, so here are some real-world examples.

Scams

Tech Republic Security

AUGUST 18, 2023

About 2,000 Citrix NetScalers were compromised in automated massive attack campaigns. Find out more about the threat actors and how to protect from them.

Cybersecurity

Schneier on Security

OCTOBER 12, 2023

Of course, NIST/NSA then set about destroying its reputation in the 2000’s, and this explanation wasn’t nearly enough to quell conspiracy theories. But when Jerry Solinas went back to reconstruct the seeds, so NIST could demonstrate that the seeds really were benign, he found that he’d forgotten the string he used!

Passwords

Graham Cluley

JULY 22, 2025

In episode 60 of The AI Fix, we learn why Grok might be Elon Musk's bid for digital immortality, how Meta is building a Manhattan-sized data centre called Prometheus, how AI is helping create carbon-sucking concrete, and are bewildered that 2000 people "work" at the Candy Crush company.

Artificial Intelligence

Penetration Testing

SEPTEMBER 12, 2024

Researchers from the Google Chrome Vulnerability Rewards (CVR) team have identified a series of critical vulnerabilities within the Kakadu image library, a widely deployed software component used for processing JPEG... The post Critical Vulnerabilities in Kakadu JPEG 2000 Library Expose Systems to Remote Attacks appeared first on Cybersecurity (..)

Software

Tech Republic Security

APRIL 21, 2023

The Center for Internet Security, founded in 2000 to address growing cyber threats and establish a set of cybersecurity protocols and standards like CIS Critical Security Controls and. Google Cloud and The Center for Internet Security, Inc.,

Cybersecurity

CyberSecurity Insiders

MAY 30, 2023

The post UberEats to use 2000 AI powered robots for delivery by 2026 appeared first on Cybersecurity Insiders. The robot’s navigation will rely on Cartken’s artificial intelligence-based mapping technology, which can identify objects, vehicles, humans, and the geography of the location.

Artificial Intelligence

Security Affairs

SEPTEMBER 26, 2019

The post Study shows connections between 2000 malware samples used by Russian APT groups appeared first on Security Affairs. . ~ Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – Russian APT, hacking).

Malware

CSO Magazine

NOVEMBER 15, 2022

Forbes Global 2000 companies are failing to adopt key domain security measures, exposing them to significant security risks, according to CSC’s Domain Security Report 2022.

DNS

Security Affairs

AUGUST 16, 2023

Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, NetScaler) The post Approximately 2000 Citrix NetScaler servers were backdoored in a massive campaign appeared first on Security Affairs.

System Administration

The Hacker News

APRIL 30, 2021

Perhaps due to the nature of the position, the InfoSec leadership roles tend to be solitary ones.

InfoSec

Fox IT

AUGUST 15, 2023

Based on the internet wide scan, approximately 2000 unique IP addresses seem to have been backdoored with a webshell as of August 9th. We initially only scanned systems that were not patched on July 21st, as the exploitation was believed to be between July 20th and July 21st. The results exceeded our expectations.

Internet

Bleeping Computer

JUNE 15, 2022

An international law enforcement operation, codenamed 'First Light 2022,' has seized 50 million dollars and arrested thousands of people involved in social engineering scams worldwide. [.].

Social Engineering

Security Boulevard

NOVEMBER 29, 2021

The post Understanding the Risks of Pre-Windows 2000 Compatibility Settings in Windows 2022 appeared first on Semperis. The post Understanding the Risks of Pre-Windows 2000 Compatibility Settings in Windows 2022 appeared first on Security Boulevard.

Risk

The Hacker News

OCTOBER 13, 2023

The focus is on strengthening the Kerberos authentication protocol, which has been the default since 2000, and reducing reliance on NT LAN Manager (NTLM)," the tech giant said. New features for Windows 11 include

Authentication

Schneier on Security

APRIL 9, 2020

And unfortunately, in early versions of Windows that supported Active Directory -- Windows 2000 Server, for example -- the default or example Active Directory path was given as "corp," and many companies apparently adopted this setting without modifying it to include a domain they controlled.

DNS

The State of Security

JUNE 16, 2022

Law enforcement agencies around the world appear to have scored a major victory in the fight against fraudsters, in an operation which has seized tens of millions of dollars and seen more than 2000 people arrested. Read more in my article on the Tripwire State of Security blog.

Social Engineering

Krebs on Security

MAY 6, 2020

Overall, Fresenius employs nearly 300,000 people across more than 100 countries, and is ranked 258th on the Forbes Global 2000. The company provides products and services for dialysis, hospitals, and inpatient and outpatient care, with nearly 40 percent of the market share for dialysis in the United States.

Ransomware

Adam Shostack

JUNE 22, 2020

When I comment that “how attackers get access” is underserved, what I mean is that its insufficiently well addressed in 2000 reports to have emerged or been noticed by the NLP and manual analyses. I am grateful for their work, and how it shines a light on where we are.

Accountability

The Hacker News

OCTOBER 25, 2022

A high-severity vulnerability has been disclosed in the SQLite database library, which was introduced as part of a code change dating all the way back to October 2000 and could enable attackers to crash or control programs. Tracked as CVE-2022-35737 (CVSS score: 7.5), the 22-year-old issue affects SQLite versions 1.0.12 through 3.39.1,

The Hacker News

OCTOBER 2, 2023

LUCR-3 targets Fortune 2000 companies across various sectors, including but not limited to Software, Retail, Hospitality,

Retail

Malwarebytes

MAY 20, 2024

The requirement is an adoption of amendments to Regulation S-P, which was enacted in 2000 to safeguard the financial information of consumers, requiring financial institutions to tell customers about how they use their personal information. But things have changed drastically since 2000.

Identity Theft

Security Affairs

AUGUST 31, 2023

The National Safety Council has leaked nearly 10,000 emails and passwords of their members, exposing 2000 companies, including governmental organizations and big corporations. The National Safety Council leaked thousands of emails and passwords of their members, including companies such as NASA and Tesla.

Backups