Duo's Security Blog

FEBRUARY 1, 2021

We are proud to announce the Duo has achieved ISO 27001:2013, 27017:2015, and 27018:2019 certification! What is ISO 27001:2013, 27017:2015 and 27018:2019? What’s the benefit of ISO 27001:2013, 27017:2015 and 27018:2019 certification to our customers? You can thank ISO for that!

CISO 105

CISO Information Security Surveillance Manufacturing 105

Hacker Combat

MARCH 16, 2021

What Program, Released In 2013, Is an Example of Ransomware? What Program, Released In 2013, Is an Example of Ransomware, Final Thought. The post What Program, Released In 2013, Is an Example of Ransomware? The answer is a crypto locker. Thus if a harmful program scrambles your documents, you can still access them.

Ransomware 101

Ransomware Malware Antivirus Phishing 101

Duo's Security Blog

FEBRUARY 1, 2021

We are proud to announce the Duo has achieved ISO 27001:2013, 27017:2015, and 27018:2019 certification! What is ISO 27001:2013, 27017:27017 and 27018:2019? What’s the benefit of ISO 27001:2013, 27017:27017 and 27018:2019 certification to our customers? You can thank ISO for that!

Information Security 75

Information Security Surveillance Manufacturing 75

Duo's Security Blog

FEBRUARY 1, 2021

We are proud to announce the Duo has achieved ISO 27001:2013, 27017:2015, and 27018:2019 certification! What is ISO 27001:2013, 27017:2015 and 27018:2019? What’s the benefit of ISO 27001:2013, 27017:2015 and 27018:2019 certification to our customers? You can thank ISO for that!

CISO 52

CISO Information Security Surveillance Manufacturing 52

Schneier on Security

JANUARY 17, 2023

I wrote about it for the Guardian in 2013, an essay that reads so dated in light of what we’ve learned since then.) Without the FBI deploying some form of surveillance technique, or Al-Azhari using another method to visit the site which exposed their IP address, this should not have been possible.

Surveillance 341

Surveillance Media Hacking 341

Schneier on Security

NOVEMBER 11, 2022

Here in 2022, we have a newly declassified 2016 Inspector General report—”Misuse of Sigint Systems”—about a 2013 NSA program that resulted in the unauthorized (that is, illegal) targeting of Americans. Given all we learned from Edward Snowden, this feels like a minor coda.

Surveillance 204

Surveillance 204

Security Affairs

OCTOBER 3, 2019

Below the timeline of the PKPLUG attacks over the years: The first campaign associated with the PKPLUG was observed in November 2013, when the group targeted Mongolian individuals with PlugX RAT. The post 6 cyber-espionage campaigns since 2013 attributed to PKPLUG China-linked group appeared first on Security Affairs.

Malware 85

Malware Advertising Cybersecurity Hacking 85

Schneier on Security

DECEMBER 21, 2022

“For example, in 2013 they tried to get all the staff at the ministry of defence to replace our iPhones with Russian-made Yoto smartphones. . “That doesn’t pose too much difficulty for the Ukrainian security services.” ” […].

Telecommunications 269

Telecommunications Mobile 269

Bleeping Computer

MAY 12, 2023

Toyota Motor Corporation disclosed a data breach on its cloud environment that exposed the car-location information of 2,150,000 customers for ten years, between November 6, 2013, and April 17, 2023. [.]

Data breaches 126

Data breaches 126

Schneier on Security

MARCH 3, 2022

It noticed the hack in 2013, and was able to map it with Equation Group tools published by the Shadow Brokers (aka some Russian group). Pangu Lab in China just published a report of a hacking operation by the Equation Group (aka the NSA).

Hacking 238

Hacking Cybersecurity 238

Krebs on Security

JUNE 22, 2022

Stanx said he was a longtime member of several major forums, including the Russian hacker forum Antichat (since 2005), and the Russian crime forum Exploit (since April 2013). “Something new was required and I decided to leave Omsk and try to live in the States,” Kloster wrote in 2013.

Cybercrime 268

Cybercrime Advertising Hacking System Administration 268

Schneier on Security

FEBRUARY 24, 2023

We show a similar white-box undetectable backdoor for random ReLU networks based on the hardness of Sparse PCA (Berthet, Rigollet; COLT 2013). We prove this strong guarantee under the hardness of the Continuous Learning With Errors problem (Bruna, Regev, Song, Tang; STOC 2021).

356

356

Schneier on Security

JUNE 29, 2022

Someone hacked the Ecuadorian embassy in Moscow and found a document related to Ecuador’s 2013 efforts to bring Edward Snowden there. If you remember, Snowden was traveling from Hong Kong to somewhere when the US revoked his passport, stranding him in Russia.

Hacking 183

Hacking 183

Schneier on Security

OCTOBER 1, 2022

The bulk of the websites that we discovered were active at various periods between 2004 and 2013. All of these flaws would have facilitated discovery by hostile parties. […]. We do not believe that the CIA has recently used this communications infrastructure.

Internet 313

Internet Internet 313

Schneier on Security

JUNE 6, 2023

In 2013 and 2014, I wrote extensively about new revelations regarding NSA surveillance based on the documents provided by Edward Snowden. I wrote the essay below in September 2013. They were leaked in 2013, but most of them were from 2012 or before.) But I had a more personal involvement as well.

Surveillance 242

Surveillance Computers and Electronics Encryption Government 242

Tech Republic Security

MAY 25, 2023

Since its initial identification in 2013, business email compromise (BEC) has been dominated by executive impersonation. But over the past few years, attackers have adjusted their strategies—opting to impersonate third party vendors and suppliers instead.

85

85

Krebs on Security

FEBRUARY 5, 2023

In 2013, Kurittu worked on an investigation involving Kivimäki’s use of the Zbot botnet, among other activities Kivimäki engaged in as a member of the hacker group Hack the Planet (HTP).” The DDoS-for-hire service allegedly operated by Kivimäki in 2012.

Cybercrime 226

Cybercrime DDOS Hacking Software 226

Schneier on Security

JUNE 23, 2022

But in 2013, Edward Snowden disclosed that the National Security Agency had subverted the integrity of a NIST cryptographic standard­the Dual_EC_DRBG­enabling easy decryption of supposedly secured communications. government, has emerged as the de facto international source for cryptographic standards.

Government 249

Government Technology 249

Security Affairs

AUGUST 21, 2018

According to the researchers, the complex Dark Tequila malware went undetected since at least 2013. The post Dark Tequila Banking malware targets Latin America since 2013 appeared first on Security Affairs. Dark Tequila is a multistage malware that spreads via spear-phishing messages and infected USB devices. Pierluigi Paganini.

Malware 46

Malware Banking Phishing Passwords 46

CyberSecurity Insiders

MAY 24, 2023

Although Edward Snowden raised concerns about it in 2013, the then-president downplayed the allegations, citing national security as the primary objective. It is important to note that while Western nations often attribute such incidents to countries like China and Russia, they remain relatively silent about their own surveillance campaigns.

Cyber Attacks 126

Cyber Attacks Surveillance Cybersecurity Wireless 126

Krebs on Security

JUNE 10, 2022

In 2019, AFRINIC fired a top employee after it emerged that in 2013 he quietly commandeered millions of IPs from defunct African entities or from those that were long ago acquired by other firms, and then conspired to sell an estimated $50 million worth of the IPs to marketers based outside Africa.

Internet 263

Internet Internet Government System Administration 263

Bleeping Computer

SEPTEMBER 30, 2022

Microsoft has confirmed that two recently reported zero-day vulnerabilities in Microsoft Exchange Server 2013, 2016, and 2019 are being exploited in the wild. [.].

138

138

CSO Magazine

MARCH 21, 2023

In 2013, 44% of all Microsoft vulnerabilities were classified as critical. While the total number of recorded Microsoft vulnerabilities was higher in 2022 than ever before, the number of critical vulnerabilities declined to its lowest point, according to the latest Microsoft Vulnerability Report by BeyondTrust, released Tuesday.

Risk 122

Risk 122

Security Boulevard

MARCH 20, 2023

PeoplActive is an ISO 27001:2013 certified […] The post Reasons to select Microsoft Dynamics 365 for your organization appeared first on PeoplActive. It is designed to help businesses of all sizes and industries manage their operations, finances, sales, and customer service more efficiently and effectively.

98

98

The Hacker News

JULY 31, 2022

Jacob Wayne John Keen, who currently resides at Frankston, Melbourne, is said to have created the remote access trojan (RAT) when he was 15, in addition to working as the administrator for the tool from 2013 until its

Spyware 137

Spyware 137

Digital Guardian

NOVEMBER 22, 2022

Learn why organizations will need to implement security practices to protect sensitive data under the Virginia Consumer Data Protection Act (VCDPA), set to go into effect in 2013.

98

98

Security Affairs

SEPTEMBER 17, 2022

CVE-2013-6282 : Linux Kernel – The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. CVE-2013-2596 Linux Kernel – Linux kernel fb_mmap function in drivers/video/fbmem.c Code Aurora is used in third-party products such as Qualcomm and Android.

Cybersecurity 98

Cybersecurity Hacking Risk Information Security 98

Bleeping Computer

JUNE 9, 2022

A previously unknown Chinese-speaking threat actor has been uncovered by threat analysts SentinelLabs who were able to link it to malicious activity going as far back as 2013. [.].

Hacking 141

Hacking 141

Krebs on Security

JUNE 7, 2022

Our first swatting, in March 2013, resulted in Fairfax County, Va. . “What starts out virtual can get real all too quickly — and when the web is worldwide, so are the consequences.” ” Our family has been victimized by multiple swatting attacks over the past decade.

Cybercrime 286

Cybercrime Internet Internet Web Fraud 286

Schneier on Security

MARCH 4, 2021

Here’s the timeline : The timeline basically seems to be, according to Check Point: 2013: NSA’s Equation Group developed a set of exploits including one called EpMe that elevates one’s privileges on a vulnerable Windows system to system-administrator level, granting full control.

Hacking 249

Hacking System Administration Government 249

Security Affairs

NOVEMBER 20, 2022

they impact Exchange Server 2013, 2016, and 2019, an authenticated attacker can trigger them to elevate privileges to run PowerShell in the context of the system and gain arbitrary or remote code execution on vulnerable servers. It's perhaps just Exchange 2013 that requires a tweak. Can confirm.

Hacking 98

Hacking Cybersecurity Authentication Information Security 98

The Hacker News

SEPTEMBER 30, 2022

Microsoft officially disclosed it investigating two zero-day security vulnerabilities impacting Exchange Server 2013, 2016, and 2019 following reports of in-the-wild exploitation.

108

108

Krebs on Security

MARCH 15, 2023

The Outlook vulnerability ( CVE-2023-23397 ) affects all versions of Microsoft Outlook from 2013 to the newest. Two of those flaws are already being actively attacked, including an especially severe weakness in Microsoft Outlook that can be exploited without any user interaction.

Cyber threats 232

Cyber threats Passwords Malware Authentication 232

Security Affairs

JUNE 20, 2022

The vulnerability, tracked as CVE-2022-22620 , was fixed for the first time in 2013, but in 2016 experts discovered a way to bypass the fix. CVE-2022-22620 was initially fixed in 2013, reintroduced in 2016, and then disclosed as exploited in-the-wild in 2022.” Its fix was just regressed in 2016 during refactoring.

Hacking 119

Hacking Cybersecurity Software Information Security 119

Schneier on Security

OCTOBER 11, 2019

This book covers essays from 2013 to 2017. I just published my third collection of essays: We Have Root. The first two are Schneier on Security and Carry On.). External vendor links, including for ebook versions, here.

210

210

The Hacker News

MAY 30, 2022

Microsoft Office versions Office 2013, Office 2016, Office 2019, and Microsoft on Monday published guidance for a newly discovered zero-day security flaw in its Office productivity suite that could be exploited to achieve code execution on affected systems. The weakness, now assigned the identifier CVE-2022-30190, is rated 7.8

121

121

Adam Levin

SEPTEMBER 4, 2020

Information about the widespread data collection was initially brought to the public’s attention in 2013 by Edward Snowden, a government whistleblower who fled to Russia after exposing evidence of the program. . “I

Surveillance 260

Surveillance Data collection Government Cybersecurity 260