Malwarebytes

DECEMBER 1, 2021

A recently disclosed FBI training document shows how much access to the content of encrypted messages from secure messaging services US law enforcement can gain and what they can learn about your usage of the apps. All of them are messaging apps that promise end-to-end encryption for their users.

Encryption 145

Encryption Computers and Electronics Backups Accountability 145

CyberSecurity Insiders

SEPTEMBER 8, 2021

I was obsessed with encryption. I was fascinated by the fact that nothing in the world could reverse an operation of encryption without the needed key to decrypt the item. I would love to get more involved in advancing privacy and security through the use of strong encryption and other safeguards. Those aren’t my only plans.

Computers and Electronics 52

Computers and Electronics Architecture Education Cybersecurity 52

SecureList

NOVEMBER 29, 2021

The ScarCruft group (also known as APT37 or Temp.Reaper) is a nation-state sponsored APT actor we first reported in 2016. The victim was infected by PowerShell malware and we discovered evidence that the actor had already stolen data from the victim and had been surveilling this victim for several months.

Surveillance 131

Surveillance Malware Phishing Encryption 131

SecureList

JANUARY 20, 2022

In the last year, there have been several public accounts on the ongoing trend of UEFI threats. It obtains the ScrambleCross shellcode by applying a modified ChaCha20 algorithm on an encrypted blob, which may reside as an additional file on disk or be embedded in the loader itself.

Firmware 145

Firmware Malware Encryption Passwords 145

SecureList

OCTOBER 17, 2023

The most remarkable findings In early 2023, we discovered an ongoing attack targeting government entities in the APAC region by compromising a specific type of a secure USB drive, which provides hardware encryption. This strategic shift signals its intent to intensify its surveillance capabilities and expand its range of targets.

Government 118

Government Malware VPN Manufacturing 118

Schneier on Security

DECEMBER 28, 2020

Recent news articles have all been talking about the massive Russian cyberattack against the United States, but that’s wrong on two accounts. Code for that exploit was part of the Equation Group tools that the Shadow Brokers — again believed to be Russia — stole from the NSA and published in 2016.

Hacking 355

Hacking Government Internet Internet 355

ForAllSecure

MAY 26, 2022

So I'm an activist, security researcher or even whistleblower, we recently came across some stuff where there were leaks of personally identifiable information or some sort of previously unknown surveillance of people or employees. And, you know, I had the Twitter account ID set up in 2018. I think it was 2016. They're there.

Hacking 52

Hacking Technology InfoSec Media 52

eSecurity Planet

APRIL 26, 2022

Company Sector Year Status Verodin Cybersecurity analytics 2018 Acquired by FireEye Kenna Security Risk management 2018 Acquired by Cisco PhishMe Incident response 2016 Acquired: P.E. Named after the infamous string of nation-state cyber attacks during the late 2000s, NightDragon was established in 2016 by former McAfee CEO Dave DeWalt.

Cybersecurity 128

Cybersecurity Technology Marketing Healthcare 128