Security Affairs

MAY 30, 2024

Researchers spotted a macOS version of the LightSpy surveillance framework that has been active in the wild since at least January 2024. ThreatFabric observed threat actors using two publicly available exploits (CVE-2018-4233, CVE-2018-4404) to deliver macOS implants. The flaw resides in WebKit and impacts macOS version 10.13.3

Spyware 85

Spyware Malware Surveillance Mobile 85

Joseph Steinberg

OCTOBER 21, 2022

From the United Kingdom Home Office’s misleadingly named No Place to Hide anti-encryption campaign, to India’s Intermediary Guidelines and Digital Media Ethics Code , to Australia’s Assistance and Access Act of 2018 and its 2021.

Encryption 130

Encryption Government Artificial Intelligence Surveillance 130

Security Affairs

MAY 2, 2023

Threat actors are attempting to exploit a five-year-old authentication bypass issue, tracked as CVE-2018-9995 (CVSS score of 9.8), in TBK DVR devices. The CVE-2018-9995 flaw is due to an error when handling a maliciously crafted HTTP cookie. At this time, the vendor has yet to release security patches to address the flaw.

Authentication 97

Authentication Retail Surveillance Education 97

Security Affairs

JULY 19, 2021

Pegasus Project investigation into the leak of 50,000 phone numbers of potential surveillance targets revealed the abuse of NSO Group’s spyware. Pegasus Project is the name of a large-scale investigation into the leak of 50,000 phone numbers of potential surveillance targets that revealed the abuse of NSO Group’s spyware.

Spyware 108

Spyware Government Surveillance Media 108

Security Affairs

OCTOBER 30, 2019

WhatsApp sued Israeli surveillance firm NSO Group, accusing it of using a flaw in its messaging service to conduct cyberespionage on journalists and activists. WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. The lawsuit filed by WhatsApp in U.S.

Surveillance 50

Surveillance Technology Spyware Mobile 50

Security Affairs

MARCH 3, 2023

According to rumors, the Polish special services are using surveillance software to spy on government opponents. According to the Gazeta Wyborcza daily, the spyware was used to spy on the phone of Jacek Karnowski, mayor of the city of Sopot, in 2018-2019.

Spyware 86

Spyware Surveillance Hacking Government 86

Security Affairs

NOVEMBER 8, 2021

Lajos Kosa, chair of the Parliament’s Defense and Law Enforcement Committee, confirmed that Hungary is one of the clients of the Israeli surveillance firm NSO Group and that it bought and used the controversial Pegasus spyware. According to Kosa, the use of surveillance software was authorized by a judge or the Minister of Justice.

Spyware 88

Spyware Surveillance Media Government 88

The Last Watchdog

JANUARY 6, 2022

Yet, according to the study by the Ponemon Institute, the number of insider leaks has increased by 47 percent in 2020 compared to 2018. But they have more disadvantages than benefits if we talk about ensuring information security. Yes, they are cheap to apply. They can be dynamic. Identifying leakage.

Marketing 279

Marketing Software Surveillance Information Security 279

Security Affairs

MARCH 4, 2024

How does the European Consumer Organisation view Meta’s data processing practices in relation to surveillance-based business models? This is the biggest fine since the adoption of the General Data Protection Regulation (GDPR) by the European Union (EU) on May 25, 2018. billion for transferring user data to the US.

Data collection 92

Data collection Surveillance Hacking Information Security 92

Security Affairs

FEBRUARY 11, 2021

Researchers at mobile security firm Lookout have provided details about two recently discovered Android spyware families, dubbed Hornbill and SunBird, used by an APT group named Confucius. Since 2018, the hackers started targeting mobile users with an Android surveillance malware ChatSpy. ” concludes the report.

Spyware 105

Spyware Surveillance Malware Mobile 105

Security Affairs

FEBRUARY 24, 2021

Vietnam-linked APT32 group targeted Vietnamese human rights defenders (HRDs) between February 2018 and November 2020. “This unlawful surveillance violates the right to privacy and stifles freedom of expression.” The threat actors used by spyware to take over the target systems, spy on the victims, and exfiltrate data.

Spyware 87

Spyware Surveillance Government Phishing 87

Security Affairs

APRIL 2, 2022

CVE-2016-5674 targets NUUO NVRmini2, NVRsolo, Crystal Devices, and NETGEAR ReadyNAS Surveillance products. ” concludes the report. ” Follow me on Twitter: @securityaffairs and Facebook.

DDOS 81

DDOS Firmware Surveillance IoT 81

Security Affairs

JANUARY 14, 2021

Security experts from ESET uncovered an ongoing surveillance campaign, dubbed Operation Spalax , against Colombian government institutions and private companies. Malware researchers from ESET uncovered an ongoing surveillance campaign, dubbed Operation Spalax , against Colombian entities exclusively.

Malware 102

Malware Surveillance Phishing Government 102

Security Affairs

MARCH 31, 2020

Telegram was blocked permanently in early 2018 following local anti-government protests and civil unrest. Since 2018, many users continue the access it through proxies and VPNs, others use third-party unnofficial fork versions. It’s used by dissidents and government opponents because its conversations can’t have eavesdropped.

Advertising 98

Advertising Accountability Surveillance Government 98

Security Affairs

NOVEMBER 1, 2021

Both Remcos and NanoCore are used for information gathering, data exfiltration, surveillance, and control of the victims’ computers. . The group has been active at least since August 2018, it conducted multiple campaigns per month through October 2020.

Malware 87

Malware Government Surveillance Phishing 87

Security Affairs

DECEMBER 16, 2020

The campaign has been active since at least 2013, but the Goontact malware samples were first observed by Lookout in November 2018. ” conclude the experts.

Spyware 106

Spyware Mobile Surveillance Malware 106

Security Affairs

JULY 15, 2020

In 2018, US President Trump gave to the Central Intelligence Agency (CIA) more powers to conduct covert offensive cyber operations against hostile threat actors, including Iranian and Russian APT groups and intelligence agencies. officials with direct knowledge of the matter.” ” states an exclusive report from Yahoo News.

Banking 97

Banking Hacking Advertising Media 97

Security Affairs

SEPTEMBER 2, 2019

Earlier in August, Poshmark , a social commerce marketplace where people in the United States can buy and sell new or used clothing, shoes, and accessories, disclosed a data breach that took place in May 2018. “In mid-2018, social commerce marketplace Poshmark suffered a data breach that exposed 36M user accounts.

Accountability 81

Accountability Data breaches Passwords Advertising 81

Security Affairs

FEBRUARY 1, 2021

. “Three different malware families were spotted being distributed from tailored malicious updates to selected victims, with no sign of leveraging any financial gain, but rather surveillance-related capabilities.”

Malware 115

Malware Surveillance Mobile Hacking 115

Security Affairs

OCTOBER 18, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

VPN 73

VPN Surveillance Advertising Ransomware 73

Security Affairs

DECEMBER 30, 2019

Many governments worldwide persecute their internal oppositions charging them with criminal activities and use strict online surveillance to track them. The surveillance software developed by NSO Group was used by government organizations worldwide to spy on human rights groups , activists, journalists, lawyers, and dissidents.

Cybercrime 59

Cybercrime Surveillance Spyware Government 59

Security Affairs

FEBRUARY 13, 2020

In November 2018, the Wall Street Journal reported that the US Government was urging its allies to exclude Huawei from critical infrastructure and 5G architectures. Huawei issued a statement on Wednesday denying any accusation, it “has never and will never covertly access telecom networks, nor do we have the capability to do so.”.

Manufacturing 124

Manufacturing Advertising Surveillance Architecture 124

Security Affairs

JUNE 22, 2020

In October 2019, security experts at Amnesty International’s Security Lab have uncovered targeted attacks against Moroccan human rights defenders Maati Monjib and Abdessadak El Bouchattaoui that employed NSO Group surveillance tools. reads the analysis published by Amnesty International in October.

Spyware 109

Spyware Surveillance Mobile Advertising 109

Security Affairs

JANUARY 2, 2023

Given the vast level of tracking and surveillance that technology companies can embed into their widely used products, it is only fair that consumers be informed of how important user data, including information about their every move, is gathered, tracked, and utilized by these companies. The IT giant will pay $9.5

Consumer Protection 84

Consumer Protection Surveillance Data collection Accountability 84

Security Affairs

FEBRUARY 25, 2020

In December 2019, The Guardian reported that the Conservative party started using the secure messaging service Signal for its internal communications with Tory MPs, as an alternative of the insecure WhatsApp app. 2015: Even if he revealed unlawful government surveillance, put him in jail!

Encryption 82

Encryption Advertising Surveillance Hacking 82

Security Affairs

JULY 19, 2020

Every week the best security articles from Security Affairs free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

DNS 74

DNS Advertising Surveillance Malware 74

Security Affairs

MAY 22, 2023

This is the biggest fine since the adoption of the General Data Protection Regulation (GDPR) by the European Union (EU) on May 25, 2018. The European Union fined Meta $1.3 billion for transferring user data to the US. On December 13, 2022, the European Commission launched the formal process to adopt an adequacy decision for the EU-U.S.

Surveillance 76

Surveillance Data privacy Media Hacking 76

The Security Ledger

JANUARY 8, 2019

. » Related Stories Spotlight: as Attacks Mount, how to secure the Industrial Internet Die Hard is a Movie About Building Automation Insecurity. Podcast 127: Donnie, Talk to China and Other Lessons from 2018. But is it getting any more secure as it grows? See also: Consumer Reports: Flaws Make Samsung, Roku TVs Vulnerable.

Computers and Electronics 40

Computers and Electronics IoT Surveillance Internet 40

Security Affairs

JUNE 10, 2021

. “Sources also described several moments of friction between the two Dutch agencies when it came to deciding on how to handle the intrusion and subsequent clean-up, with the AIVD wanting to keep the hackers under surveillance while police officials wanted them removed from their systems due to the possibility of compromising sensitive cases.”

Government 84

Government Surveillance Hacking Ransomware 84

Security Affairs

JANUARY 9, 2022

“In future, the army will forbid its relatives from exchanging information with one another via Whats app, signal or telegram and from disseminating official instructions via these channels.” Cloud Act , which applies to all electronic communication service or remote computing service providers that operate in the U.S. .

Computers and Electronics 99

Computers and Electronics Encryption Surveillance Cybercrime 99

Security Affairs

FEBRUARY 16, 2019

According to the “The National Digital Economy Program” bill submitted to Parliament in 2018, Russian Internet service providers (ISPs) should ensure operations even if nation-state actors carry out cyber attacks to isolate Russia from the Internet. ” reported ZDNet.

Internet 85

Internet Internet DNS Cyber Attacks 85

Security Affairs

MAY 9, 2022

DCRat first appeared in the threat landscape in 2018, but a year later it was redesigned and relaunched. The modular architecture of the malware allows to extend its functionalities for multiple malicious purposes, including surveillance, reconnaissance, information theft, DDoS attacks, and arbitrary code execution.

Cybercrime 83

Cybercrime Malware Surveillance DDOS 83

Security Affairs

FEBRUARY 12, 2020

Crypto was liquidated in 2018, but its products are still in use in more than a dozen countries. The involvement in the surveillance activity of the company was a p rofitable business that allowed Crypto AG to amass millions of dollars paid by the CIA and BND. ” reported the Associated Press.

Advertising 77

Advertising Government Media Surveillance 77

Security Affairs

JULY 11, 2019

According to the experts, the new versions have been active at least since 2018, one of the samples analyzed by Kaspersky was used last month in Myanmar, where local government is accused of violating human rights. ” reads the report published by Kaspersky. ” reads the report published by Kaspersky.

Spyware 96

Spyware Mobile Advertising Architecture 96

BH Consulting

SEPTEMBER 2, 2021

In a year of high-profile ransomware incidents and data breaches, security is near the top of the agenda as never before. One way to do this is to become certified to the ISO 27001 information security standard. Others do it to demonstrate a clear commitment to security for stakeholders, investors, or customers.

Risk 52

Risk Information Security Data breaches Technology 52

BH Consulting

DECEMBER 2, 2020

Key Takeaways included: • Overview of the surveillance landscape and risks. He is a highly experienced information security professional and is recognised as one of the foremost experts in cybersecurity. Anne Marie Moore – Data Protection Consultant. Tom Knierim – Data Protection Consultant. Brian Honan.

Marketing 52

Marketing Technology Financial Services Information Security 52

Security Affairs

APRIL 4, 2020

.” Media speculate that the attack described in the DART report is the one that hit the city of Allentown, Pennsylvania in February 2018. The incident also affected the surveillance camera network of the company along with the finance department.

Antivirus 111

Antivirus Malware Phishing Advertising 111