Schneier on Security

NOVEMBER 13, 2018

Due to ever-evolving technological advances, manufacturers are connecting consumer goods­ -- from toys to lightbulbs to major appliances­ -- to the internet at breakneck speeds. This is the Internet of Things, and it's a security nightmare. But like nearly all innovation, there are risks involved.

IoT 260

IoT Manufacturing Internet Internet 260

Hot for Security

APRIL 5, 2021

Bitdefender this week has published its annual Consumer Threat Landscape Report for 2020 underscoring some of the most prevalent cyber threats targeting regular users today. A key stat: cybercrime in 2020 was marked by a visible and aggressive targeting of the human layer. Aligned efforts to capitalize on COVID-19.

Cybercrime 116

Cybercrime Ransomware Cyber threats Malware 116

SecureList

NOVEMBER 29, 2021

The victim was infected by PowerShell malware and we discovered evidence that the actor had already stolen data from the victim and had been surveilling this victim for several months. Additionally, we discovered older variants of the malware, delivered via HWP documents, dating back to mid-2020. Contact: intelreports@kaspersky.com.

Surveillance 144

Surveillance Malware Phishing Encryption 144

Security Affairs

JULY 28, 2022

The Microsoft Threat Intelligence Center (MSTIC) and the Microsoft Security Response Center (MSRC) researchers linked a threat group known as Knotweed to an Austrian surveillance firm named DSIRF, known for using multiple Windows and Adobe zero-day exploits. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Surveillance 100

Surveillance Malware Authentication Accountability 100

Malwarebytes

FEBRUARY 22, 2022

The commercial reel advertises just one of the many video analytics tools available for download on an app store monitored by the Internet of Things startup Azena, itself a project from the German kitchen appliance maker Bosch. In 2020, for instance, Google implemented stricter controls against stalkerware-type applications.

Surveillance 100

Surveillance Artificial Intelligence Technology Internet 100

SecureList

JUNE 16, 2021

Two suspicious documents that were uploaded to VirusTotal in July 2020 and March 2021, and which seem to be operated by the same attackers, caught our attention. In this report we aim to provide more details on these findings and our own analysis on the mechanics of the MarkiRAT malware. Background.

Surveillance 145

Surveillance Malware Password Management Passwords 145

Thales Cloud Protection & Licensing

JANUARY 14, 2020

Along with innovation and technology proliferation, new challenges that will shape business during 2020. The adoption of emerging technologies like 5G will fuel the proliferation of Internet of Things (IoT) that’s often built with only a few security controls and therefore creating a larger attack surface that enterprises have to deal with.,

Data privacy 89

Data privacy IoT Data breaches Surveillance 89

The Last Watchdog

NOVEMBER 9, 2020

The Internet of Things (IoT) has come a long, long way since precocious students at Carnegie Melon University installed micro-switches inside of a Coca-Cola vending machine so they could remotely check on the temperature and availability of their favorite beverages. 2020 has been a year of tumultuous, unimaginable developments.

IoT 279

IoT Healthcare Internet Internet 279

The Last Watchdog

FEBRUARY 6, 2019

This week civil liberties groups in Europe won the right to challenge the UK’s bulk surveillance activities in the The Grand Chamber of the European Court of Human Rights. Related: Snowden on unrestrained surveillance. Ubiquitous surveillance. It’s a healthy thing that a captain of industry can see this. Advanced use cases.

Surveillance 157

Surveillance Technology Retail Artificial Intelligence 157

Security Affairs

JULY 14, 2021

The four security flaws were discovered earlier this year and affect Google Chrome, Internet Explorer, and WebKit browser engine. “We assess three of these exploits were developed by the same commercial surveillance company that sold these capabilities to two different government-backed actors. .

Surveillance 145

Surveillance Government Internet Internet 145

Security Affairs

JUNE 10, 2020

” Investigators speculate wiretapping devices were used to spy on internet and telephony communications. . ” Investigators speculate wiretapping devices were used to spy on internet and telephony communications. the Head of the NASES Surveillance Center Ján K., ” reads a post published by the Dennikn website.

Government 139

Government Surveillance Advertising Internet 139

Security Affairs

DECEMBER 30, 2019

The Assembly would set up a committee of international experts in 2020 that will be tasked with elaborating “a comprehensive international convention on countering the use of information and communications technologies for criminal purposes.”

Cybercrime 94

Cybercrime Surveillance Spyware Government 94

Malwarebytes

MARCH 12, 2021

Hackers were able to gain access to camera feeds from Verkada, a tech company that specializes in video security and physical access control, to demonstrate how prevalent surveillance is, reports say. ” Kottmann was also credited for breaching Intel in August 2020 and Nissan Motors in January 2021. ” The fallout.

Hacking 113

Hacking Surveillance Computers and Electronics Accountability 113

Security Affairs

MARCH 23, 2020

Experts observed multiple botnets exploiting zero-day vulnerabilities in DVRs for surveillance systems manufactured by Taiwan-based LILIN. Botnet operators are exploiting several zero-day vulnerabilities in digital video recorders (DVRs) for surveillance systems manufactured by Taiwan-based LILIN-.

Firmware 139

Firmware Surveillance Manufacturing Advertising 139

Schneier on Security

FEBRUARY 6, 2023

And all of that is on a computer, on a network, and attached to the Internet. This shouldn’t come as a surprise to anyone who has been working with Internet security. This is bulk surveillance and can easily operate on this massive scale. This essay originally appeared in the May 2020 issue of IEEE Computer.

Encryption 274

Encryption Hacking Software Social Engineering 274

Security Affairs

JANUARY 7, 2024

“The stolen information is likely to be exploited for surveillance or intelligence gathering on specific groups and or individuals.” Reduce the number of systems that can be reached over internet using SSH. The threat actors gathered personal information on minority groups and potential political dissents.

Media 140

Media Accountability Telecommunications Government 140

Malwarebytes

MAY 9, 2023

We have identified attacks from the group starting in 2020, meaning that they have remained under the radar for at least three years. Malwarebytes has identified multiple operations, first dated in 2020. Notes about activity before the war OP#1 - Late 2020 The first operation we know of happened in December 2020.

Surveillance 88

Surveillance Accountability DNS Encryption 88

Security Affairs

OCTOBER 12, 2021

Operators behind the FreakOut (aka Necro, N3Cr0m0rPh) Python botnet have added a PoC exploit for Visual Tools DVR, a professional digital video recorder used in surveillance video systems. This version of the Necro botnet also includes exploits for the following vulnerabilities: CVE-2020-15568 – TerraMaster TOS before 4.1.29

DDOS 118

DDOS Surveillance Hacking Internet 118

Security Affairs

JUNE 22, 2020

In October 2019, security experts at Amnesty International’s Security Lab have uncovered targeted attacks against Moroccan human rights defenders Maati Monjib and Abdessadak El Bouchattaoui that employed NSO Group surveillance tools. This attack scenario sees attackers monitoring and manipulating the Internet traffic of the target.

Spyware 144

Spyware Surveillance Mobile Advertising 144

Malwarebytes

OCTOBER 11, 2023

It’s spying when governments do it through opaque, mass surveillance regimes, it’s spying when companies do it through shadowy data broker networks that braid together disparate streams of information, and it’s spying when private individuals do it through unseen behavior on personal devices. The good news?

Surveillance 130

Surveillance Passwords Software Technology 130

Security Affairs

JULY 30, 2020

— Dr. Neal Krawetz (@hackerfactor) June 4, 2020. The researcher operates multiple Tor nodes, last week he published a blog post that describes how internet service providers and organizations could stop Tor connections. I'm holding off dropping Tor 0days until the protests are over. (We We need Tor now, even with bugs.)

Advertising 143

Advertising Surveillance Hacking Internet 143

Responsible Cyber

SEPTEMBER 10, 2020

CYBERSEC goes global and online in 2020. This year’s CYBERSEC leitmotif – “Together Against Adversarial Internet” and the mission of the forum will enhance cooperation of like-minded countries to secure digital transformation. The 6th edition of the EUROPEAN CYBERSECURITY FORUM will be held on 28–30 September online.

Digital transformation 52

Digital transformation Technology Cybersecurity Artificial Intelligence 52

Security Affairs

DECEMBER 29, 2019

RuNet – Russia successfully concluded tests on its Internet infrastructure. Thai Officials confirmed the hack of prison surveillance cameras and the video broadcast. Top cybersecurity Predictions for 2020. FBI flash alert warns of LockerGoga and MegaCortex Ransomware attacks.

Cyber Attacks 87

Cyber Attacks Surveillance Advertising Ransomware 87

IT Security Guru

SEPTEMBER 17, 2021

It went into effect on 13 th August 2020 and addresses the new prohibition on the use of banned telecommunications equipment and services, while also clarifying the ban from 2019 on buying such equipment. the telecommunications and video surveillance services or equipment they work with.?? government and industry. .

Telecommunications 109

Telecommunications Surveillance Government Manufacturing 109

Hacker Combat

JUNE 3, 2021

Since mid-April in 2020, the Atos-owned organization has struggled to have the security loopholes fixed in vain. Further, the vulnerabilities have been allocated the Common Vulnerabilities and Exposures (CVE) identifiers CVE-2020-12500 over CVE-2020-12504. Surveillance. These vulnerabilities include: Backdoor account.

Firmware 85

Firmware Energy and Utilities Cyber Attacks Surveillance 85

SecureWorld News

FEBRUARY 11, 2021

It seems like everyday a new wrinkle unfolds in the dramatic aftermath of the SolarWinds supply chain breach of December 2020. HSDs should be stored in a secure paper filing system or a secure standalone computer system that is not connected to any network, particularly the internet. Problems with courts going back to paper.

Computers and Electronics 98

Computers and Electronics Surveillance Internet Internet 98

SecureList

APRIL 27, 2021

One of the suspected FinFly Web servers was active for more than a year between October 2019 and December 2020. As it turned out, it was active for a very short time around September 2020 on a host that appears to have been impersonating the popular Mail.ru The activities peaked in November 2020, but are still ongoing.

Malware 145

Malware Government Spyware Social Engineering 145

Duo's Security Blog

JULY 1, 2021

Because remote attacks on the internet are similar in nature — an attacker can instantly “travel” to any “door” in order to attempt a theft. Lindsey O'Donnell, ThreatPost In 2020, Talos did an investigation of fingerprint sensors and their practical spoofability on a reasonable budget. Why a teleporting burglar?

Passwords 98

Passwords Surveillance Authentication Risk 98

The Last Watchdog

OCTOBER 19, 2021

I highly recommend reading Zuboff’s New York Times Book of the Year, The Age of Surveillance Capitalism: The Fight for A Human Future At the New Frontier of Power as well as viewing Rifkin’s riveting speech, The Third Industrial Revolution: A Radical New Sharing Economy. And second, the release of the Wildland Client 0.1.0 in June 2021.

Internet 223

Internet Internet Cryptocurrency Software 223

eSecurity Planet

JULY 21, 2021

Anyone and everyone is at risk, and even technology giants like Apple are ill-equipped to deal with the massive scale of surveillance at hand.”. Accepting processing messages from anyone is the equivalent of running a network connected to the internet with no firewall.”. Thousands of iPhones have potentially been compromised.

Spyware 125

Spyware Mobile Government Surveillance 125

Security Affairs

NOVEMBER 8, 2021

17 the actor leveraged leased infrastructure in the United States to scan hundreds of vulnerable organizations across the internet. The group was involved in cyber espionage campaigns aimed at new generation weapons and in surveillance activities on dissidents and other civilian groups. . “As early as Sept.

Healthcare 121

Healthcare Financial Services Password Management Surveillance 121

SecureWorld News

AUGUST 28, 2022

The regularly conducted business practices of defendant Oracle America amount to a deliberate and purposeful surveillance of the general population," the lawsuit alleges. "In We are taking this action to stop Oracle's surveillance machine," Ryan said in a statement about the lawsuit.

Surveillance 98

Surveillance Internet Internet Retail 98

eSecurity Planet

MARCH 27, 2023

“A number of factors may have contributed to the zero-day count in 2020 dipping, then quadrupling in 2021,” researchers James Sadowski and Casey Charrier wrote. “This activity continues China’s pattern of exploiting internet-facing devices, especially those used for managed security purposes (e.g.

Firewall 104

Firewall Internet Internet Telecommunications 104

Security Affairs

FEBRUARY 2, 2020

The Russian government asks all Internet service providers and VPN providers operating in the country to provide information about their users. “The company responded with a categorical refusal to Roskomnadzor’s repeated requests for information to be included in the register of information dissemination organizers on the Internet. .

Government 109

Government VPN Telecommunications Advertising 109

McAfee

MAY 20, 2021

Despite detailed guidelines [3] issued in November 2020, in the absence of new definitive guidelines for transferring data across European borders [4] , many are starting to wonder whether data localisation is the magic bullet to protect personal data. ” [6]. While localisation does offer some protections (i.e.

Surveillance 60

Surveillance Internet Internet Government 60

SecureList

NOVEMBER 28, 2024

The second, an article published in 2024 by the Google Threat Analysis Group, described the business model of various companies that provide commercial surveillance solutions. PhantomNet is a RAT first described by ESET in late 2020. Knowledge of this threat is sparse and the Epeius malware has never been publicly described in detail.

Malware 118

Malware Government Software Spyware 118

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Tue, 12/22/2020 - 10:08. The 2020 analysis found that customer data was by far the most-commonly compromised type of record with 80% of breached organizations saying that customer PII was affected. Things get even more complicated with the July 2020 ruling from the EU’s top court that the EU-U.S. Privacy Shield was unlawful.

Data privacy 118

Data privacy Encryption Risk Data breaches 118