Adam Shostack

MAY 6, 2021

The document includes checklists, which are available separately: If you want to see if anyone else has access to your device or accounts. They’re unreasonable because ever year in the United States, 1,000 to 1,600 women die at the hands of their male partners, and some fraction of those are enabled by technology-aided surveillance.

Surveillance 203

Surveillance Information Security Accountability Technology 203

Schneier on Security

DECEMBER 7, 2023

.” The Department of Justice did not return messages seeking comment on the push notification surveillance or whether it had prevented Apple of Google from talking about it. Wyden’s letter cited a “tip” as the source of the information about the surveillance.

Surveillance 290

Surveillance Government Accountability Spyware 290

Security Affairs

MARCH 10, 2021

A group of hackers claimed to have compromised more than 150,000 surveillance cameras at banks, jails, schools, and prominent companies like Tesla and Equinox. Hackers also posted images captured from the hacked surveillance video on Twitter with an #OperationPanopticon hashtag. SecurityAffairs – hacking, surveillance cameras).

Surveillance 117

Surveillance Hacking Banking Firmware 117

Security Affairs

APRIL 17, 2023

The Israeli surveillance firm QuaDream is allegedly shutting down its operations after Citizen Lab and Microsoft uncovered their spyware. Last week Citizen Lab researchers reported that at least five civil society members were victims of spyware and exploits developed by the Israeli surveillance firm QuaDream. and 14.4.2,

Surveillance 84

Surveillance Spyware Education Media 84

WIRED Threat Level

JANUARY 27, 2024

Plus: North Korean hackers get into generative AI, a phone surveillance tool that can monitor billions of devices gets exposed, and ambient light sensors pose a new privacy risk.

Accountability 97

Accountability Surveillance Risk 97

Malwarebytes

JANUARY 10, 2024

We have seen several high-profile accounts that were taken over on X (formerly Twitter) only to be used for cryptocurrency related promotional activities, like expressing the approval of exchange-traded funds (ETFs). The @SECGov X account was compromised, and an unauthorized post was posted. You’re all set.

Accountability 92

Accountability Scams Hacking Cryptocurrency 92

Security Affairs

MAY 1, 2023

Researchers at the Lookout Threat Lab have discovered a new Android surveillance spyware, dubbed BouldSpy, that was used by the Law Enforcement Command of the Islamic Republic of Iran (FARAJA). However, much of the victim data points to its broader usage, which indicates targeted surveillance efforts towards minorities within Iran.”

Surveillance 78

Surveillance Malware Spyware Education 78

Security Affairs

APRIL 13, 2022

According to a report published by Reuters, an Israeli surveillance software was used to spy on senior officials in the European Commission. ” NSO sent a statement to Reuters to exclude the involvement of its surveillance tools in the attacks reported by the agency. Follow me on Twitter: @securityaffairs and Facebook.

Surveillance 92

Surveillance Software Spyware Hacking 92

Security Affairs

JANUARY 10, 2024

Threat actors hacked the X account of the US Securities and Exchange Commission (SEC) and used it to publish the fake news on the Bitcoin ETF approval. Hackers hijacked the X account of the US Securities and Exchange Commission (SEC) and used it to publish fake news on the Bitcoin ETF approval. ” Gensler wrote.

Accountability 105

Accountability Hacking Cryptocurrency Surveillance 105

Security Affairs

NOVEMBER 11, 2022

Lookout researchers discovered two long-running surveillance campaigns targeting the ethnic minority Uyghurs. Researchers from mobile security firm Lookout uncovered two long-running surveillance campaigns targeting the Uyghurs minority. List of installed packages. Call logs and geocoded location associated with the call.

Surveillance 91

Surveillance Spyware Malware Mobile 91

Security Affairs

JULY 12, 2020

Google announced that starting from August it will update its policies to reject ads proposed by organizations offering surveillance software. The move aims at fighting the advertising of any form of surveillance. The tech giant announced that the update will be effective starting from August 11, 2020. Pierluigi Paganini.

Surveillance 106

Surveillance Spyware Advertising Marketing 106

Schneier on Security

SEPTEMBER 28, 2020

Although electronic surveillance programs authorized by EO 12333 generally target foreign intelligence from foreign targets, its permissive targeting standards allow for the substantial collection of Americans’ communications containing little to no foreign intelligence value.

Surveillance 298

Surveillance Telecommunications Internet Internet 298

Security Affairs

JUNE 24, 2022

Researchers from Google’s Threat Analysis Group (TAG) revealed that the Italian surveillance firm RCS Labs was helped by some Internet service providers (ISPs) in Italy and Kazakhstan to infect Android and iOS users with their spyware. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Surveillance 109

Surveillance Mobile Spyware Telecommunications 109

Schneier on Security

DECEMBER 18, 2020

Gizmodo is reporting that schools in the US are buying equipment to unlock cell phones from companies like Cellebrite: Gizmodo has reviewed similar accounting documents from eight school districts, seven of which are in Texas, showing that administrators paid as much $11,582 for the controversial surveillance technology.

Surveillance 352

Surveillance Mobile Accountability Technology 352

Security Affairs

APRIL 1, 2023

Five of the issues added by CISA to its catalog are part of the exploits used by surveillance vendors to target mobile devices with their commercial spyware: CVE-2021-30900 – Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability.

Spyware 80

Spyware Surveillance Mobile Education 80

Security Affairs

SEPTEMBER 24, 2018

Cisco has patched a critical vulnerability in the Cisco Video Surveillance Manager (VSM) could be exploited by an unauthenticated remote attacker to gain root access. Cisco has fixed a critical vulnerability in the Cisco Video Surveillance Manager software running on some Connected Safety and Security Unified Computing System (UCS) platforms.

Surveillance 79

Surveillance Accountability Software Advertising 79

Malwarebytes

FEBRUARY 13, 2022

It is noted that Twitter’s decision to move away from Mitto AG came after allegations that its co-founder and Chief Operating Officer, Ilja Gorelik, sold access to Mitto’s networks to surveillance technology firms. The post Twitter cans 2FA service provider over surveillance claims appeared first on Malwarebytes Labs.

Surveillance 66

Surveillance Mobile Media Marketing 66

CyberSecurity Insiders

MAY 24, 2021

Interestingly, the United States Postal Services(USPS) department is conducting a surveillance program for the past few weeks with the help of Facial Recognition integrated with Artificial Intelligence. . The post US Postal service conducts public surveillance program with Facial Recognition appeared first on Cybersecurity Insiders.

Surveillance 69

Surveillance Artificial Intelligence Media Internet 69

Security Affairs

APRIL 16, 2023

Microsoft warns of a new Remcos RAT campaign targeting US accounting and tax return preparation firms ahead of Tax Day. Tax Day, Microsoft has observed a new Remcos RAT campaign targeting US accounting and tax return preparation firms. Ahead of the U.S. The phishing attacks began in February 2023, the IT giant reported. LNK) files.

Accountability 89

Accountability Phishing Financial Services Surveillance 89

Security Affairs

APRIL 8, 2020

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. According to the NSO CEO, Facebook was interested in improving surveillance capabilities on iOS devices of the Onavo Protect. ” Who will win? Facebook or NSO Group? Pierluigi Paganini.

Surveillance 99

Surveillance Spyware Advertising Government 99

Security Affairs

DECEMBER 28, 2020

The Parliament of Finland confirmed that threat actors had access to email accounts of multiple members of parliament (MPs). . The attack was discovered by parliament technical surveillance. Some parliament e-mail accounts may have been compromised as a result of the attack, among them e-mail accounts that belong to MPs.”

Accountability 132

Accountability Surveillance Cyber Attacks Hacking 132

Schneier on Security

OCTOBER 13, 2020

.” These searches are legal when conducted for the purpose of foreign surveillance, but the worry about using them domestically is that they are unconstitutionally broad. The very nature of these searches requires mass surveillance. The FBI does not conduct mass surveillance. The FBI does not conduct mass surveillance.

Surveillance 335

Surveillance Wireless Accountability Architecture 335

Security Affairs

DECEMBER 27, 2019

Authorities in Thailand are investigating a cyber attack that resulted in the broadcast of surveillance video from inside a prison in the country’s south. The video was published on Tuesday by an account named “ BigBrother’s Gaze,” the images from several cameras showed prisoners’ operations.

Surveillance 67

Surveillance Hacking Advertising IoT 67

Malwarebytes

FEBRUARY 22, 2022

Bosch, known more for its line of refrigerators, ovens, and dishwashers, also develops and sells an entire suite of surveillance cameras. The Intercept also reported that the operating system used on modern Bosch surveillance cameras could potentially be out of date. It shouldn’t. This is not innovation.

Surveillance 88

Surveillance Artificial Intelligence Technology Internet 88

Threatpost

JULY 20, 2021

Our roundtable of experts weighs in on implications for Apple and lawmakers in the wake of the bombshell report showing widespread surveillance of dissidents, journalists and others.

Spyware 109

Spyware Surveillance Accountability Mobile 109

Schneier on Security

AUGUST 5, 2019

Deibert, and John Scott-Railton of Citizen Lab published an editorial calling for regulating the international trade in commercial surveillance systems until we can figure out how to curb human rights abuses. The purchase of surveillance technology by law enforcement in any state must be transparent and subject to public debate.

Spyware 206

Spyware Surveillance Technology Accountability 206

Schneier on Security

AUGUST 10, 2021

The other feature scans all iMessage images sent or received by child accounts — that is, accounts designated as owned by a minor — for sexually explicit material, and if the child is young enough, notifies the parent when these images are sent or received. This feature can be turned on or off by parents.

Surveillance 361

Surveillance Encryption Accountability 361

Malwarebytes

JANUARY 16, 2023

The case of Karlee Besse, an accountant in British Colombia, was recently dismissed by the Civil Resolution Tribunal (CRT) in Canada, with a judge ordering her to pay back her former employer, Reach CPA, for "engaging in time theft"—a revelation that wouldn't have been possible if not for software Reach installed on her computer.

Accountability 96

Accountability Computers and Electronics Software Surveillance 96

Security Boulevard

SEPTEMBER 9, 2022

A recently-released Surfshark report looked into global inquiries into the activities of specific accounts made by governments to service providers. While the company characterizes government requests as “surveillance,” I prefer the term “inquiry.” The report found the United States “requests the most user data from big tech companies.”

Government 109

Government Surveillance Accountability Risk 109

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. The flaws reside in a feature named the “XMEye P2P Cloud” that is enabled by default which is used to connect surveillance devices to the cloud infrastructure. Pierluigi Paganini.

Surveillance 82

Surveillance Hacking Firmware Manufacturing 82

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. “In mid-2018, social commerce marketplace Poshmark suffered a data breach that exposed 36M user accounts. Now Scott told BleepingComputer that a set of one million cracked Poshmark accounts is circulating online.

Accountability 83

Accountability Data breaches Passwords Advertising 83

Bleeping Computer

MARCH 24, 2021

Facebook took down accounts used by a Chinese-sponsored hacking group to deploy surveillance malware on devices used by Uyghurs activists, journalists, and dissidents living outside China. [.].

Surveillance 120

Surveillance Accountability Malware Hacking 120

Schneier on Security

MARCH 29, 2018

Harvard Business School professor Shoshana Zuboff calls it " surveillance capitalism." Surveillance capitalism takes this one step further. Google's surveillance isn't in the news, but it's startlingly intimate. That phone is probably the most intimate surveillance device ever invented. We never lie to our search engines.

Surveillance 223

Surveillance Artificial Intelligence Advertising Big data 223

Centraleyes

DECEMBER 21, 2023

Ubiquiti, a leading networking and video surveillance camera manufacturer, has successfully resolved a bug that inadvertently allowed users access to other customers’ accounts and private live video streams. According to Ubiquiti, 1,216 accounts from one group were improperly associated with another group of 1,177 accounts.

Surveillance 52

Surveillance Accountability Manufacturing Technology 52

Security Affairs

SEPTEMBER 23, 2023

The City of Dallas revealed that the Royal ransomware gang that hit the city system in May used a stolen account. The Royal group began reconnaissance activity in April 2023, and the analysis of system log data dates the beginning of the surveillance operations on April 7, 2023. ” reads the report. ” reads the report.

Ransomware 102

Ransomware Surveillance Healthcare Accountability 102

Schneier on Security

JUNE 12, 2020

This is a weird story : Hernandez was able to evade capture for so long because he used Tails, a version of Linux designed for users at high risk of surveillance and which routes all inbound and outbound connections through the open-source Tor network to anonymize it. address of a person viewing a clip.

Surveillance 290

Surveillance Accountability Media Hacking 290

Security Affairs

JANUARY 7, 2024

“The stolen information is likely to be exploited for surveillance or intelligence gathering on specific groups and or individuals.” Sea Turtle also used code from a publicly accessible GitHub account, which is likely under the control of the threat actor. Enable 2FA on all externally exposed accounts.

Media 110

Media Accountability Telecommunications Government 110