Krebs on Security

OCTOBER 28, 2020

In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. He declined to comment on the particulars of the extortion incident.

Hacking 358

Hacking Ransomware Banking Accountability 358

Security Affairs

JANUARY 9, 2022

The US NCSC and the Department of State published joint guidance on defending against attacks using commercial surveillance tools. In the last years, we have reported several cases of companies selling commercial surveillance tools to governments and other entities that have used them for malicious purposes. Pierluigi Paganini.

Surveillance 145

Surveillance Mobile Spyware Malware 145

Security Affairs

MARCH 21, 2025

Russian intelligence agencies could use these exploits for surveillance and espionage purposes. Given Telegrams end-to-end encryption and widespread use, an exploit that bypasses its security could be a game-changer for cyber espionage. Gaining access without cooperation from Telegram itself could be highly valuable.

Government 144

Government Surveillance Mobile Hacking 144

Security Affairs

DECEMBER 1, 2021

Which are the most secure encrypted messaging apps? The Record shared an FBI training document that reveals the surveillance capabilities of the US law enforcement detailing which data can be extracted from encrypted messaging apps. SecurityAffairs – hacking, messaging apps). Pierluigi Paganini.

Encryption 145

Encryption Surveillance Hacking Information Security 145

The Last Watchdog

SEPTEMBER 17, 2018

Should law enforcement and military officials have access to a digital backdoor enabling them to bypass any and all types of encryption that exist today? Related: Nation-state hacks suggest cyber war is underway. Here are excerpts edited for clarity and space: LW: What’s wrong with granting governments the ability to break encryption?

Encryption 157

Encryption Government Surveillance Technology 157

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. Xiongmai hereinafter) that are open to hack. Security Affairs – Xiongmai, hacking ). The flaws could be exploited to spy on camera feeds of unaware users. Where are they located?

Surveillance 108

Surveillance Hacking Firmware Manufacturing 108

Security Affairs

MARCH 13, 2025

North Korea-linked threat actor ScarCruft (aka APT37 , Reaper, and Group123) is behind a previously undetected Android surveillance tool namedKoSpythat was used to target Korean and English-speaking users. The configuration request, sent as an encrypted JSON, controls parameters like C2 ping frequency, plugin URLs, and victim messages.

Spyware 80

Spyware Surveillance Encryption Malware 80

Schneier on Security

JUNE 23, 2021

Its spyware is also said to be equipped with a keylogger, which means every keystroke made on an infected device — including passwords, search queries and messages sent via encrypted messaging apps — can be tracked and monitored.

Manufacturing 289

Manufacturing Spyware Surveillance Marketing 289

CyberSecurity Insiders

MAY 14, 2023

So, how is information stored in the cloud secured from hacks? One way to secure information in the cloud is through encryption. Encryption is the process of converting information into a code that only authorized parties can access. Another way to secure information in the cloud is through access controls.

Hacking 128

Hacking Antivirus Firewall Encryption 128

SC Magazine

MARCH 10, 2021

A hacking collective compromised roughly 150,000 internet-connected surveillance cameras from Verkada, Inc., Hacktivist Tillie Kottmann is reportedly among those asserting responsibility for the incident, telling Bloomberg that their act helped expose the security holes of modern-day surveillance platforms.

Surveillance 129

Surveillance IoT Accountability Hacking 129

Schneier on Security

JANUARY 18, 2019

Australia, and elsewhere -- argue that the pervasive use of civilian encryption is hampering their ability to solve crimes and that they need the tech companies to make their systems susceptible to government eavesdropping. Levy and Robinson write: In a world of encrypted services, a potential solution could be to go back a few decades.

Encryption 274

Encryption Government Surveillance Hacking 274

Schneier on Security

FEBRUARY 6, 2023

But what if, instead, somebody hacked into the system and just switched the labels for “gun” and “turtle” or swapped “stop” and “45 mi/h”? Like everything else, these systems will be hacked through vulnerabilities in those more conventional parts of the system. This is bulk surveillance and can easily operate on this massive scale.

Encryption 272

Encryption Hacking Software Social Engineering 272

Security Affairs

DECEMBER 7, 2024

The spyware allowed Russian authorities to track a target device’s location, record phone calls, and keystrokes, and read messages from encrypted messaging apps. These extended capabilities suggest that the malware aims for comprehensive surveillance of the target device. ” continues the report.

Spyware 127

Spyware Passwords Encryption Surveillance 127

SecureWorld News

FEBRUARY 11, 2025

has directed Apple to create a backdoor into its encrypted iCloud backup service, a move that could have profound implications for digital privacy and security worldwide. However, British officials argue that such encryption makes it more difficult to collect evidence for criminal prosecutions and national security investigations.

Encryption 99

Encryption Computers and Electronics Government Backups 99

Security Affairs

SEPTEMBER 27, 2020

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. The mobile version of the surveillance software in the first stage of the infection leverages the exploits to get root access. SecurityAffairs – hacking, FinSpy).

Spyware 145

Spyware Surveillance Mobile Advertising 145

Security Affairs

NOVEMBER 28, 2021

Nexa Technologies was indicted for complicity in acts of torture, the French firm is accused of having sold surveillance equipment to the Egypt. Nexa Technologies offers a range of solutions for homeland security, including surveillance solutions. “In short, Cerebro can suck up any data that is not encrypted.

Technology 138

Technology Surveillance Software Government 138

WIRED Threat Level

FEBRUARY 15, 2025

Plus: Researchers find RedNote lacks basic security measures, surveillance ramps up around the US-Mexico border, and the UK ordering Apple to create an encryption backdoor comes under fire.

Surveillance 128

Surveillance Encryption Hacking 128

Security Affairs

NOVEMBER 8, 2021

Lajos Kosa, chair of the Parliament’s Defense and Law Enforcement Committee, confirmed that Hungary is one of the clients of the Israeli surveillance firm NSO Group and that it bought and used the controversial Pegasus spyware. According to Kosa, the use of surveillance software was authorized by a judge or the Minister of Justice.

Spyware 120

Spyware Surveillance Media Government 120

Security Affairs

DECEMBER 4, 2024

Strong segmentation with firewalls and DMZs, securing VPN gateways, and ensuring encrypted traffic with TLS v1.3 The Salt Typhoon group targeted surveillance systems used by the US government to investigate crimes and threats to national security, including activities carried out by nation-state actors.

Telecommunications 114

Telecommunications Government Mobile Cyber threats 114

Security Affairs

JANUARY 19, 2025

CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems Russia-linked APT Star Blizzard targets WhatsApp accounts Prominent US law firm Wolf Haldenstein disclosed a data breach Clop Ransomware exploits Cleo File Transfer flaw: dozens (..)

Spyware 71

Spyware Data breaches DNS Artificial Intelligence 71

Security Affairs

SEPTEMBER 9, 2018

CheckPoint uncovered an extensive surveillance operation conducted by Iranian APT actor and tracked as Domestic Kitten aimed at specific groups of individuals. ” This means that the Domestic Kitten surveillance operation had collateral victims whose details were leaked from contact lists or conversations with the targets.

Surveillance 80

Surveillance Mobile Advertising Spyware 80

Security Affairs

APRIL 14, 2021

WhatsApp addressed two security vulnerabilities in its app for Android that could have been exploited to remotely hack the victim’s device. or greater on the Android platform, as previous versions are vulnerable to the aforementioned bugs and may allow for remote user surveillance. SecurityAffairs – hacking, WhatsApp).

Mobile 112

Mobile Hacking Encryption Surveillance 112

Security Affairs

AUGUST 29, 2024

Russia-linked APT29 group was spotted reusing iOS and Chrome exploits previously developed by surveillance firms NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa.

Surveillance 137

Surveillance Government Hacking Encryption 137

Security Affairs

OCTOBER 30, 2019

WhatsApp sued Israeli surveillance firm NSO Group, accusing it of using a flaw in its messaging service to conduct cyberespionage on journalists and activists. WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. The lawsuit filed by WhatsApp in U.S.

Surveillance 75

Surveillance Technology Spyware Mobile 75

Security Affairs

SEPTEMBER 14, 2023

A joint investigation conducted by Access Now and the Citizen Lab revealed that the journalist, who is at odds with the Russian government, was infected with the surveillance software. However, there is no public evidence that the Russian government is a client of the Israeli surveillance firm NSO Group. ” states Access Now.

Spyware 133

Spyware Surveillance Media Government 133

Security Affairs

FEBRUARY 25, 2020

The popular cross-platform encrypted messaging service Signal has been chosen by the European Commission for its communications. The European Commission has decided to adopt for its staff the popular cross-platform encrypted messaging service Signal for its communications. ” reported the Politico. ” reported the Politico.

Encryption 130

Encryption Advertising Surveillance Hacking 130

Security Affairs

JANUARY 14, 2022

Like other ransomware gangs, Lorenz operators also implement double-extortion model by stealing data before encrypting it and threatening them if the victim doesn’t pay the ransom. Hensoldt AG focuses on sensor technologies for protection and surveillance missions in the defence, security and aerospace sectors. Pierluigi Paganini.

Ransomware 141

Ransomware Surveillance Mobile Encryption 141

Security Affairs

OCTOBER 16, 2023

Encrypted messaging app Signal denied claims of an alleged zero-day flaw in its platform after a responsible investigation. The popular encrypted messaging app Signal denied claims of an alleged zero-day vulnerability in its platform. “PSA: we have seen the vague viral reports alleging a Signal 0-day vulnerability.

Spyware 123

Spyware Surveillance Encryption Mobile 123

Security Boulevard

MARCH 3, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. The surveillance tech waiting for workers as they return to the office ArsTechnica RTO continues to pick up steam. In pursuit of "more productivity," some employers are leaning heavily into surveillance tech.

Surveillance 52

Surveillance Data breaches Firmware Encryption 52

Security Affairs

SEPTEMBER 20, 2024

German law enforcement agencies have been surveilling Tor network by operating their own servers for months. Research conducted by ARD’s Panorama and STRG_F revealed that data collected during surveillance is processed using statistical methods, effectively breaking Tor’s anonymity. an administrator of the platform.

Surveillance 142

Surveillance Data collection Media Hacking 142

Security Affairs

NOVEMBER 24, 2021

Apple has filed suit to ban the Israeli surveillance firm NSO Group and parent company Q Cyber Technologies from using its product and services. federal court for illegally targeting its customers with the surveillance spyware Pegasus. SecurityAffairs – hacking, Pegasus). ” reads the announcement published by Apple.

Spyware 100

Spyware Surveillance Software Hacking 100

Security Affairs

NOVEMBER 11, 2020

European Parliament votes to tighten up rules for the sale and export of surveillance and encryption technology. The new rules oblige European companies to apply for government licenses to export surveillance solutions demonstrating that the sale doesn’t pose a risk to human rights. Pierluigi Paganini.

Technology 108

Technology Surveillance Government Spyware 108

SecureWorld News

MAY 19, 2025

Our dependency on satellite technology means even minor hacks could be devastating, especially against the new threats and attack vectors brought about by AI. Let's take a look at the evolution of "space hacking," how satellites are being secured against new threats, and the implications and lessons earth-bound businesses can take away.

Cybersecurity 98

Cybersecurity Architecture Cyber Risk Government 98

Security Affairs

FEBRUARY 9, 2025

What are the risks?

Spyware 62

Spyware Cybercrime Scams Social Engineering 62

Security Affairs

SEPTEMBER 23, 2023

The Royal group began reconnaissance activity in April 2023, and the analysis of system log data dates the beginning of the surveillance operations on April 7, 2023. Royal was then able to traverse the internal City infrastructure during the surveillance period using legitimate 3rd party remote management tools.”

Ransomware 135

Ransomware Surveillance Healthcare Accountability 135

Security Affairs

MAY 22, 2024

The company designs and develops digital imaging products for use in mobile phones, laptops, netbooks and webcams, security and surveillance cameras, entertainment, automotive and medical imaging systems. In early January, the Cactus ransomware group claimed to have hacked Coop, one of the largest retail and grocery providers in Sweden.

Data breaches 135

Data breaches Ransomware Manufacturing Encryption 135

Security Affairs

JANUARY 9, 2022

All communication is end-to-end encrypted, and the app is open source. ” Recently media shared an FBI training document that reveals the surveillance capabilities of the US law enforcement detailing which data can be extracted from encrypted messaging apps. SecurityAffairs – hacking, instant messaging).

Computers and Electronics 124

Computers and Electronics Encryption Surveillance Cybercrime 124