Schneier on Security

JULY 24, 2019

Yesterday, Attorney General William Barr gave a major speech on encryption policy -- what is commonly known as "going dark." Nor are we necessarily talking about the customized encryption used by large business enterprises to protect their operations. After all, we are not talking about protecting the Nation's nuclear launch codes.

Encryption 260

Encryption Telecommunications Risk Government 260

Schneier on Security

AUGUST 14, 2019

Last month, Attorney General William Barr gave a major speech on encryption policy­what is commonly known as "going dark." Nor are we necessarily talking about the customized encryption used by large business enterprises to protect their operations. After all, we are not talking about protecting the Nation's nuclear launch codes.

Encryption 233

Encryption Telecommunications Risk Government 233

Security Boulevard

JANUARY 13, 2022

Remember when the US and Australian police surreptitiously owned and operated the encrypted cell phone app ANOM? The post Using Foreign Nationals to Bypass US Surveillance Restrictions appeared first on Security Boulevard. They arrested 800 people in 2021 based on that operation.

Surveillance 62

Surveillance Encryption 62

SecureWorld News

APRIL 24, 2023

As the frequency of data breaches surges, it becomes increasingly imperative to guarantee the security and adequate encryption of passwords. In this article, I will provide an overview of password encryption, explaining its essence and modus operandi. What is password encryption? Why is password encryption necessary?

Encryption 71

Encryption Passwords Password Management Software 71

Schneier on Security

JANUARY 21, 2022

Key Findings: MY2022, an app mandated for use by all attendees of the 2022 Olympic Games in Beijing, has a simple but devastating flaw where encryption protecting users’ voice audio and file transfers can be trivially sidestepped. Citizen Lab examined the app and found it riddled with security holes.

Surveillance 322

Surveillance Encryption Wireless Government 322

Schneier on Security

AUGUST 10, 2021

It opens the door for all sorts of other surveillance, since now that the system is build it can be used for all sorts of other messages. And it breaks end-to-end encryption, despite Apple’s denials : Does this break end-to-end encryption in Messages? Notice Apple changing the definition of “end-to-end encryption.”

Surveillance 361

Surveillance Encryption Accountability 361

Schneier on Security

SEPTEMBER 24, 2019

Yahoo News reported that the Russians have successfully targeted an FBI communications system: American officials discovered that the Russians had dramatically improved their ability to decrypt certain types of secure communications and had successfully tracked devices used by elite FBI surveillance teams.

Hacking 219

Hacking Surveillance Encryption Internet 219

Schneier on Security

OCTOBER 23, 2023

Susan Landau published an excellent essay on the current justification for the government breaking end-to-end-encryption: child sexual abuse and exploitation (CSAE). She puts the debate into historical context, discusses the problem of CSAE, and explains why breaking encryption isn’t the solution.

Encryption 252

Encryption Government Surveillance 252

WIRED Threat Level

MAY 14, 2022

Plus: New details of ICE’s dragnet surveillance in the US, Clearview AI agrees to limit sales of its faceprint database, and more.

Surveillance 90

Surveillance Encryption 90

Schneier on Security

JUNE 16, 2021

This is the joint US/Australia-run encrypted messaging service that lured criminals to use it, and then spied on everything they did. You don’t even know which foreign companies the NSA has targeted for mass surveillance. Presumably all of those companies follow the laws on their home country. And it matters.

VPN 288

VPN Surveillance Encryption Risk 288

Zero Day

MARCH 15, 2021

The executive says the indictment highlights the “vilification” of anyone “who takes a stance against unwarranted surveillance.”

Surveillance 118

Surveillance Encryption 118

Schneier on Security

JUNE 23, 2021

Its spyware is also said to be equipped with a keylogger, which means every keystroke made on an infected device — including passwords, search queries and messages sent via encrypted messaging apps — can be tracked and monitored.

Manufacturing 255

Manufacturing Spyware Surveillance Marketing 255

Schneier on Security

JUNE 6, 2023

In 2013 and 2014, I wrote extensively about new revelations regarding NSA surveillance based on the documents provided by Edward Snowden. Chatting with Snowden on an encrypted IM connection, I joked that the NSA cafeteria menu probably has code names for menu items. Transferring files electronically is what encryption is for.

Surveillance 298

Surveillance Computers and Electronics Encryption Government 298

Graham Cluley

FEBRUARY 17, 2022

How is the UK Government trying to influence the public's opinion on end-to-end encryption? How does Microsoft hope to defeat the macro terror? And what is MoviePass hoping to do with your eyeballs?

Encryption 90

Encryption Government Surveillance Malware 90

Security Boulevard

MAY 4, 2022

Elon Musk Wants End-to-End Encryption for Twitter Direct Messages: Too soon or Too Late? Twitter DMs should have end to end encryption like Signal, so no one can spy on or hack your messages,” Musk said in a tweet. E2EE encrypts data between a sender and receiver so that no third party can access it. brooke.crothers.

Encryption 62

Encryption Surveillance Media Government 62

Schneier on Security

FEBRUARY 22, 2022

He also leaves out the NSA — whose effectiveness rests on all of these global insecurities — and the FBI, whose incessant push for encryption backdoors goes against his vision of increased cybersecurity. Or the surveillance capitalists, for that matter. I’m not sure how he’s going to get them on board.

Cybersecurity 289

Cybersecurity Surveillance Marketing Encryption 289

Security Affairs

OCTOBER 10, 2018

Millions of Xiongmai video surveillance devices can be easily hacked via cloud feature, a gift for APT groups and cyber crime syndicates. The flaws reside in a feature named the “XMEye P2P Cloud” that is enabled by default which is used to connect surveillance devices to the cloud infrastructure. Who controls these servers?

Surveillance 84

Surveillance Hacking Firmware Manufacturing 84

Heimadal Security

JANUARY 26, 2022

is a Taiwanese company that specializes in network-attached storage equipment for applications such as file sharing, virtualization, storage management, and surveillance. QNAP Systems, Inc. What Happened?

Ransomware 121

Ransomware Firmware Surveillance Encryption 121

Security Affairs

NOVEMBER 28, 2021

Nexa Technologies was indicted for complicity in acts of torture, the French firm is accused of having sold surveillance equipment to the Egypt. Nexa Technologies offers a range of solutions for homeland security, including surveillance solutions. “In short, Cerebro can suck up any data that is not encrypted.

Technology 113

Technology Surveillance Software Government 113

CyberSecurity Insiders

MAY 14, 2023

One way to secure information in the cloud is through encryption. Encryption is the process of converting information into a code that only authorized parties can access. Cloud providers use encryption to protect data at rest, which means when the data is stored on the provider’s servers.

Hacking 128

Hacking Antivirus Firewall Encryption 128

CSO Magazine

MAY 10, 2022

Once a device is compromised, an attacker can choose to install surveillance software, or they can choose to enact a much more destructive strategy by encrypting the files and holding them for ransom. They are sophisticated, often used in cyberespionage campaigns, and tend to leave very few traces behind—which makes them dangerous.

Surveillance 128

Surveillance Encryption Software 128

SecureWorld News

JUNE 25, 2020

Privacy and security advocates may be forced to battle it out on the Senate floor to stop a newly introduced bill that will help law enforcement get past encryption. New backdoor bill in Congress hits encryption debate head on. The question: should encrypted communication be out of law enforcement's reach?

Encryption 62

Encryption Computers and Electronics Government Technology 62

Security Affairs

SEPTEMBER 9, 2018

CheckPoint uncovered an extensive surveillance operation conducted by Iranian APT actor and tracked as Domestic Kitten aimed at specific groups of individuals. ” This means that the Domestic Kitten surveillance operation had collateral victims whose details were leaked from contact lists or conversations with the targets.

Surveillance 50

Surveillance Mobile Advertising Spyware 50

SecureList

JUNE 16, 2021

These formats suggest that the threat actor is interested in Office documents, encryption keys, password manager files and image files.The upload is performed by using the same POST request as the one used by the ‘uploadsf’ command. argument: path to file to upload. – List files and repositories.

Surveillance 135

Surveillance Malware Password Management Passwords 135

Security Affairs

SEPTEMBER 27, 2020

Experts from Amnesty International uncovered a surveillance campaign that targeted Egyptian civil society organizations with a new version of FinSpy spyware. The mobile version of the surveillance software in the first stage of the infection leverages the exploits to get root access. ” reads the Amnesty’s report.

Spyware 137

Spyware Surveillance Mobile Advertising 137

Security Affairs

OCTOBER 16, 2023

Encrypted messaging app Signal denied claims of an alleged zero-day flaw in its platform after a responsible investigation. The popular encrypted messaging app Signal denied claims of an alleged zero-day vulnerability in its platform. “PSA: we have seen the vague viral reports alleging a Signal 0-day vulnerability.

Spyware 106

Spyware Surveillance Encryption Mobile 106

Security Affairs

SEPTEMBER 14, 2023

A joint investigation conducted by Access Now and the Citizen Lab revealed that the journalist, who is at odds with the Russian government, was infected with the surveillance software. However, there is no public evidence that the Russian government is a client of the Israeli surveillance firm NSO Group. ” states Access Now.

Spyware 93

Spyware Surveillance Media Government 93

Schneier on Security

AUGUST 12, 2019

The first concern was over high numbers: in both 2016 and 2017, the Foreign Intelligence Surveillance Court issued 40 orders for collection, but the NSA collected hundreds of millions of CDRs, and the agency provided little clarification for the high numbers. For a time, the new program seemed to be functioning well.

Surveillance 213

Surveillance Architecture Encryption Technology 213

Schneier on Security

JULY 29, 2019

Each of these images fails to convey anything about either the importance or the complexity of the topic­ -- or the huge stakes for governments, industry and ordinary people alike inherent in topics like encryption, surveillance and cyber conflict. I agree that this is a problem. It's not something I noticed until recently.

Cybersecurity 201

Cybersecurity Surveillance Encryption Government 201

CyberSecurity Insiders

AUGUST 7, 2022

Like first stealing data from the servers of the victim and then encrypting the entire database until a ransom is paid. NOTE 1- All the encrypted PCs hit by Gwisin are termed as Gwisin Ghosts. Like all other ransomware variants, Gwisin is also indulging in double extortion tactics.

Ransomware 118

Ransomware Surveillance Encryption Cryptocurrency 118

Security Affairs

SEPTEMBER 23, 2023

The Royal group began reconnaissance activity in April 2023, and the analysis of system log data dates the beginning of the surveillance operations on April 7, 2023. Royal was then able to traverse the internal City infrastructure during the surveillance period using legitimate 3rd party remote management tools.”

Ransomware 106

Ransomware Surveillance Healthcare Accountability 106

Adam Levin

MAY 15, 2019

The vulnerability, discovered earlier this month, allowed third parties to see and intercept encrypted communications. The spyware deployed has been traced back to NSO Group, an Israeli cyber company alleged to have enabled Middle East governments to surveil its citizens.

Spyware 200

Spyware Mobile Surveillance Government 200

The Last Watchdog

OCTOBER 10, 2023

C4ISR stands for Command, Control, Communications, Computers (C4) Intelligence, Surveillance and Reconnaissance (ISR). IP video encryption is an essential layer of security that ensures data is safe — even if it is intercepted. Thus metadata and standards play a vital role in sharing and controlling data?

Encryption 130

Encryption Technology Surveillance Authentication 130

CyberSecurity Insiders

SEPTEMBER 10, 2021

And gaining internal access of servers might allow cyber criminals to conduct long-term surveillance on their counterparts. Note 2- A ransomware attack is a kind of file encrypting malware attack where threat actors induce malware into a database to encrypt it until a ransom is paid.

Cyber Attacks 134

Cyber Attacks Surveillance Encryption Data breaches 134

Security Affairs

NOVEMBER 24, 2021

Apple has filed suit to ban the Israeli surveillance firm NSO Group and parent company Q Cyber Technologies from using its product and services. federal court for illegally targeting its customers with the surveillance spyware Pegasus. Apple has sued NSO Group and its parent company Q Cyber Technologies in a U.S. Pierluigi Paganini.

Spyware 90

Spyware Surveillance Software Hacking 90

Security Affairs

JUNE 2, 2019

The popular privacy-focused email service ProtonMail has been accused of offering voluntarily real-time surveillance assistance to law enforcement. The popular privacy-focused email service ProtonMail made the headlines because it has been accused of supporting real-time surveillance carried out by law enforcement.

Government 104

Government Surveillance Telecommunications Advertising 104

Pen Test

OCTOBER 12, 2023

Criminals may use hijacked drones for illegal surveillance, smuggling, or even as weapons. Countermeasures: To prevent drone signal hijacking, drone manufacturers and operators can implement encryption and authentication mechanisms for RF communication. It offers strong encryption and is considered secure for most applications.

Encryption 52

Encryption Firmware Surveillance Technology 52