Security Affairs

SEPTEMBER 3, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Social Engineering 104

Social Engineering Spyware Data breaches Surveillance 104

Malwarebytes

AUGUST 26, 2021

The Bahrain government and groups linked to them—such as LULU , a known operator of Pegasus, and others like them who are associated with a separate government—were tagged as culprits of the surveillance activity. Dubbed by Citizen Lab as FORCEDENTRY, this iMessage exploit is said to have been in use since February 2021.

Spyware 99

Spyware Surveillance Social Engineering Government 99

Security Boulevard

DECEMBER 20, 2021

Police all over the nation are using the infamous Stingray device to surveil suspects. For example, Boston police (despite Stingray use being effectively illegal in Massachusetts). The post Boston Cops buy Stingray Spy Stuff—Spending Secret Budget appeared first on Security Boulevard.

Surveillance 136

Surveillance Social Engineering Security Awareness Engineering 136

SecureList

NOVEMBER 28, 2022

Our last edition of privacy predictions focused on a few important trends where business and government interests intersect, with regulators becoming more active in a wide array of privacy issues. This showed how consumer data collection can directly impact the relationships between citizens and governments.

Insurance 110

Insurance Social Engineering IoT Data breaches 110

Krebs on Security

MARCH 29, 2022

There is a terrifying and highly effective “method” that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms. ” A month prior on Cracked, Everlynn posted a sales thread, “1x Government Email Account || BECOME A FED!,”

Accountability 276

Accountability Government Hacking Social Engineering 276

eSecurity Planet

FEBRUARY 22, 2022

There is no need for social engineering , as the program can implant backdoors directly without forced consent. This thriving ecosystem might be difficult to stop by authorities, as nation-state actors and governments have almost unlimited resources to buy these electronic weapons. Zero-click attacks remove this hurdle.

Spyware 122

Spyware Software Government Social Engineering 122

Identity IQ

FEBRUARY 8, 2024

There are plenty of legitimate reasons to use it to remain private and anonymous — such as bypassing government censorship, finding niche content, participating in forums or chat boards, whistleblowing crimes to journalists, or even contacting the CIA. federal government. government.

Identity Theft 98

Identity Theft Cryptocurrency Government Engineering 98

SecureList

NOVEMBER 17, 2021

In 2020, we predicted that governments would adopt a “name and shame” strategy to draw attention to the activities of hostile APT groups, a trend that has evolved even more in the last year. In October, the US government conducted offensive operations to disrupt REvil’s activities.

Mobile 135

Mobile Surveillance Ransomware Government 135

SecureList

OCTOBER 17, 2023

The most remarkable findings In early 2023, we discovered an ongoing attack targeting government entities in the APAC region by compromising a specific type of a secure USB drive, which provides hardware encryption. BlindEagle has targeted both government entities and individuals in South America.

Government 110

Government Malware VPN Manufacturing 110

SecureList

NOVEMBER 30, 2021

Based on forensic analysis of numerous mobile devices, Amnesty International’s Security Lab found that the software was repeatedly used in an abusive manner for surveillance. Later that month, representatives from the Israeli government visited the offices of NSO as part of an investigation into the claims.

Malware 109

Malware Mobile Spyware Surveillance 109

eSecurity Planet

DECEMBER 19, 2023

We each need to consider how these trends may affect our organizations and allocate our budgets and resources accordingly: AI will turbo-charge cybersecurity and cyberthreats: Artificial intelligence (AI) will boost both attackers and defenders while causing governance issues and learning pains.

Cybersecurity 140

Cybersecurity CISO Government Technology 140

SecureList

OCTOBER 26, 2021

In June, more than six months after DarkHalo had gone dark, we observed the DNS hijacking of multiple government zones of a CIS member state that allowed the attacker to redirect traffic from government mail servers to computers under their control – probably achieved by obtaining credentials to the control panel of the victims’ registrar.

Malware 143

Malware Government Surveillance Spyware 143

ForAllSecure

DECEMBER 21, 2022

In a moment I’ll share a couple of travel stories from a well-known hacker, one who took creepy surveillance technology and flipped it around. Sometimes you can use surveillance tools in your favor. Kevin did time, and afterward has devoted his life to teaching others about social engineering attacks.

Computers and Electronics 40

Computers and Electronics Surveillance Big data Social Engineering 40

SecureWorld News

OCTOBER 26, 2021

The suspected Russian Advanced Persistent Threat (APT) behind the SolarWinds incident is attempting to warm-up strategic social engineering techniques to breach firms around the world in an effort to breathe life into similar cyberattacks. Burt also went into detail about what he suspects.

Technology 84

Technology Social Engineering Cybersecurity Surveillance 84

Security Boulevard

MARCH 1, 2024

EKEN IoT FAIL: Amazon, Sears and Shein still sell security swerving stuff. The post Cheap Video Doorbell Cams: Tools of Stalkers and Thieves appeared first on Security Boulevard.

IoT 130

IoT Social Engineering Internet Internet 130

Security Boulevard

FEBRUARY 14, 2024

I❤️POE: Does your home security need a rethink? Wireless cameras are kinda useless, say cops. The post ALERT: Thieves❤️Wi-Fi Camera Jammers appeared first on Security Boulevard.

Wireless 132

Wireless Social Engineering Internet Internet 132

SecureList

APRIL 27, 2021

This resulted in the deployment of a custom backdoor, named Sunburst, on the networks of more than 18,000 SolarWinds customers, including many large corporations and government bodies, in North America, Europe, the Middle East and Asia. One of those Fobushell samples was identical to another we previously identified on a Zebrocy C2 server.

Malware 142

Malware Spyware Government Social Engineering 142

SecureList

NOVEMBER 14, 2023

The rise of destructive attacks In December of last year, shortly after we released our predictions for 2023, Russian government agencies were reported to have been targeted by a data wiper called CryWiper. A review of last year’s predictions 1. They attribute the wiper, named SwiftSlicer, to Sandworm (aka Hades).

Hacking 110

Hacking Energy and Utilities Media Malware 110

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. The following day, Microsoft reported that it had found destructive malware , dubbed WhisperGate, on the systems of government bodies and agencies that work closely with the Ukrainian government. Southeast Asia and Korean Peninsula. in June 2021.

Malware 135

Malware Firmware Government Phishing 135

Spinone

NOVEMBER 21, 2019

Here are only seven out of 26 topics: Insider threats Passwords Security of mobile devices Social engineering Viruses Email security Human error To start the course, you need to register and choose the type of account you need. This course covers a broad range of security topics, explaining it with a simple language.

Social Engineering 40

Social Engineering Accountability Phishing Cybersecurity 40

eSecurity Planet

APRIL 9, 2024

Common compliance standards include GDPR, which governs data processing for EU members; PCI DSS, which guarantees safe credit card transactions; and NIST 800-53 for IT risk management. Assess the physical security measures: Evaluate access controls, surveillance systems, and environmental controls.

Risk 105

Risk Threat Detection Data breaches Encryption 105

Security Boulevard

OCTOBER 24, 2023

Firefox here we come! Free” privacy proxy for all Chrome users? What could POSSIBLY go wrong? The post Don’t Be Evil: Google’s Scary ‘IP Protection’ Privacy Plan appeared first on Security Boulevard.

Social Engineering 80

Social Engineering Advertising Surveillance Data privacy 80

SecureList

JULY 29, 2021

Earlier this month, Rostelecom Solar and NCIRCC issued a joint public report describing a series of attacks against networks of government entities in Russia. We were able to trace the WebDav-O implant’s activity in our telemetry to at least 2018, indicating government affiliated targets based in Belarus. Final thoughts.

Malware 143

Malware Phishing Password Management Social Engineering 143

Security Boulevard

FEBRUARY 18, 2021

Oracle Corp. stands accused of selling analytics to Chinese police forces that’s being used to hunt down political dissidents and lock up Uyghur Muslims. The post Oracle is Said to Help China Find Dissidents and Jail Minorities appeared first on Security Boulevard.

Social Engineering 142

Social Engineering Surveillance Engineering Risk 142

Security Boulevard

AUGUST 23, 2022

Oracle “illegally” collects and links data about you, selling it to the highest bidder—all without your consent. The post Oracle’s HUGE Ad Data Graph is ‘Illegal Panopticon’ — 5 BILLION People Big appeared first on Security Boulevard.

Social Engineering 98

Social Engineering Advertising Surveillance Security Awareness 98

Troy Hunt

DECEMBER 4, 2017

I read this while wandering around in LA on my way home from sitting in front of US Congress and explaining security principles to a government so it felt like a timely opportunity to share my own view on the matter: This illustrates a fundamental lack of privacy and security education. — Jan Wildeboer (@jwildeboer) December 3, 2017.

Passwords 204

Passwords Accountability Technology InfoSec 204

ForAllSecure

SEPTEMBER 21, 2021

The Federal Trade Commission in the United States, banned an app called SpyPhone, and its CEO Scott Zuckerman, from operating in the surveillance industry. I should also say that this when it does happen and again it's extremely, extremely rare when it does happen, It almost always involves some kind of social engineering.

Technology 52

Technology Software Surveillance Media 52