Schneier on Security

APRIL 21, 2023

Sports are filled with hacks, as players look for every possible advantage that doesn’t explicitly break the rules. My latest book, A Hacker’s Mind , has a lot of sports stories.

Hacking 191

Hacking 191

Schneier on Security

FEBRUARY 10, 2023

That’s not hacking the tax code. It’s hacking the processes that create them: the legislative process that creates tax law. This provision didn’t come into force in 2018, so someone came up with the clever hack to prepay 2018 property taxes in 2017. A hack subverts the intent of a system. The tax code can be hacked.

Hacking 214

Hacking Artificial Intelligence Government Software 214

Schneier on Security

DECEMBER 9, 2022

But there’s a hack: Some hunters have long believed, however, that the publicly owned parcels on Elk Mountain can be legally reached using a practice called corner-crossing. This particular hack will be adjudicated in court. It’s the act of adjudicating hacks that allows systems to evolve.

Hacking 216

Hacking 216

Schneier on Security

SEPTEMBER 18, 2023

That’s a really profitable hack. (It’s Remember last November, when hackers broke into the network for LastPass—a password database—and stole password vaults with both encrypted and plaintext data for over 25 million users? It’s also bad opsec. The hackers need to move and launder all that money quickly.)

Hacking 252

Hacking Cryptocurrency Passwords Encryption 252

Schneier on Security

OCTOBER 17, 2022

The article doesn’t say how the hacking tool got installed into cars. A fraudulent tool—marketed as an automotive diagnostic solution, was used to replace the original software of the vehicles, allowing the doors to be opened and the ignition to be started without the actual key fob.

Hacking 326

Hacking Manufacturing Software Technology 326

Schneier on Security

APRIL 14, 2023

Here’s a religious hack : You want to commit suicide, but it’s a mortal sin: your soul goes straight to hell, forever. It’s a clever hack. I didn’t learn about it in time to put it in my book, A Hacker’s Mind , but I have several other good hacks of religious rules. Problem solved.

Hacking 205

Hacking 205

Schneier on Security

AUGUST 25, 2023

But there’s also examples of companies hacking the laws: Companies like Coca-Cola and Kraft Heinz have begun designing their products so that their packages don’t have a true front or back, but rather two nearly identical labels—except for the fact that only one side has the required warning.

Hacking 185

Hacking Manufacturing Marketing 185

Schneier on Security

JUNE 28, 2023

The stalkerware company LetMeSpy has been hacked : TechCrunch reviewed the leaked data, which included years of victims’ call logs and text messages dating back to 2013. The database we reviewed contained current records on at least 13,000 compromised devices, though some of the devices shared little to no data with LetMeSpy.

Hacking 184

Hacking Spyware Accountability Data breaches 184

Schneier on Security

JULY 20, 2021

NSO Group, the Israeli cyberweapons arms manufacturer behind the Pegasus spyware — used by authoritarian regimes around the world to spy on dissidents, journalists, human rights workers, and others — was hacked. Or, at least, an enormous trove of documents was leaked to journalists. There’s a lot to read out there.

Hacking 363

Hacking Spyware Manufacturing Software 363

Schneier on Security

AUGUST 14, 2023

Beijing, they told the Japanese officials, had breached Tokyo’s defense networks, making it one of the most damaging hacks in that country’s modern history. They briefed the defense minister, who was so concerned that he arranged for them to alert the prime minister himself. More analysis.

Hacking 197

Hacking Cybersecurity 197

Schneier on Security

MARCH 26, 2021

Lukasz Olejnik has a good essay on hacking weapons systems. Basically, there is no reason to believe that software in weapons systems is any more vulnerability free than any other software. So now the question is whether the software can be accessed over the Internet. Increasingly, it is.

Hacking 346

Hacking Internet Internet Software 346

Schneier on Security

AUGUST 11, 2022

This is the first —of many, I assume—hack of Starlink. Leveraging a string of vulnerabilities, attackers can access the Starlink system and run custom code on the devices.

Hacking 225

Hacking 225

Schneier on Security

NOVEMBER 10, 2021

I just don’t think it’s possible to create a hack-proof computer system, especially when the system is physically in the hands of the hackers. In 1999, Adam Shostack and I wrote a paper discussing the security challenges of giving people devices that included embedded secrets that needed to be kept from those people.

Hacking 291

Hacking Firmware Engineering Software 291

Schneier on Security

MAY 31, 2023

Everyone is writing about an interagency and international report on Chinese hacking of US critical infrastructure. Lots of interesting details about how the group, called Volt Typhoon , accesses target networks and evades detection.

Hacking 195

Hacking 195

Krebs on Security

MAY 30, 2023

A number of Discord communities focused on cryptocurrency have been hacked this past month after their administrators were tricked into running malicious Javascript code disguised as a Web browser bookmark. On May 9, MetrixCoin reported that its Discord server was hacked, with fake airdrop details pushed to all users.

Hacking 284

Hacking Scams Cryptocurrency Accountability 284

Schneier on Security

FEBRUARY 4, 2021

The sources, who spoke on condition of anonymity to discuss ongoing investigations, said the attackers used computer infrastructure and hacking tools previously deployed by state-backed Chinese cyberspies. […]. In other words, the same sloppy and corrupt practices that allowed this massive cybersecurity hack made Bravo a billionaire.

Hacking 341

Hacking Cybersecurity Software Risk 341

Krebs on Security

MARCH 4, 2021

Over the past few weeks, three of the longest running and most venerated Russian-language online forums serving thousands of experienced cybercriminals have been hacked. A note posted by a Verified forum administrator concerning the hack of its registrar in January. The forum was hacked through the domain registrar.

Hacking 363

Hacking Cybercrime Passwords DDOS 363

Schneier on Security

MARCH 21, 2023

The New York Times is reporting that a US citizen’s phone was hacked by the Predator spyware. The simultaneous tapping of the target’s phone by the national intelligence service and the way she was hacked indicate that the spy service and whoever implanted the spyware, known as Predator, were working hand in hand.

Spyware 190

Spyware Hacking Government Technology 190

Schneier on Security

DECEMBER 9, 2020

FireEye was hacked by — they believe — “a nation with top-tier offensive capabilities”: During our investigation to date, we have found that the attacker targeted and accessed certain Red Team assessment tools that we use to test our customers’ security. That group dumped the N.S.A.’s operator put it.

Hacking 301

Hacking Cyber threats Malware Government 301

Krebs on Security

AUGUST 29, 2023

According to recent figures from the managed security firm Reliaquest , QakBot is by far the most prevalent malware “loader” — malicious software used to secure access to a hacked network and help drop additional malware payloads. ” The DOJ said it also recovered more than 6.5

Hacking 252

Hacking Malware Ransomware Cybercrime 252

Schneier on Security

JULY 10, 2023

In my latest book, A Hacker’s Mind , I wrote about hacks as loophole exploiting. Definitely a hack. This is a great example: The Wisconsin governor used his line-item veto powers—supposedly unique in their specificity—to change a one-year funding increase into a 400-year funding increase. 121.905 (3) (c) 9.

Hacking 197

Hacking 197

Schneier on Security

NOVEMBER 9, 2023

Selling miniature replicas to unsuspecting shoppers: Online marketplaces sell tiny pink cowboy hats. They also sell miniature pencil sharpeners, palm-size kitchen utensils, scaled-down books and camping chairs so small they evoke the Stonehenge scene in “This Is Spinal Tap.”

Hacking 226

Hacking Retail Advertising 226

Schneier on Security

OCTOBER 12, 2020

Five researchers hacked Apple Computer’s networks — not their products — and found fifty-five vulnerabilities. So far, they have received $289K.

Hacking 343

Hacking Accountability 343

Bleeping Computer

NOVEMBER 20, 2023

The former chief operating officer of a cybersecurity company has pleaded guilty to hacking two hospitals, part of the Gwinnett Medical Center (GMC), in June 2021 to boost his company's business. [.]

Hacking 140

Hacking Cybersecurity Healthcare 140

Bleeping Computer

NOVEMBER 29, 2023

The Japan Aerospace Exploration Agency (JAXA) was hacked in a cyberattack over the summer, potentially compromising sensitive space-related technology and data. [.]

Hacking 119

Hacking Technology 119

Bleeping Computer

NOVEMBER 14, 2023

A Russian hacking group known as AlphaLock is launching a "pentest" marketplace and training platform to empower a new generation of threat actors. Learn more from Flare about the new hacking group. [.]

Hacking 110

Hacking 110

Bleeping Computer

NOVEMBER 20, 2023

The Canadian government says two of its contractors have been hacked, exposing sensitive information belonging to an undisclosed number of government employees. [.]

Hacking 128

Hacking Data breaches Government 128

Security Affairs

NOVEMBER 22, 2023

SiegedSec hacktivists group claimed responsibility for the hack of The Idaho National Laboratory (INL) and leaked stolen human resources data. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, INL) organizations, especially U.S. municipalities.

Hacking 114

Hacking Data breaches Information Security 114

Security Affairs

NOVEMBER 25, 2023

The Rhysida ransomware group claimed to have hacked the Chinese state-owned energy conglomerate China Energy Engineering Corporation. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Rhysida ransomware) Energy China [link] TL;DR That's huuuge!

Ransomware 120

Ransomware Hacking InfoSec VPN 120

Security Affairs

NOVEMBER 27, 2023

Ukraine’s intelligence service announced the hack of the Russian Federal Air Transport Agency, ‘Rosaviatsia.’ ’ Ukraine’s intelligence service announced they have hacked Russia’s Federal Air Transport Agency, ‘Rosaviatsia.’ ” reads the announcement. ” reads the announcement.

Hacking 111

Hacking Engineering Government Authentication 111

Security Affairs

NOVEMBER 29, 2023

The Rhysida ransomware group claimed to have hacked King Edward VII’s Hospital in London. The Rhysida ransomware group claimed to have hacked King Edward VII’s Hospital in London and added it to the list of victims on its Tor leak site. King Edward VII’s Hospital in London has been breached by Rhysida Ransomware.

Ransomware 111

Ransomware Hacking VPN Phishing 111

Security Affairs

NOVEMBER 23, 2023

AutoZone disclosed a data breach resulting from the hack of their MOVEit Transfer installation. The car parts giant is notifying 184,995 individuals that the massive MOVEit hacking campaign compromised their personal information. ” reads the Notice Letter published by the Main Attorney General.

Data breaches 110

Data breaches Hacking Identity Theft Ransomware 110

Bleeping Computer

NOVEMBER 27, 2023

Ukraine's intelligence service, operating under the Defense Ministry, claims they hacked Russia's Federal Air Transport Agency, 'Rosaviatsia,' to expose a purported collapse of Russia's aviation sector. [.]

Hacking 117

Hacking Government 117

Security Boulevard

NOVEMBER 29, 2023

The post Okta Screws Up (Yet Again) — ALL Customers’ Data Hacked, not just 1% appeared first on Security Boulevard. You had one job: Last month’s sheer incompetence descends this week into UTTER FARCE.

Hacking 131

Hacking Security Awareness Social Engineering Data privacy 131

Security Affairs

NOVEMBER 17, 2023

Toyota Financial Services discloses unauthorized activity on systems after the Medusa ransomware gang claimed to have hacked the company. Medusa Toyota has set the deadline for November 26 and has published a sample of the stolen data as proof of the hack.

Financial Services 121

Financial Services Ransomware Hacking Data breaches 121

Bleeping Computer

OCTOBER 24, 2023

Security researchers hacked the Samsung Galaxy S23 twice during the first day of the consumer-focused Pwn2Own 2023 hacking contest in Toronto, Canada. [.]

Hacking 140

Hacking 140

Graham Cluley

MAY 31, 2023

RaidForums, the notorious hacking and data leak forum seized and shut down by the authorities back in April 2022, is - perhaps surprisingly - at the centre of another cybersecurity breach.

Hacking 124

Hacking Cybersecurity Data breaches 124