Tech Republic Security

APRIL 26, 2023

PURPOSE This policy from TechRepublic Premium provides guidelines for the reporting of information security incidents by company employees. From the policy: POLICY DETAILS An information security incident is defined. The post Information security incident reporting policy appeared first on TechRepublic.

Information Security 88

Information Security 88

Joseph Steinberg

DECEMBER 14, 2022

The FBI’s InfraGard program, which facilitates the sharing of information about cyberthreats and some physical threats between relevant, vetted parties throughout the public and private sector, has suffered a serious hacker breach. This breach is more than just embarrassing – it is dangerous. Even the best security folks sometimes mess up.

Cybersecurity 227

Cybersecurity DNS Artificial Intelligence Authentication 227

Schneier on Security

JANUARY 7, 2021

Researchers have been able to find all sorts of personal information within GPT-2. This information was part of the training data, and can be extracted with the right sorts of queries. Paper: “ Extracting Training Data from Large Language Models.”

Internet 362

Internet Internet Cybersecurity 362

Schneier on Security

SEPTEMBER 28, 2021

These two sites tell you what sorts of information you’re leaking from your browser.

288

288

CyberSecurity Insiders

OCTOBER 3, 2022

There is a confusion among a few that the terms Information Security and Cybersecurity are the same as the two areas take the same strides to a large extent. Information Security- Protection of information and the information storing systems from unauthorized access accounts to Information Security.

Information Security 137

Information Security Cybersecurity Cyber Attacks Computers and Electronics 137

Security Affairs

NOVEMBER 23, 2022

The operators behind the Ducktail information stealer continue to improve their malicious code, operators experts warn. WithSecure observed several multi-stage subvariants of DUCKTAIL that are used to deliver the final payload, the researchers highlighted that this is the primary information stealer malware in all cases.

Malware 134

Malware Hacking Accountability Authentication 134

CSO Magazine

MARCH 10, 2023

AT&T is informing customers about a data breach at a vendor’s system that allowed threat actors to gain access to AT&T’s Customer Proprietary Network Information (CPNI). The incident came to light after customers posted the email communication from AT&T on community forums to know if it was legitimate or email fraud. “We

Data breaches 137

Data breaches 137

Security Boulevard

MARCH 23, 2023

for information about terminating a pregnancy. The post Is Trafficking in Hacking Information a Crime? Quincy Compton of Concord, North Carolina, had a wife and a pregnant girlfriend and wrote to a doctor in Washington, D.C. Quincy Compton. appeared first on Security Boulevard.

Hacking 105

Hacking Malware Risk Cybersecurity 105

CyberSecurity Insiders

MAY 4, 2023

The post Information Security News headlines trending on Google appeared first on Cybersecurity Insiders. Primary analysis made by the technology giant stated that the malware was being distributed via browser extensions and fake ads running on compromised business accounts.

Information Security 111

Information Security Ransomware Malware Data breaches 111

CyberSecurity Insiders

APRIL 21, 2023

ICICI Bank, an Indian bank with a business presence in over 15 countries, has become a victim of a data breach, leaking information of more than 3.8 The banking giant says that the news of the data breach is false, as its preliminary inquiries have revealed that the available information on the web is fake and doesn’t belong to its customers.

Data breaches 128

Data breaches Banking Cybersecurity Phishing 128

Tech Republic Security

JANUARY 11, 2023

The post Explore information security with 97% off this huge course bundle appeared first on TechRepublic. The training covers Docker, Splunk and AWS as you work toward CCSP certification.

Information Security 145

Information Security 145

Bleeping Computer

MAY 3, 2023

Facebook discovered a new information-stealing malware distributed on Meta called 'NodeStealer,' allowing threat actors to steal browser cookies to hijack accounts on the platform, as well as Gmail and Outlook accounts. [.]

Malware 100

Malware Accountability 100

Schneier on Security

NOVEMBER 21, 2018

Democracy is an information system. In it, we look at democracy through the lens of information security, trying to understand the current waves of Internet disinformation attacks. The answer revolves around the different ways autocracies and democracies work as information systems.

Government 273

Government Internet Internet Information Security 273

Security Affairs

APRIL 25, 2023

Combined, the leaked information could be used to compromise the dataset and the website. Judging from its username, MySQL was used to store user information. The passphrase for JWT, an industry standard used to share information between two entities, was very weak and easily guessable.

Hacking 95

Hacking Encryption Social Engineering Passwords 95

Schneier on Security

MARCH 5, 2020

Right now, pandemic disease experts at the World Health Organization (WHO), the US Centers for Disease Control and Prevention (CDC), and other public-health agencies are gathering information to learn how and where the virus is spreading. To do so, they are using a variety of digital communications and surveillance systems.

Surveillance 333

Surveillance Hacking Cybersecurity Data breaches 333

Security Affairs

MAY 4, 2023

Facebook discovered a new information-stealing malware, dubbed ‘NodeStealer,’ that is being distributed on Meta. NodeStealer is a new information-stealing malware distributed on Meta that allows stealing browser cookies to hijack accounts on multiple platforms, including Facebook, Gmail, and Outlook.

Malware 94

Malware Hacking Encryption Accountability 94

CyberSecurity Insiders

DECEMBER 1, 2022

LastPass, a password management service offering company, has disclosed that it has suffered a data breach in an attack that might be linked to the August data leak where hackers stole vital information from the servers of the said company.

Data breaches 140

Data breaches Passwords Password Management Encryption 140

CyberSecurity Insiders

MAY 16, 2023

AT&T does not adopt or endorse any of the views, positions, or information provided by the author in this article. In today’s digital age, sensitive information is constantly being shared and transmitted over various electronic devices and networks. One of the most effective ways to do this is through encryption.

Encryption 105

Encryption Passwords Identity Theft Computers and Electronics 105

Schneier on Security

APRIL 26, 2019

On a similar note, it's time to conceptualize the "information operations kill chain." Information attacks against democracies, whether they're attempts to polarize political processes or to increase mistrust in social institutions, also involve a series of steps. Here the answer is attribution, attribution, attribution.

Cybersecurity 276

Cybersecurity Government Media Accountability 276

Bleeping Computer

MARCH 17, 2023

The NBA (National Basketball Association) is notifying fans of a data breach after some of their personal information, "held" by a third-party newsletter service, was stolen. [.]

Data breaches 142

Data breaches 142

Schneier on Security

OCTOBER 27, 2021

Vice has a detailed article about how the FBI gets data from cell phone providers like AT&T, T-Mobile, and Verizon, based on a leaked (I think) 2019 139-page presentation.

Mobile 295

Mobile Surveillance 295

Security Affairs

MAY 22, 2023

. “The review found that Micron’s products have relatively serious potential network security issues, which pose a major security risk to my country’s key information infrastructure supply chain and affect my country’s national security. China firmly promotes high-level opening up to the outside world.

Network Security 86

Network Security Government Wireless Cybersecurity 86

Adam Levin

SEPTEMBER 1, 2020

Databases containing the personal information of millions of U.S. State and federal government officials have denied that the data was acquired via hacking and have maintained that the data was available through the Freedom of Information Act (FOIA). “[We] voters have appeared on Russian hacking forums.

Cyber Attacks 281

Cyber Attacks Hacking Cybersecurity Authentication 281

Dark Reading

MAY 4, 2023

Sharing information is critical to help organizations protect data and systems. To be even more effective, collaboration should be inclusive — vendors, researchers, and private companies large and small.

Cybersecurity 119

Cybersecurity 119

Schneier on Security

OCTOBER 14, 2020

The Workshop on Economics of Information Security will be online this year. Register here.

Information Security 292

Information Security 292

Schneier on Security

DECEMBER 4, 2020

The workshop on Economics and Information Security is always an interesting conference. This year, it will be online. Here’s the program. Registration is free.

Information Security 245

Information Security 245

Schneier on Security

SEPTEMBER 23, 2022

Okay, it’s an obscure threat. But people are researching it : Our models and experimental results in a controlled lab setting show it is possible to reconstruct and recognize with over 75 percent accuracy on-screen texts that have heights as small as 10 mm with a 720p webcam.”

309

309

Schneier on Security

MAY 8, 2020

Used Tesla components, sold on eBay, still contain personal information , even after a factory reset. This is a decades-old problem. It's a problem with used hard drives. It's a problem with used photocopiers and printers. It will be a problem with IoT devices.

IoT 299

IoT 299

CyberSecurity Insiders

DECEMBER 29, 2021

Amid extreme concerns related to cyber warfare from Russia, Ukraine’s President Volodymyr Zelensky announced a new information security strategy policy was launched and came into effect early this week. The post Ukraine President enforces Information Security Strategy appeared first on Cybersecurity Insiders.

Information Security 135

Information Security Cyber Attacks Cybersecurity Hacking 135

Identity IQ

MAY 15, 2023

Juice Jacking: The Latest Cyber Threat to Your Personal Information and Devices IdentityIQ Juice jacking, a new cybercrime trend, is targeting people who charge their phones or tablets at public charging stations. Bottom Line Juice jacking can put your personal information and smart devices at risk.

Cyber threats 98

Cyber threats Identity Theft Malware Passwords 98

CSO Magazine

MAY 2, 2023

The White House Office of Science and Technology Policy (OSTP) would soon be releasing a public request for information (RFI) to learn more about the automated tools employers use to surveil, monitor, evaluate, and manage workers, OSTP announced on Monday.

Surveillance 108

Surveillance Risk Technology 108

Heimadal Security

OCTOBER 20, 2022

Microsoft confirms that they have been the victim of a data breach, which allowed threat actors to gain access to the personal information of some customers. The post Microsoft Data Breach Exposes Customers’ Sensitive Information appeared first on Heimdal Security Blog.

Data breaches 119

Data breaches Internet Internet Cybersecurity 119

CSO Magazine

JANUARY 10, 2023

More than 10,000 beneficiaries of a local branch of the French social security agency CAF, or Family Allowance Fund, saw their data exposed for about 18 months, after a file containing personal information was sent to a service provider.

135

135

CyberSecurity Insiders

OCTOBER 20, 2022

Microsoft has suffered a data breach that leads to leak of sensitive information of some of its customers. When information regarding cyber attacks is shared and analyzed, it leads to a situation where threats can be predicted proactively and necessary steps can be taken to mitigate them.

Data breaches 133

Data breaches Cyber Attacks Artificial Intelligence Ransomware 133