4172 matches found
U.S. Govt. Makes it Harder to Get .Gov Domains
The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity published research suggesting it was relatively easy for just about anyone to get...
Cobalt Ulster Strikes Again With New ForeLord Malware
A new credential-stealing malware, dubbed ForeLord, has been uncovered in a recent spear phishing campaign. Researchers tie the attack to a known advanced persistence threat APT group known as Cobalt Ulster. The emails distributing ForeLord were uncovered as part of a campaign, running between...
2 Chinese Charged with Laundering $100 Million for North Korean Hackers
Two Chinese nationals have been charged by the US Department of Justice DoJ and sanctioned by the US Treasury for allegedly laundering $100 million worth of virtual currency using prepaid Apple iTunes gift cards. According to a newly unsealed court document, the illicit funds originated from a $2...
Bruce Schneier Proposes 'Hacking Society' for a Better Tomorrow
SAN FRANCISCO – Cybersecurity experts have long stayed in their problem-solving lane when it comes to finding vulnerabilities, patching bugs and keeping networks safe. But maybe it is time they applied their defensive skillsets and adversarial understanding of cyberthreats to help solve some of...
This Week in Security News: Trend Micro Detects a 10 Percent Rise in Ransomware in 2019 and New Wi-Fi Encryption Vulnerability Affects Over a Billion Devices
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about how Trend Micro detected a 10 percent rise in ransomware attacks in 2019. Also, learn about a new Wi-Fi encryption vulnerability...
santafe.gob.ar Cross Site Scripting vulnerability OBB-1106356
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
How Trump Hollowed Out US National Security
Acting director of national intelligence Richard Grenell is just the latest in a cascade of temporary or vacant personnel in critical government positions...
Policy vs Technology
Sometime around 1993 or 1994, during the first Crypto Wars, I was part of a group of cryptography experts that went to Washington to advocate for strong encryption. Matt Blaze and Ron Rivest were with me; I don't remember who else. We met with then Massachusetts Representative Ed Markey. He didn'...
US Natural Gas-Compression facility cripples after ransomware attack
By Deeba Ahmed Another day, another ransomware attack - This time, hackers have hit critical infrastructure of the government of the United States. This is a post from HackRead.com Read the original post: US Natural Gas-Compression facility cripples after ransomware attack...
North Korean Malicious Cyber Activity
The Cybersecurity and Infrastructure Security Agency CISA, the Federal Bureau of Investigation FBI, and the Department of Defense DoD have identified the following malware variants used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean...
Privacy Experts Skeptical of Proposed Data Protection Agency
A new federal bureaucracy, the Data Protection Agency DPA, has been proposed to completely revamp how the U.S. government regulates data collection and misuse by big tech companies. However, while privacy experts call the agency a “good first step,” they remain skeptical about how effective it...
Puerto Rico Gov Hit By $2.6M Phishing Scam
A phishing scam has swindled a Puerto Rico government agency out of more than $2.6 million, according to reports. According to reports, the email-based phishing scam hit Puerto Rico’s Industrial Development Company, which is a government-owned corporation aimed at driving economic development to...
Can the Government Buy Its Way Around the Fourth Amendment?
Immigration authorities are purchasing cell phone location data, and it might be totally legal...
US charges 4 Chinese military hackers over 2017 Equifax breach
By Waqas The US government has charged four Chinese military officials over 2017's massive Equifax breach. This is a post from HackRead.com Read the original post: US charges 4 Chinese military hackers over 2017 Equifax breach...
Equifax Breach: Four Members of Chinese Military Charged with Hacking
U.S. authorities have charged four Chinese military officers in the 2017 Equifax data breach, which compromised the data of nearly 150 million. The four, Wu Zhiyong, Wang Qian, Xu Ke and Liu Lei, are believed to be members of the 54th Research Institute of the Chinese People’s Liberation Army PLA...
Gamaredon APT Improves Toolset to Target Ukraine Government, Military
The Gamaredon advanced persistent threat APT group has been supercharging its operations lately, improving its toolset and ramping up attacks on Ukrainian national security targets. Vitali Kremez, head of SentinelLabs, said in research released on Wednesday that he has been tracking an uptick in...
Quarterly Report: Incident Response trends in fall 2019
By David Liebenberg and Kendall McKay. While many Cisco Talos Incident Response CTIR engagements have shown similar patterns over the past two quarters, we’re seeing a dangerous trend emerge this winter. Threat actors are increasingly combining the exfiltration of sensitive data along with data...
Israeli government’s Gov.il DNS server found vulnerable
By Sudais Asif Eitan Caspi, a security researcher has exposed certain vulnerabilities found in Israeli government websites. This is a post from HackRead.com Read the original post: Israeli government's Gov.il DNS server found vulnerable...
Twitter API Abused to Uncover User Identities
Twitter said that malicious actors, with potential ties to state-sponsored groups, were abusing a legitimate function on its platform to unmask the identity of users. The social media giant said that on Dec. 24, 2019, it discovered a large network of fake accounts abusing a legitimate API...
SQL Injection Vulnerability in MediPro's Township Government Portal System
MediPro Township Government Portal System is a website suitable for township government agencies to create local portals to publicize local resources, realize open government affairs and promote township grassroots informatization. A SQL injection vulnerability exists in MediPro Township Governme...