112 matches found
Operation North Star: Behind The Scenes | McAfee Blogs
ARCHIVED STORY Operation North Star: Behind The Scenes Christiaan Beek · NOV 05, 2020 Executive Summary It is rare to be provided an inside view on how major cyber espionage campaigns are conducted within the digital realm. The only transparency afforded is a limited view of victims, a malware...
contractorscouncil.org.cy Cross Site Scripting vulnerability OBB-1399189
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Fashion retailer BrandBQ exposes 1 TB of customers, contractors data
By Sudais Asif The database was hosted on a misconfigured Elasticsearch server. This is a post from HackRead.com Read the original post: Fashion retailer BrandBQ exposes 1 TB of customers, contractors data...
Hackers Target Defense Contractors' Employees By Posing as Recruiters
The United States Cybersecurity and Infrastructure Security Agency CISA has published a new report warning companies about a new in-the-wild malware that North Korean hackers are reportedly using to spy on key employees at government contracting companies. Dubbed 'BLINDINGCAN,' the advanced remot...
Hackers Target Defense Contractors' Employees By Posing as Recruiters
The United States Cybersecurity and Infrastructure Security Agency CISA has published a new report warning companies about a new in-the-wild malware that North Korean hackers are reportedly using to spy on key employees at government contracting companies. Dubbed 'BLINDINGCAN ,' the advanced remo...
Chinese Hackers Charged in Decade-Long Crime and Spying Spree
From defense contractors to videogame companies, the indictment details an astonishing array of victims...
The FBI Wants Apple to Unlock iPhones Again
Snooping Ring employees, Skype contractors, and more of the week's top security news...
What Is the DoD’s New Cybersecurity Maturity Model Certification, and What Does It Mean for Defense Contractors?
Citing the threat of compromise of Controlled Unclassified Information CUI within the defense industrial base DIB, along with the high cost of cyber breaches in general, the Office of the Assistant Secretary of Defense for Acquisition has initiated a program for rating the cybersecurity maturity ...
Google Assistant Audio Privacy Controls Updated After Outcry
Google is unveiling new privacy controls for the Google Assistant virtual assistant, after the company came under fire earlier this year for eavesdropping on users’ personal audio snippets – without their permission. The tech giant on Monday promised more transparency around the audio data that i...
Apple Updates Privacy Policies After Siri Audio Recording Backlash
Apple is taking steps to improve the privacy of audio collected by its Siri voice assistant, on the heels of backlash around a program that let contractors listen into Siri conversations. On Wednesday, the phone giant apologized for violating users’ privacy through the program, which was...
Facebook Records User Audio, Sparking Privacy Questions
Facebook has admitted that it has been transcribing audio chats between its users on its Messenger platform. Sources said that it’s paying hundreds to third-party outside contractors to do so. The latter calls into question Facebook’s data-handling practices when it comes to being open with its...
APT41: A Dual Espionage and Cyber Crime Operation
Today, FireEye Intelligence is releasing a comprehensive report detailing APT41, a prolific Chinese cyber threat group that carries out state-sponsored espionage activity in parallel with financially motivated operations. APT41 is unique among tracked China-based actors in that it leverages...
Apple Contractors Will Stop Listening to Your Siri Recordings—For Now
Facial recognition hits minors, Facebook takes down Saudi accounts, and more security news this week...
Apple Suspends Siri Program After Privacy Backlash
Apple is suspending a program that lets contractors listen in on Siri voice recordings after facing a rain of backlash regarding the privacy implications of the program. The suspension comes after a report in The Guardian last week outlining how contractors regularly listen to intimate voice...
Whistleblower says Apple contractors listen to your Siri conversions
By Uzair Amir A whistleblower is claiming that the tech giant Apple is listening to Siri recording and allegedly, the Apple Watch is also playing a big role in collecting these records. This is a post from HackRead.com Read the original post: Whistleblower says Apple contractors listen to your Si...
The Effect of NIST 800-171A on Government Contractors
NIST 800-171A introduces a standardized opportunity to perform a more structured and granular level of assessment leveraging the National Institute of Standards and Technology NIST Special Publication SP 800-171 framework...
IoT Discussion at the Leidos Supplier Innovation & Technology Symposium
Coalfire was asked to participate on a technical panel about the Internet of Things IoT at the Leidos Supplier Innovation & Technology Symposium on June 6. This event is a dynamic day enabling Leidos largest suppliers as well as targeted start-ups to showcase their offerings and capabilities to a...
GDPR Is Here: Assess Risk from Vendors and from Internal Teams
Organizations must manage risk from third parties such as contractors and suppliers, and from internal staffers and teams, as part of their compliance program for the EU’s General Data Protection Regulation GDPR. The need to manage vendor risk in particular is stressed repeatedly throughout the...
Who is doing what on your network?
Over the past few months, while talking to customers, the topic of Zero Trust Architecture keeps coming up. Seemingly everyone is thinking of implementing the model - which we fully encourage! One of the core components of the principle is the ability to inspect and log all network and system...
DFARS 7012 Compliance
At Coalfire, we field a lot of questions from government contractors about compliance with National Institute of Science and Technology NIST Special Publication SP 800-171. We also address requests for help with "DFARS 7012," which is a commonly used shorthand for Defense Acquisition Regulation...