The year-long rash of supply chain attacks against open source is getting worse October 5, 2019 | sento | Leave a comment A rash of supply chain attacks hitting open source software over the past year shows few signs of abating, following the discovery this week of two separate backdoors slipped into a dozen libraries downloaded by hundreds of thousands of server administrators. The first backdoor to come to light was in Webmin, a Web-based administration tool… Read More
We Cannot Afford to Lose the Digital Revolution. October 5, 2019 | sento | Leave a comment Mr. Gerstell is the general counsel of the National Security Agency. The National Security Operations Center occupies a large windowless room, bathed in blue light, on the third floor of the National Security Agency’s headquarters outside of Washington. For the past 46 years, around the clock without a single interruption, a team of senior military… Read More
Hamstrung by ransomware, 10 hospitals are turning away some patients October 5, 2019 | sento | Leave a comment All three hospitals that make up the DCH Health System in Alabama were closed to new patients on Tuesday as officials there coped with an attack that paralyzed the health network’s computer system. The hospitals—DCH Regional Medical Center in Tuscaloosa, Northport Medical Center, and Fayette Medical Center—are turning away ‘all but the most critical new… Read More
Google launches Incognito Mode for Google Maps, and more October 5, 2019 | sento | Leave a comment Google has announced today new privacy-centered updates for three of its services — namely Google Maps, YouTube, and Google Assistant. More specifically, Google Maps will be getting an incognito mode, YouTube is getting a history auto-delete option, and Google Assistant is getting support for voice commands that will help users manage the Assistant’s own privacy… Read More
Russian state hackers rarely share code with one another October 5, 2019 | sento | Leave a comment A first-of-its-kind research project highlights the connections between nearly 2,000 samples of Russian APT malware. Russia’s state-sponsored hacking groups rarely share code with one another, and when they do, it’s usually within groups managed by the same intelligence service, a new joint report published today reveals. This report, co-authored by Check Point and Intezer Labs,… Read More
Binary Hardening in IoT products October 5, 2019 | sento | Leave a comment Binary Hardening in IoT products Source: cyber-itl… Read More
Attackers exploit 0-day vulnerability that gives full control of Android phones October 5, 2019 | sento | Leave a comment Attackers are exploiting a zero-day vulnerability in Google’s Android mobile operating system that can give them full control of at least 18 different phone models, including four different Pixel models, a member of Google’s Project Zero research group said on Thursday night. There’s evidence the vulnerability is being actively exploited, either by exploit developer NSO… Read More
France and Germany agree to block Facebook’s Libra September 14, 2019 | sento | Leave a comment France and Germany have agreed to block Facebook’s Libra cryptocurrency, the French finance ministry said on Friday. In a joint statement, the two governments affirmed that “no private entity can claim monetary power, which is inherent to the sovereignty of nations”. French Finance Minister Bruno Le Maire said on Thursday that Facebook’s new cryptocurrency should… Read More
NY Payroll Company Vanishes With $35 Million September 14, 2019 | sento | Leave a comment MyPayrollHR, a now defunct cloud-based payroll processing firm based in upstate New York, abruptly ceased operations this past week after stiffing employees at thousands of companies. The ongoing debacle, which allegedly involves malfeasance on the part of the payroll company’s CEO, resulted in countless people having money drained from their bank accounts and has left… Read More
SimJacker attack allows hacking any phone with just an SMS September 14, 2019 | sento | Leave a comment Cybersecurity researchers at AdaptiveMobile Security disclosed a critical vulnerability in SIM cards dubbed SimJacker that could be exploited by remote attackers to compromise targeted mobile phones and spy on victims just by sending an SMS. The SimJacker vulnerability resides in the S@T (SIMalliance Toolbox) Browser dynamic SIM toolkit that is embedded in most SIM cards… Read More