article thumbnail

Chinese Antivirus Firm Was Part of APT41 ‘Supply Chain’ Attack

Krebs on Security

According to iDefense, in 2006 the group was responsible for crafting a rootkit that took advantage of a zero-day vulnerability in Microsoft Word, and was used in attacks on “a large DoD entity” within the USA. Security analysts and U.S.

Antivirus 363
article thumbnail

Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks

Krebs on Security

In a statement provided to KrebsOnSecurity, Group-IB said Mr. Kislitsin is no longer an employee, and that he now works for a Russian organization called FACCT , which stands for “ Fight Against Cybercrime Technologies.” “The company is monitoring developments.”

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

20 Years of SIEM: Celebrating My Dubious Anniversary

Anton on Security

BTW, lots of names for this technology space were in use back then, ultimately SIM/SEM won and then was forever fused together by Gartner. Definitely, the technology context has changed, but the security challenges remain the same to a very large extent. If you are curious, what did people care about those days? it wasn’t the auditors!

article thumbnail

The Role of Differential Privacy in Protecting Sensitive Information in the Era of Artificial Intelligence

Security Affairs

Cynthia Dwork (2006) introduced the fundamental idea, established its mathematical basis, and illustrated how privacy guarantees can be attained by adding numerical work. Research and technological advancements will help refine differential privacy techniques to use AI to balance data security and analytical effectiveness.

article thumbnail

Attorney General William Barr on Encryption Policy

Schneier on Security

Some hold this view dogmatically, claiming that it is technologically impossible to provide lawful access without weakening security against unlawful access. Speaking at Fordham University in New York, he admitted that adding backdoors decreases security but that it is worth it. I wrote about all this, and more, in 2013.).

article thumbnail

Attorney General Barr and Encryption

Schneier on Security

Some hold this view dogmatically, claiming that it is technologically impossible to provide lawful access without weakening security against unlawful access. Speaking at Fordham University in New York, he admitted that adding backdoors decreases security but that it is worth it. I wrote about all this, and more, in 2013.).

article thumbnail

When Your Smart ID Card Reader Comes With Malware

Krebs on Security

The trouble with Saicoo’s apparently infected drivers may be little more than a case of a technology company having their site hacked and responding poorly. “The Army Reserve started using CAC logon in May 2006,” Danberry wrote on his “About” page. Don’t worry.” Image: Militarycac.com.

Malware 353