SecureWorld News

NOVEMBER 21, 2023

In a groundbreaking investigative report, the European Investigative Collaborations (EIC) media network, with technical assistance from Amnesty International's Security Lab, has exposed the shocking extent of the global surveillance crisis and the glaring inadequacies of EU regulation in curbing it. Chairman, Cedric Leighton Associates, LLC.

Surveillance 124

Surveillance Spyware Media Technology 124

Security Affairs

FEBRUARY 6, 2022

One of the Apple iOS zero-day flaws exploited by the NSO group was also used by another surveillance firm named QuaDream. One of the vulnerabilities in Apple iOS that was previously exploited by the spyware developed by the Israeli company NSO Group was also separately used by another surveillance firm named QuaDream. as a zero-day.

Surveillance 98

Surveillance Spyware Government Hacking 98

SecureWorld News

APRIL 15, 2024

The change marks a direct call-out of companies like NSO Group that develop sophisticated commercial surveillance tools like Pegasus, which have been abused by authoritarian regimes to pull off "individually targeted attacks of such exceptional cost and complexity." Just last month, the U.S.

Spyware 113

Spyware Surveillance Risk Mobile 113

Security Affairs

SEPTEMBER 16, 2024

The IT giant fears that the disclosures of its threat intelligence related to commercial spyware operations could aid NSO and other surveillance firms. In November 2021, Apple sued NSO Group and its parent company Q Cyber Technologies in a U.S. ” reads the court filing.

Surveillance 119

Surveillance Spyware Risk Hacking 119

SecureList

NOVEMBER 29, 2021

The victim was infected by PowerShell malware and we discovered evidence that the actor had already stolen data from the victim and had been surveilling this victim for several months. Based on said files, we identified additional victims in South Korea and compromised web servers that have been utilized by ScarCruft since early 2021.

Surveillance 144

Surveillance Malware Phishing Encryption 144

Malwarebytes

MAY 8, 2025

The US federal government blacklisted it in 2021 for enabling foreign governments to spy on a range of people in acts of “transnational repression” The same year, investigative website The Pegasus Project alleged that the company targeted over 180 journalists around the world. NSO Group is no stranger to controversy.

Spyware 113

Spyware Hacking Surveillance Government 113

Security Affairs

APRIL 13, 2022

According to a report published by Reuters, an Israeli surveillance software was used to spy on senior officials in the European Commission. ” Security researchers said that Apple sent the warnings to its users targeted between February and September 2021. ” concludes the report. Pierluigi Paganini.

Surveillance 104

Surveillance Software Spyware Hacking 104

Security Affairs

AUGUST 27, 2021

Researchers from Nozomi Networks discovered a critical vulnerability that can be exploited to hack a video surveillance product made by Annke. The vulnerability, tracked as CVE-2021-32941 can be exploited by an attacker to hack a video surveillance product made by Annke, a provider of home and business security solutions.

Surveillance 102

Surveillance Hacking Firmware Manufacturing 102

SecureList

NOVEMBER 30, 2021

Possibly the biggest story of 2021, an investigation by the Guardian and 16 other media organizations, published in July, suggested that over 30,000 human rights activists, journalists and lawyers across the world may have been targeted using Pegasus. In parallel, Volexity also reported the same Exchange zero-days being in use in early 2021.

Malware 139

Malware Mobile Spyware Surveillance 139

The Hacker News

NOVEMBER 25, 2022

All these Chinese telecom and video surveillance companies were previously included in the Covered List as of March 12, 2021. The FCC is committed to protecting our national

Surveillance 99

Surveillance Risk 99

Security Affairs

JULY 19, 2023

government added surveillance technology vendors Cytrox and Intellexa to an economic blocklist for trafficking in cyber exploits. Government warns of the key role that surveillance technology plays in surveillance activities that can lead to repression and other human rights abuses. national security or foreign policy interests.

Surveillance 98

Surveillance Spyware Government Technology 98

Security Affairs

MAY 23, 2022

Google’s Threat Analysis Group (TAG) researchers discovered three campaigns, between August and October 2021, targeting Android users with five zero-day vulnerabilities. We assess the exploits were packaged by a single commercial surveillance company, Cytrox, and sold to different govt-backed actors. ” continues the report.

Spyware 144

Spyware Surveillance Government Banking 144

Security Affairs

JULY 28, 2022

The Microsoft Threat Intelligence Center (MSTIC) and the Microsoft Security Response Center (MSRC) researchers linked a threat group known as Knotweed to an Austrian surveillance firm named DSIRF, known for using multiple Windows and Adobe zero-day exploits. ” reads the report. £We Follow me on Twitter: @securityaffairs and Facebook.

Surveillance 100

Surveillance Malware Authentication Accountability 100

Security Affairs

APRIL 12, 2023

At least five members of civil society worldwide have been targeted with spyware and exploits developed by surveillance firm QuaDream. Citizen Lab researchers reported that at least five civil society members were victims of spyware and exploits developed by the Israeli surveillance firm QuaDream. ” concludes Citizen Lab.

Spyware 98

Spyware Surveillance Malware Government 98

WIRED Threat Level

DECEMBER 24, 2021

It was a year of ransomware, surveillance, data breaches, and yes, more ransomware.

Surveillance 108

Surveillance Hacking Data breaches Ransomware 108

Security Affairs

NOVEMBER 11, 2022

Lookout researchers discovered two long-running surveillance campaigns targeting the ethnic minority Uyghurs. Researchers from mobile security firm Lookout uncovered two long-running surveillance campaigns targeting the Uyghurs minority. List of installed packages. Call logs and geocoded location associated with the call. .”

Surveillance 98

Surveillance Spyware Malware Mobile 98

Malwarebytes

MAY 24, 2022

The Google Threat Analysis Group (TAG) has revealed that of the nine zero-day vulnerabilities affecting Chrome, Android, Apple and Microsoft that it reported in 2021, five were in use by a single commercial surveillance company. Citizenlab at the University of Toronto published information about Cytrox in December 2021.

Spyware 141

Spyware Surveillance Government Marketing 141

Security Boulevard

MAY 14, 2021

Our sincere thanks to CPDP 2021 - Computers, Privacy & Data Protection Conference for publishing their well-crafted videos on the organization's YouTube channel. The post CPDP 2021 – Moderator: Eleni Kosta ‘The Use Of Ai In State Surveillance: Challenges For Privacy’ appeared first on Security Boulevard.

Surveillance 64

Surveillance Education InfoSec Information Security 64

Naked Security

AUGUST 17, 2021

Home automation. Internet of Things. Cloud management. And a security bug that could let other people watch you online.

Surveillance 141

Surveillance Hacking Internet Internet 141

SecureList

NOVEMBER 26, 2021

IT threat evolution Q3 2021. IT threat evolution in Q3 2021. IT threat evolution in Q3 2021. While tracking this threat actor in spring 2021, we discovered a newer version. Targeted attacks exploiting CVE-2021-40444. PC statistics. Mobile statistics. Targeted attacks. WildPressure targets macOS.

Malware 135

Malware Banking Energy and Utilities Accountability 135

Security Affairs

NOVEMBER 8, 2021

Experts warn of an ongoing hacking campaign that already compromised at least nine organizations worldwide from critical sectors by exploiting CVE-2021-40539. In the middle of September, the FBI, CISA, and the Coast Guard Cyber Command (CGCYBER) warned that nation-state APT groups were actively exploiting the CVE-2021-40539 flaw.

Healthcare 121

Healthcare Password Management Financial Services Surveillance 121

Security Affairs

APRIL 1, 2023

Five of the issues added by CISA to its catalog are part of the exploits used by surveillance vendors to target mobile devices with their commercial spyware: CVE-2021-30900 – Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability.

Spyware 98

Spyware Surveillance Mobile Education 98

SecureList

JUNE 16, 2021

Two suspicious documents that were uploaded to VirusTotal in July 2020 and March 2021, and which seem to be operated by the same attackers, caught our attention. In this report we aim to provide more details on these findings and our own analysis on the mechanics of the MarkiRAT malware. Background.

Surveillance 145

Surveillance Malware Password Management Passwords 145

Threatpost

SEPTEMBER 28, 2021

A 'nearly impossible to analyze' version of the malware sports a bootkit and 'steal-everything' capabilities.

Surveillance 96

Surveillance Malware 96

SecureList

APRIL 27, 2021

This is our latest installment, focusing on activities that we observed during Q1 2021. In parallel, Volexity also reported the same Exchange zero-days being in use in early 2021. The group’s operations were exposed in 2018, showing that it was conducting surveillance attacks against individuals in the Middle East.

Malware 145

Malware Government Spyware Social Engineering 145

SecureList

MAY 31, 2021

On March 2, Microsoft released out-of-band patches for four zero-day vulnerabilities in Exchange Server that are being actively exploited in the wild (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065). It then downloads and installs the miner.

Malware 139

Malware Adware Encryption Architecture 139

Malwarebytes

JUNE 27, 2023

Chinese-made surveillance cameras find themselves in a spot of controversy, after a BBC investigation uncovered flaws in devices during several brand tests. Surveillance and webcam vulnerabilities are common, and we’ve covered them many times on our blog.

Surveillance 97

Surveillance Small Business Manufacturing Government 97

Security Affairs

JULY 14, 2021

Below the list of the zero-day issues disclosed by the experts: CVE-2021-1879: Use-After-Free in QuickTimePluginReplacement CVE-2021-21166: Chrome Object Lifecycle Issue in Audio CVE-2021-30551: Chrome Type Confusion in V8 CVE-2021-33742: Internet Explorer out-of-bounds write in MSHTML.

Surveillance 145

Surveillance Government Internet Internet 145

Security Affairs

APRIL 18, 2025

However, the limited, targeted nature of these attacks against iOS users suggests that commercial surveillance vendors or a nation-state actor likely exploited the flaws. “Around March 2021, 2025 , a campaign targeted government and private institutions in Poland and Romania. ” states Check Point.

Authentication 102

Authentication Surveillance Passwords Media 102

Krebs on Security

JULY 9, 2021

From surveillance camera footage examined by fraud investigators, the perpetrators have followed the same playbook in each incident. 2021 is going to be the same or worse for us than last year.” The bad guys show up in the early morning hours with a truck or tractor that’s been stolen from a local construction site.

Banking 357

Banking Insurance Surveillance Risk 357

Security Affairs

NOVEMBER 18, 2024

government surveillance. Amazon: €746 Million ($781 Million), 2021 In 2021, Amazon received a hefty fine for failing to secure proper consent for advertising cookies. Privacy Shield in 2020, Meta continued transferring data under a framework that was deemed insufficient to protect European citizens from U.S.

Data privacy 127

Data privacy Risk Surveillance Government 127

SecureWorld News

AUGUST 8, 2022

Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) released a joint Cybersecurity Advisory (CSA) providing details on the top malware strains of 2021. The top malware strains in 2021 included remote access Trojans (RATs), banking Trojans, information stealers, and ransomware.

Malware 98

Malware Banking Penetration Testing Healthcare 98

Security Boulevard

JANUARY 13, 2022

They arrested 800 people in 2021 based on that operation. The post Using Foreign Nationals to Bypass US Surveillance Restrictions appeared first on Security Boulevard. Remember when the US and Australian police surreptitiously owned and operated the encrypted cell phone app ANOM?

Surveillance 64

Surveillance Encryption 64

Security Affairs

NOVEMBER 30, 2022

Google’s Threat Analysis Group (TAG) linked three exploitation frameworks to a Spanish surveillance spyware vendor named Variston. The vulnerabilities in Google, Microsoft and Mozilla exploited by the company were fixed in 2021 and early 2022. ” TAG concludes.

Spyware 109

Spyware Surveillance Risk Internet 109

Security Affairs

AUGUST 29, 2024

Russia-linked APT29 group was spotted reusing iOS and Chrome exploits previously developed by surveillance firms NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa.

Surveillance 135

Surveillance Government Hacking Encryption 135

Security Affairs

JULY 19, 2021

Pegasus Project investigation into the leak of 50,000 phone numbers of potential surveillance targets revealed the abuse of NSO Group’s spyware. Pegasus Project is the name of a large-scale investigation into the leak of 50,000 phone numbers of potential surveillance targets that revealed the abuse of NSO Group’s spyware.

Spyware 131

Spyware Government Surveillance Media 131

Malwarebytes

MARCH 12, 2021

Hackers were able to gain access to camera feeds from Verkada, a tech company that specializes in video security and physical access control, to demonstrate how prevalent surveillance is, reports say. ” Kottmann was also credited for breaching Intel in August 2020 and Nissan Motors in January 2021. ” The fallout.

Hacking 124

Hacking Surveillance Computers and Electronics Accountability 124