Schneier on Security

JANUARY 5, 2021

The hackers managed their intrusion from servers inside the United States, exploiting legal prohibitions on the National Security Agency from engaging in domestic surveillance and eluding cyberdefenses deployed by the Department of Homeland Security.

Hacking 357

Hacking System Administration Software Surveillance 357

The Hacker News

MAY 12, 2023

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.

Surveillance 129

Surveillance Malware Internet Internet 129

Security Affairs

APRIL 5, 2025

The vulnerability in the Verizon Call Filter apps /clr/callLogRetrieval endpoint, although authentication was enforced via JWT tokens, the server failed to verify that the phone number in the header matched the tokens user ID ( sub ). Call metadata can enable real-time surveillance if misused.

Wireless 103

Wireless Surveillance Risk Media 103

Adam Levin

DECEMBER 18, 2018

The report issued by the Inspector General’s office details several basic lapses in security protocols at five separate locations, including: A lack of multifactor authentication to access BMDS technical information. Known and unpatched network vulnerabilities dating back as far as 1990. No physical locks on server racks.

Risk 199

Risk Cybersecurity Surveillance Government 199

Krebs on Security

SEPTEMBER 12, 2023

Citizen Lab says the bug it discovered was being exploited to install spyware made by the Israeli cyber surveillance company NSO Group. Tom Bowyer , manager of product security at Automox , said exploiting this vulnerability could lead to the disclosure of Net-NTLMv2 hashes , which are used for authentication in Windows environments.

Spyware 308

Spyware Software Surveillance Authentication 308

Malwarebytes

FEBRUARY 13, 2022

Twitter is transitioning away from from its two-factor authentication (2FA) provider, Mitto AG, a Swiss communications company. The companies that bought the access reportedly used it to help governments conduct secret surveillance against users through their phones. So where does that leave Twitter users who use SMS 2FA?

Surveillance 76

Surveillance Mobile Media Marketing 76

Krebs on Security

AUGUST 5, 2019

If you bank online and choose weak or re-used passwords, there’s a decent chance your account could be pilfered by cyberthieves — even if your bank offers multi-factor authentication as part of its login process. Crooks are constantly probing bank Web sites for customer accounts protected by weak or recycled passwords.

Banking 276

Banking Passwords Risk Accountability 276

The Last Watchdog

FEBRUARY 6, 2019

This week civil liberties groups in Europe won the right to challenge the UK’s bulk surveillance activities in the The Grand Chamber of the European Court of Human Rights. Related: Snowden on unrestrained surveillance. Ubiquitous surveillance. Last November, SureID , a fingerprint services vendor based in Portland, Ore.,

Surveillance 157

Surveillance Technology Retail Artificial Intelligence 157

Malwarebytes

APRIL 9, 2025

The lawsuit claims that this gave Bathula login credentials for the victims’ personal accounts and systems, including bank accounts, emails, home surveillance systems, Dropbox accounts, Google Drives, dating applications, Google Nests, and iCloud accounts. Use multi-factor authentication.

Accountability 84

Accountability Spyware Passwords Password Management 84

Krebs on Security

JUNE 17, 2020

The CIA produced the report in October 2017, roughly seven months after Wikileaks began publishing Vault 7 — reams of classified data detailing the CIA’s capabilities to perform electronic surveillance and cyber warfare.

Data breaches 341

Data breaches Security Awareness Surveillance Media 341

The Last Watchdog

NOVEMBER 19, 2018

Tech advances are accelerating the use of facial recognition as a reliable and ubiquitous mass surveillance tool, privacy advocates warn. A string of advances in biometric authentication systems has brought facial recognition systems, in particular, to the brink of wide commercial use. Related: Drivers behind facial recognition boom.

Surveillance 153

Surveillance Marketing Technology Authentication 153

Security Affairs

MARCH 29, 2025

Data Theft: Captures Google Authenticator screen content to steal OTP codes. Camera Access: Starts front camera streaming for potential identity theft or surveillance. Crocodilus steals OTP codes from Google Authenticator via Accessibility Logging, enabling account takeovers.

Banking 67

Banking Mobile Identity Theft Malware 67

Krebs on Security

AUGUST 7, 2018

Unauthorized SIM swaps often are perpetrated by fraudsters who have already stolen or phished a target’s password, as many banks and online services rely on text messages to send users a one-time code that needs to be entered in addition to a password for online authentication.

Mobile 252

Mobile Cryptocurrency Computers and Electronics Scams 252

Threatpost

DECEMBER 30, 2020

Stolen email credentials are being used to hijack home surveillance devices, such as Ring, to call police with a fake emergency, then watch the chaos unfold.

Surveillance 140

Surveillance Authentication IoT Government 140

Security Affairs

JULY 31, 2022

. “We’re publishing the details of a new vulnerability (tracked under CVE-2022-30563) affecting the implementation of the Open Network Video Interface Forum (ONVIF) WS-UsernameToken authentication mechanism in some IP cameras developed by Dahua, a very popular manufacturer of IP-based surveillance solutions.”

Surveillance 145

Surveillance Authentication Telecommunications Manufacturing 145

Security Affairs

JANUARY 19, 2025

The Planet WGS-804HPT industrial switch is used in building and home automation networks to provide connectivity of Internet of things (IoT) devices, IP surveillance cameras, and wireless LAN network applications. This switch family is equipped with a web service and SNMP management interface. ” reads the advisory published by Claroty.

Firmware 68

Firmware IoT Wireless Surveillance 68

Schneier on Security

MARCH 13, 2019

And if you read his 3,000-word post carefully, Zuckerberg says nothing about changing Facebook's surveillance capitalism business model. Most recently, the company used phone numbers provided for two-factor authentication for advertising and networking purposes. Better use of Facebook data to prevent violence.

Advertising 244

Advertising Surveillance Engineering Encryption 244

Security Affairs

DECEMBER 14, 2022

Businesses and homeowners increasingly rely on internet protocol (IP) cameras for surveillance. While the default security settings have improved over the review period, some popular brands either offer default passwords or no authentication, meaning anyone can spy on the spies. This time, the Cybernews research team found 3.5

Surveillance 145

Surveillance Manufacturing Internet Internet 145

Security Affairs

AUGUST 29, 2024

Russia-linked APT29 group was spotted reusing iOS and Chrome exploits previously developed by surveillance firms NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa.

Surveillance 134

Surveillance Government Hacking Encryption 134

The Last Watchdog

AUGUST 1, 2022

If all goes smoothly, surveillance cams, smart doorbells and robot vacuums would soon follow. Nelson: The security challenges present in many smart home devices include device identity, proper authentication (user and device), confidentiality of sensitive data, and integrity of software. Secured unicast and group communications.

Manufacturing 250

Manufacturing IoT Surveillance Authentication 250

Security Affairs

JANUARY 2, 2021

According to the alert issued by the FBI, the swatters have been hijacking smart devices such as video and audio capable home surveillance devices. “Recently, offenders have been using victims’ smart devices, including video and audio capable home surveillance devices, to carry out swatting attacks.

Passwords 144

Passwords Surveillance Manufacturing Accountability 144

The Last Watchdog

DECEMBER 31, 2019

Muthukrishnan Access control, surveillance , and testing are the three major components that comprise the physical security of a system. Surveillance includes monitoring and detecting intruders into the network. One such measure is to authenticate the users who can access the server.

Cyber Risk 173

Cyber Risk Risk Firewall Surveillance 173

Security Boulevard

FEBRUARY 17, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Kagi also introduces Privacy Pass, which allows users to authenticate to servers (like Kagi's) without revealing their identity; this should ensure searches are unlinkable to accounts. Tips for finding old accounts. CVE-2025-21391.

Surveillance 52

Surveillance Data breaches VPN Malware 52

Security Boulevard

MARCH 17, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Kagi Search introduces Privacy Pass authentication AlternativeTo Kagi officially rolls out Privacy Pass support for its Android app. Tuta also shares planned updates "coming soon" to Tuta Mail.

Surveillance 59

Surveillance Data breaches Spyware Malware 59

SecureWorld News

APRIL 3, 2025

Category 1: "The problem doesn't exist" Their Attack: "We've never required multi-factor authentication for internal applications before, and we haven't had any major breaches. Companies that don't adapt their authentication practices to today's threats are increasingly becoming victims of costly breaches."

Ransomware 71

Ransomware CISO Authentication Healthcare 71

The Last Watchdog

SEPTEMBER 17, 2018

Machine to machine connection and communication needs to be authenticated to access systems, so this technology is where the rubber meets the road, with respect to this debate. The government wants to be able to surveil network traffic and They want backdoors so they can see everything.

Encryption 157

Encryption Government Surveillance Technology 157

The Security Ledger

AUGUST 21, 2020

In this episode of the Security Ledger Podcast (#188), sponsored* by LastPass, we take a look at the fast-expanding world of crowdsourced surveillance by doing a deep dive on Flock Safety, a start up that sells inexpensive license plate scanners to homeowners and police departments. Flying in Surveillance’s Gray Zone.

Surveillance 52

Surveillance Passwords Technology Internet 52

Krebs on Security

NOVEMBER 7, 2018

” “Fraudsters were also observed on criminal forums discussing using the Informed Delivery service to surveil potential identity theft victims,” the Secret Service memo reads. The final step in validating residents involves answering four so-called “knowledge-based authentication” or KBA questions.

Identity Theft 279

Identity Theft Advertising Accountability Banking 279

The Last Watchdog

JANUARY 6, 2022

As a result, The majority of businesses (55 percent) are using some sort of a tool to monitor for insider threats; including data leak prevention (DLP) software (54 percent), user behavior analytics (UBA) software (50 percent), and employee monitoring and surveillance (47 percent).

Marketing 279

Marketing Software Surveillance Information Security 279

Threatpost

SEPTEMBER 21, 2020

A new Android malware strain has been uncovered, part of the Rampant Kitten threat group's widespread surveillance campaign that targets Telegram credentials and more.

Malware 120

Malware Passwords Surveillance Authentication 120

Duo's Security Blog

JULY 1, 2021

Tall Tale #1: PINs Are Just Passwords In Part 1 , we talked about how passwordless authentication is still multi-factor: Possession of a private key, ideally stored on a piece of secure hardware A biometric or PIN the authenticator uses to locally verify the user’s identity Reasoning about a PIN being used as a factor is simpler than a biometric.

Passwords 98

Passwords Surveillance Authentication Risk 98

The Security Ledger

AUGUST 21, 2020

In this episode of the Security Ledger Podcast (#188), sponsored* by LastPass, we take a look at the fast-expanding world of crowdsourced surveillance by doing a deep dive on Flock Safety, a start up that sells inexpensive license plate scanners to homeowners and police departments. Flying in Surveillance’s Gray Zone.

Surveillance 52

Surveillance Passwords Technology Internet 52

CyberSecurity Insiders

MAY 14, 2023

Cloud providers implement access controls through authentication and authorization. Authentication is the process of verifying a user’s identity, while authorization is the process of granting or denying access based on the user’s identity and privileges.

Hacking 128

Hacking Antivirus Firewall Encryption 128

Security Affairs

OCTOBER 9, 2020

Cisco fixed three high-severity flaws in Webex video conferencing system, Video Surveillance 8000 Series IP Cameras and Identity Services Engine. The most severe of these vulnerabilities is a Remote Code Execution and Denial of Service issue in Cisco’s Video Surveillance 8000 Series IP Cameras. received a CVSS score of 8.8

Surveillance 98

Surveillance Engineering Advertising Authentication 98

Schneier on Security

JANUARY 18, 2019

It only affects the authentication that assures people of whom they are talking to. I have long maintained that we need to adopt a defense-dominant strategy : We should prioritize our need for security over our need for surveillance. On the surface, this isn't a big ask.

Encryption 274

Encryption Government Surveillance Hacking 274

Schneier on Security

JANUARY 14, 2020

These insecurities are a result of market forces that prioritize costs over security and of governments, including the United States, that want to preserve the option of surveillance in 5G networks. But the enhancements aren't enough. The 5G security problems are threefold. First, the standards are simply too complex to implement securely.

Data collection 279

Data collection Software Marketing Government 279

Security Affairs

OCTOBER 5, 2020

In 2015, the hacker who breached the systems of the Italian surveillance firm Hacking Team leaked a 400GB package containing hacking tools and exploits codes. Such a scenario would typically require exploiting vulnerabilities in the BIOS update authentication process.

Firmware 145

Firmware Spyware Surveillance Hacking 145