Security Affairs

AUGUST 27, 2021

Researchers from Nozomi Networks discovered a critical vulnerability that can be exploited to hack a video surveillance product made by Annke. The vulnerability, tracked as CVE-2021-32941 can be exploited by an attacker to hack a video surveillance product made by Annke, a provider of home and business security solutions.

Surveillance 102

Surveillance Hacking Firmware Manufacturing 102

Security Affairs

JULY 28, 2022

The Microsoft Threat Intelligence Center (MSTIC) and the Microsoft Security Response Center (MSRC) researchers linked a threat group known as Knotweed to an Austrian surveillance firm named DSIRF, known for using multiple Windows and Adobe zero-day exploits. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Surveillance 100

Surveillance Malware Authentication Accountability 100

SecureList

NOVEMBER 29, 2021

The victim was infected by PowerShell malware and we discovered evidence that the actor had already stolen data from the victim and had been surveilling this victim for several months. To surveil the victim, the list includes target folders as well as /Camera, /Recordings, /KakaoTalk (a renowned Korean messenger), /??(documents),

Surveillance 144

Surveillance Malware Phishing Encryption 144

Schneier on Security

JANUARY 5, 2021

The hackers managed their intrusion from servers inside the United States, exploiting legal prohibitions on the National Security Agency from engaging in domestic surveillance and eluding cyberdefenses deployed by the Department of Homeland Security.

Hacking 360

Hacking System Administration Software Surveillance 360

The Hacker News

MAY 12, 2023

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.

Surveillance 131

Surveillance Malware Internet Internet 131

Adam Levin

DECEMBER 18, 2018

The report issued by the Inspector General’s office details several basic lapses in security protocols at five separate locations, including: A lack of multifactor authentication to access BMDS technical information. Known and unpatched network vulnerabilities dating back as far as 1990. No physical locks on server racks.

Risk 199

Risk Cybersecurity Surveillance Government 199

Krebs on Security

SEPTEMBER 12, 2023

Citizen Lab says the bug it discovered was being exploited to install spyware made by the Israeli cyber surveillance company NSO Group. Tom Bowyer , manager of product security at Automox , said exploiting this vulnerability could lead to the disclosure of Net-NTLMv2 hashes , which are used for authentication in Windows environments.

Spyware 301

Spyware Software Surveillance Authentication 301

SecureWorld News

APRIL 28, 2025

This kind of contextual authenticity is what makes synthetic sabotage so dangerous. These attacks don't just target specific bits of informationtheir goal are entire surveillance systems , production workflows, and collections of trade secrets. It learns the cadence, the in-jokes, the formatting quirks. What are we doing about it?

Phishing 104

Phishing Social Engineering Engineering Data breaches 104

Krebs on Security

AUGUST 5, 2019

If you bank online and choose weak or re-used passwords, there’s a decent chance your account could be pilfered by cyberthieves — even if your bank offers multi-factor authentication as part of its login process. Crooks are constantly probing bank Web sites for customer accounts protected by weak or recycled passwords.

Banking 276

Banking Passwords Risk Accountability 276

Security Affairs

APRIL 5, 2025

The vulnerability in the Verizon Call Filter apps /clr/callLogRetrieval endpoint, although authentication was enforced via JWT tokens, the server failed to verify that the phone number in the header matched the tokens user ID ( sub ). Call metadata can enable real-time surveillance if misused.

Wireless 104

Wireless Surveillance Risk Media 104

Malwarebytes

APRIL 9, 2025

The lawsuit claims that this gave Bathula login credentials for the victims’ personal accounts and systems, including bank accounts, emails, home surveillance systems, Dropbox accounts, Google Drives, dating applications, Google Nests, and iCloud accounts. Use multi-factor authentication.

Accountability 102

Accountability Spyware Passwords Password Management 102

The Last Watchdog

FEBRUARY 6, 2019

This week civil liberties groups in Europe won the right to challenge the UK’s bulk surveillance activities in the The Grand Chamber of the European Court of Human Rights. Related: Snowden on unrestrained surveillance. Ubiquitous surveillance. Last November, SureID , a fingerprint services vendor based in Portland, Ore.,

Surveillance 157

Surveillance Technology Retail Artificial Intelligence 157

Krebs on Security

JUNE 17, 2020

The CIA produced the report in October 2017, roughly seven months after Wikileaks began publishing Vault 7 — reams of classified data detailing the CIA’s capabilities to perform electronic surveillance and cyber warfare.

Data breaches 342

Data breaches Security Awareness Surveillance Media 342

The Last Watchdog

NOVEMBER 19, 2018

Tech advances are accelerating the use of facial recognition as a reliable and ubiquitous mass surveillance tool, privacy advocates warn. A string of advances in biometric authentication systems has brought facial recognition systems, in particular, to the brink of wide commercial use. Related: Drivers behind facial recognition boom.

Surveillance 153

Surveillance Marketing Technology Authentication 153

Security Affairs

JANUARY 19, 2025

The Planet WGS-804HPT industrial switch is used in building and home automation networks to provide connectivity of Internet of things (IoT) devices, IP surveillance cameras, and wireless LAN network applications. This switch family is equipped with a web service and SNMP management interface. ” reads the advisory published by Claroty.

Firmware 69

Firmware IoT Wireless Surveillance 69

Threatpost

DECEMBER 30, 2020

Stolen email credentials are being used to hijack home surveillance devices, such as Ring, to call police with a fake emergency, then watch the chaos unfold.

Surveillance 140

Surveillance Authentication IoT Government 140

Security Affairs

JULY 31, 2022

. “We’re publishing the details of a new vulnerability (tracked under CVE-2022-30563) affecting the implementation of the Open Network Video Interface Forum (ONVIF) WS-UsernameToken authentication mechanism in some IP cameras developed by Dahua, a very popular manufacturer of IP-based surveillance solutions.”

Surveillance 145

Surveillance Authentication Telecommunications Manufacturing 145

Schneier on Security

MARCH 13, 2019

And if you read his 3,000-word post carefully, Zuckerberg says nothing about changing Facebook's surveillance capitalism business model. Most recently, the company used phone numbers provided for two-factor authentication for advertising and networking purposes. Better use of Facebook data to prevent violence.

Advertising 249

Advertising Surveillance Engineering Encryption 249

Krebs on Security

AUGUST 7, 2018

Unauthorized SIM swaps often are perpetrated by fraudsters who have already stolen or phished a target’s password, as many banks and online services rely on text messages to send users a one-time code that needs to be entered in addition to a password for online authentication.

Mobile 246

Mobile Cryptocurrency Computers and Electronics Scams 246

Security Affairs

DECEMBER 14, 2022

Businesses and homeowners increasingly rely on internet protocol (IP) cameras for surveillance. While the default security settings have improved over the review period, some popular brands either offer default passwords or no authentication, meaning anyone can spy on the spies. This time, the Cybernews research team found 3.5

Surveillance 145

Surveillance Manufacturing Internet Internet 145

Security Affairs

MARCH 29, 2025

Data Theft: Captures Google Authenticator screen content to steal OTP codes. Camera Access: Starts front camera streaming for potential identity theft or surveillance. Crocodilus steals OTP codes from Google Authenticator via Accessibility Logging, enabling account takeovers.

Banking 67

Banking Mobile Identity Theft Malware 67

Security Affairs

AUGUST 29, 2024

Russia-linked APT29 group was spotted reusing iOS and Chrome exploits previously developed by surveillance firms NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa. using exploits previously used by surveillance software vendors NSO Group and Intellexa.

Surveillance 135

Surveillance Government Hacking Encryption 135

The Last Watchdog

AUGUST 1, 2022

If all goes smoothly, surveillance cams, smart doorbells and robot vacuums would soon follow. Nelson: The security challenges present in many smart home devices include device identity, proper authentication (user and device), confidentiality of sensitive data, and integrity of software. Secured unicast and group communications.

Manufacturing 250

Manufacturing IoT Surveillance Authentication 250

Security Affairs

JANUARY 2, 2021

According to the alert issued by the FBI, the swatters have been hijacking smart devices such as video and audio capable home surveillance devices. “Recently, offenders have been using victims’ smart devices, including video and audio capable home surveillance devices, to carry out swatting attacks.

Passwords 144

Passwords Surveillance Manufacturing Accountability 144

The Last Watchdog

DECEMBER 31, 2019

Muthukrishnan Access control, surveillance , and testing are the three major components that comprise the physical security of a system. Surveillance includes monitoring and detecting intruders into the network. One such measure is to authenticate the users who can access the server.

Cyber Risk 173

Cyber Risk Risk Firewall Surveillance 173

Security Boulevard

APRIL 17, 2025

One that did not contend with persistent threats, state-sponsored campaigns, and AI-powered surveillance. Legacy firewalls and VPNs may have served us well, but they were built for a different era.

Firewall 64

Firewall VPN Encryption Architecture 64

Security Boulevard

FEBRUARY 17, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Kagi also introduces Privacy Pass, which allows users to authenticate to servers (like Kagi's) without revealing their identity; this should ensure searches are unlinkable to accounts. Tips for finding old accounts. CVE-2025-21391.

Surveillance 52

Surveillance Data breaches VPN Malware 52

The Last Watchdog

SEPTEMBER 17, 2018

Machine to machine connection and communication needs to be authenticated to access systems, so this technology is where the rubber meets the road, with respect to this debate. The government wants to be able to surveil network traffic and They want backdoors so they can see everything.

Encryption 157

Encryption Government Surveillance Technology 157

The Security Ledger

AUGUST 21, 2020

In this episode of the Security Ledger Podcast (#188), sponsored* by LastPass, we take a look at the fast-expanding world of crowdsourced surveillance by doing a deep dive on Flock Safety, a start up that sells inexpensive license plate scanners to homeowners and police departments. Flying in Surveillance’s Gray Zone.

Surveillance 52

Surveillance Passwords Technology Internet 52

Krebs on Security

NOVEMBER 7, 2018

” “Fraudsters were also observed on criminal forums discussing using the Informed Delivery service to surveil potential identity theft victims,” the Secret Service memo reads. The final step in validating residents involves answering four so-called “knowledge-based authentication” or KBA questions.

Identity Theft 279

Identity Theft Advertising Accountability Banking 279

The Last Watchdog

JANUARY 6, 2022

As a result, The majority of businesses (55 percent) are using some sort of a tool to monitor for insider threats; including data leak prevention (DLP) software (54 percent), user behavior analytics (UBA) software (50 percent), and employee monitoring and surveillance (47 percent).

Marketing 279

Marketing Software Surveillance Information Security 279

Threatpost

SEPTEMBER 21, 2020

A new Android malware strain has been uncovered, part of the Rampant Kitten threat group's widespread surveillance campaign that targets Telegram credentials and more.

Malware 120

Malware Passwords Surveillance Authentication 120

Duo's Security Blog

JULY 1, 2021

Tall Tale #1: PINs Are Just Passwords In Part 1 , we talked about how passwordless authentication is still multi-factor: Possession of a private key, ideally stored on a piece of secure hardware A biometric or PIN the authenticator uses to locally verify the user’s identity Reasoning about a PIN being used as a factor is simpler than a biometric.

Passwords 98

Passwords Surveillance Authentication Risk 98

The Security Ledger

AUGUST 21, 2020

In this episode of the Security Ledger Podcast (#188), sponsored* by LastPass, we take a look at the fast-expanding world of crowdsourced surveillance by doing a deep dive on Flock Safety, a start up that sells inexpensive license plate scanners to homeowners and police departments. Flying in Surveillance’s Gray Zone.

Surveillance 52

Surveillance Passwords Internet Internet 52

CyberSecurity Insiders

MAY 14, 2023

Cloud providers implement access controls through authentication and authorization. Authentication is the process of verifying a user’s identity, while authorization is the process of granting or denying access based on the user’s identity and privileges.

Hacking 128

Hacking Antivirus Firewall Encryption 128

Security Boulevard

MARCH 17, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Kagi Search introduces Privacy Pass authentication AlternativeTo Kagi officially rolls out Privacy Pass support for its Android app. Tuta also shares planned updates "coming soon" to Tuta Mail.

Surveillance 59

Surveillance Data breaches Spyware Malware 59

SecureWorld News

APRIL 3, 2025

Category 1: "The problem doesn't exist" Their Attack: "We've never required multi-factor authentication for internal applications before, and we haven't had any major breaches. Companies that don't adapt their authentication practices to today's threats are increasingly becoming victims of costly breaches."

Ransomware 74

Ransomware CISO Authentication Healthcare 74