Schneier on Security

OCTOBER 14, 2024

It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua Security said. Something this complex and impressive implies that a government is behind this.

Malware 256

Malware Cryptocurrency Internet Internet 256

Schneier on Security

JUNE 21, 2022

Two bills attempting to reduce the power of Internet monopolies are currently being debated in Congress: S. Reducing the power to tech monopolies would do more to “fix” the Internet than any other single action, and I am generally in favor of them both. 2992, the American Innovation and Choice Online Act ; and S.

Internet 334

Internet Internet Encryption Backups 334

The Last Watchdog

FEBRUARY 10, 2025

Were just getting started down the road to the Internet of Everything (IoE.) Not coincidentally, industry standards groups and government regulators have stepped forward to embrace a vital supporting role. Governments and standards bodies are taking note.

Internet 130

Internet Internet IoT Manufacturing 130

Security Affairs

DECEMBER 3, 2024

Poland probes Pegasus spyware abuse under the PiS government; ex-security chief Piotr Pogonowski arrested to testify before parliament. Poland’s government has been investigating the alleged misuse of Pegasus spyware by the previous administration and arrested the former head of Poland’s internal security service Piotr Pogonowski.

Spyware 115

Spyware Government Surveillance Hacking 115

Schneier on Security

DECEMBER 5, 2023

Before the internet, putting someone under surveillance was expensive and time-consuming. Surveillance has become the business model of the internet, and there’s no reasonable way for us to opt out of it. Governments around the world already use mass surveillance; they will engage in mass spying as well. They conform.

Surveillance 361

Surveillance Internet Internet Government 361

Krebs on Security

FEBRUARY 28, 2025

BEARHOST prides itself on the ability to evade blocking by Spamhaus , an organization that many Internet service providers around the world rely on to help identify and block sources of malware and spam. government for its hacking operations, CEO Eugene Kaspersky says he ordered workers to delete the code. Last year, the U.S.

Malware 245

Malware Antivirus Software DDOS 245

Schneier on Security

FEBRUARY 12, 2025

The TL;DR is that this time, we ended up discovering ~150 Amazon S3 buckets that had previously been used across commercial and open source software products, governments, and infrastructure deployment/update pipelines—and then abandoned. This is basically the SolarWinds attack, but much more extensive.

Malware 289

Malware Software Internet Internet 289

Security Affairs

NOVEMBER 14, 2024

government officials. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. A cyberattack tied to the Chinese government penetrated the networks of a swath of U.S. broadband providers is still ongoing, government experts are assessing its scope.

Government 109

Government Telecommunications Surveillance Risk 109

Krebs on Security

NOVEMBER 9, 2024

The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based based technology companies.

Hacking 283

Hacking Accountability Government Social Engineering 283

Security Affairs

NOVEMBER 14, 2024

government officials. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. A cyberattack tied to the Chinese government penetrated the networks of a swath of U.S. broadband providers is still ongoing, government experts are assessing its scope.

Government 110

Government Telecommunications Surveillance Risk 110

Schneier on Security

OCTOBER 21, 2020

Most of the vulnerabilities listed below can be exploited to gain initial access to victim networks using products that are directly accessible from the Internet and act as gateways to internal networks.

Hacking 321

Hacking Government Internet Internet 321

Krebs on Security

DECEMBER 4, 2024

government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies. government’s “Wanted” poster for him.

Cybercrime 235

Cybercrime Ransomware Cryptocurrency Government 235

Schneier on Security

APRIL 3, 2025

The CIA triad has evolved with the Internet. the Internet of today. For example, the 5G communications revolution isn’t just about faster access to videos; it’s about Internet-connected things talking to other Internet-connected things without our intervention. The first iteration of the Web—Web 1.0

Artificial Intelligence 247

Artificial Intelligence Architecture Internet Internet 247

Krebs on Security

MARCH 27, 2025

Researchers at the security firm Silent Push mapped a network of several dozen phishing domains that spoof the recruitment websites of Ukrainian paramilitary groups, as well as Ukrainian government intelligence sites. The website legiohliberty[.]army army features a carbon copy of the homepage for the Freedom of Russia Legion (a.k.a.

Phishing 216

Phishing Government Engineering Internet 216

Schneier on Security

SEPTEMBER 16, 2024

CISA wants everyone—and government agencies in particular—to remove or upgrade an Ivanti Cloud Service Appliance (CSA) that is no longer being supported. Welcome to the security nightmare that is the Internet of Things.

Internet 292

Internet Internet Government 292

Thales Cloud Protection & Licensing

FEBRUARY 11, 2025

Together for a Better Internet: Celebrating Safer Internet Day 2025 andrew.gertz@t Tue, 02/11/2025 - 14:57 At a time when technology is integral to our lives, Safer Internet Day (SID) has never been more relevant. These measures align perfectly with the spirit of Safer Internet Day. With an estimated 5.8

Internet 62

Internet Internet Education Technology 62

Adam Shostack

JANUARY 2, 2025

Thats why a group of us, led by Evan Lam and Sudheesh Singanamalla, have a new short paper* in NDSS, On the (In)Security of Government Web and Mail Infrastructure : Abstract: Government web infrastructure is a critical part of todays Internet and the functioning of society.

Government 130

Government DNS Internet Internet 130

Krebs on Security

MAY 29, 2024

” The arrest coincided with the seizure of the 911 S5 website and supporting infrastructure, which the government says turned computers running various “free VPN” products into Internet traffic relays that facilitated billions of dollars in online fraud and cybercrime. government.

VPN 347

VPN Government Cybercrime Internet 347

Joseph Steinberg

JULY 17, 2023

Among the leaked data were briefings on domestic US terrorism marked “For Official Use Only,” a global counter-terrorism assessment document with the words “Not Releasable to the Public or Foreign Governments” on its cover, crew lists for ships, and maps and photos of military bases. Now that the government of Mali is administering the.ML

Government 245

Government Artificial Intelligence Technology VPN 245

Krebs on Security

MARCH 11, 2022

As their cities suffered more intense bombardment by Russian military forces this week, Ukrainian Internet users came under renewed cyberattacks, with one Internet company providing service there saying they blocked ten times the normal number of phishing and malware attacks targeting Ukrainians.

DNS 332

DNS Internet Internet Phishing 332

Krebs on Security

MAY 23, 2024

Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. Image: SentinelOne.com.

DDOS 327

DDOS Internet Internet Government 327

Schneier on Security

OCTOBER 18, 2023

Amnesty International has published a comprehensive analysis of the Predator government spyware products. This is the legacy of not securing the Internet when we could have. These technologies used to be the exclusive purview of organizations like the NSA.

Spyware 328

Spyware Internet Internet Government 328

Krebs on Security

MARCH 5, 2021

On March 2, Microsoft released emergency security updates to plug four security holes in Exchange Server versions 2013 through 2019 that hackers were actively using to siphon email communications from Internet-facing systems running Exchange. The web shell gives the attackers administrative access to the victim’s computer servers.

Hacking 364

Hacking Software Government Internet 364

Krebs on Security

JANUARY 16, 2025

Merrill said the different purveyors of these SMS phishing tools traditionally have impersonated shipping companies, customs authorities, and even governments with tax refund lures and visa or immigration renewal scams targeting people who may be living abroad or new to a country.

Phishing 302

Phishing Scams Mobile Passwords 302

The Last Watchdog

NOVEMBER 12, 2024

In some jurisdictions, this line is most-effectively drawn by a government-appointed privacy commissioner who is required to remain neutral and yet ultimately serves the citizens of its country. Set clear standards on what is required by the private sector, and what the government will do to assist with cybersecurity.

CISO 263

CISO CSO Risk Cyber threats 263

Security Affairs

DECEMBER 2, 2024

The Tor Project seeks help deploying 200 WebTunnel bridges by year-end to counter government censorship. “We are calling on the Tor community and the Internet freedom community to help us scale up WebTunnel bridges. If you’ve ever thought about running a Tor bridge, now is the time.

Government 124

Government Internet Internet Hacking 124

Schneier on Security

DECEMBER 13, 2021

NSO Group’s descent into Internet pariah status continues. Its Pegasus spyware was used against nine US State Department employees. We don’t know which NSO Group customer trained the spyware on the US. ” .

Spyware 352

Spyware Internet Internet Government 352

Security Affairs

NOVEMBER 10, 2024

The US government’s Consumer Financial Protection Bureau (CFPB) advises employees to avoid using cellphones for work after China-linked APT group Salt Typhoon hackers breached major telecom providers. internet service providers in recent months as part of a cyber espionage campaign code-named Salt Typhoon. Wall Street Journal reported.

Hacking 127

Hacking Internet Internet Government 127

Adam Shostack

JANUARY 2, 2025

[no description provided] Today, a global coalition led by civil society and technology experts sent a letter asking the government of Australia to abandon plans to introduce legislation that would undermine strong encryption.

Internet 130

Internet Internet Government Manufacturing 130

Krebs on Security

OCTOBER 17, 2023

Golestan’s sentencing comes nearly two years after he pleaded guilty to using an elaborate network of phony companies to secure more than 735,000 Internet Protocol (IP) addresses from the American Registry for Internet Numbers (ARIN), the nonprofit which oversees IP addresses assigned to entities in the U.S.,

Internet 346

Internet Internet VPN Marketing 346

Security Affairs

JANUARY 18, 2025

telecommunication and internet service providers. government IT systems and critical infrastructure. government systems, including the recent targeting of Treasurys information technology (IT) systems, as well as sensitive U.S. China-linked threat actors persistently target U.S. critical infrastructure.” national security.”

Cybersecurity 117

Cybersecurity Telecommunications Government Healthcare 117

Krebs on Security

SEPTEMBER 16, 2021

man charged in 2018 with operating two online services that allowed paying customers to launch powerful distributed denial-of-service (DDoS) attacks against Internet users and websites. A jury in California today reached a guilty verdict in the trial of Matthew Gatrel , a St. Charles, Ill. The user interface for Downthem[.]org.

DDOS 351

DDOS DNS Internet Internet 351

Security Affairs

NOVEMBER 28, 2024

Many reports claim these bad actors have gained access to some providers’ customer information over an extended period of time – phone calls, text messages, and other sensitive information, particularly from government officials. Connectivity to a compromised provider was interrupted, and T-Mobile notified industry and government leaders.

Mobile 113

Mobile Government Telecommunications Internet 113

Schneier on Security

MARCH 8, 2024

An Argument for More Dialogues in Academia Aditi Juneja, Ensuring We Have A Democracy in 2076 Nick Couldry, Resonance, Not Scalability Jon Evans, Experimentocracy Nathan Schneider, Democracy On, Not Just Around, the Internet Eugene Fischer, The Enrichment and Decay of Ionia We are starting to think about IWORD 2024 this December.

Government 287

Government Internet Internet 287

Schneier on Security

JANUARY 7, 2025

officials say employed workers responsible for the Flax Typhoon attacks which compromised devices including routers and internet-enabled cameras to infiltrate government and industrial targets in the United States, Taiwan, Europe and elsewhere.

Internet 239

Internet Internet Government Technology 239

Malwarebytes

APRIL 3, 2025

Mobile VPNs are apps that connect your smartphone to the internet via different computers around the world. Be wary of VPNs based in countries that require intelligence-sharing with their governments Look for these security features: Strong encryption protocols (like 256-bit ChaCha20) are vital.

VPN 138

VPN Mobile Government Technology 138

Schneier on Security

SEPTEMBER 19, 2024

The FBI has shut down a botnet run by Chinese hackers: The botnet malware infected a number of different types of internet-connected devices around the world, including home routers, cameras, digital video recorders, and NAS drives.

Telecommunications 292

Telecommunications Media Malware Internet 292