Joseph Steinberg

SEPTEMBER 6, 2022

Such risks are even more troubling when one considers that the federal government has taken all sorts of actions to remove various Chinese-made hardware from its various environments due to national security reasons, but State and Local governments have generally not followed suit. Consider, for example, sewage processing systems.

Government 363

Government Artificial Intelligence Cybersecurity Financial Services 363

Schneier on Security

JUNE 21, 2022

Two bills attempting to reduce the power of Internet monopolies are currently being debated in Congress: S. Reducing the power to tech monopolies would do more to “fix” the Internet than any other single action, and I am generally in favor of them both. 2992, the American Innovation and Choice Online Act ; and S.

Internet 337

Internet Internet Encryption Backups 337

Security Affairs

DECEMBER 3, 2024

Poland probes Pegasus spyware abuse under the PiS government; ex-security chief Piotr Pogonowski arrested to testify before parliament. Poland’s government has been investigating the alleged misuse of Pegasus spyware by the previous administration and arrested the former head of Poland’s internal security service Piotr Pogonowski.

Spyware 117

Spyware Government Surveillance Hacking 117

The Last Watchdog

FEBRUARY 10, 2025

Were just getting started down the road to the Internet of Everything (IoE.) Not coincidentally, industry standards groups and government regulators have stepped forward to embrace a vital supporting role. Governments and standards bodies are taking note.

Internet 130

Internet Internet IoT Manufacturing 130

Schneier on Security

FEBRUARY 12, 2025

The TL;DR is that this time, we ended up discovering ~150 Amazon S3 buckets that had previously been used across commercial and open source software products, governments, and infrastructure deployment/update pipelines—and then abandoned. This is basically the SolarWinds attack, but much more extensive.

Malware 299

Malware Software Internet Internet 299

Schneier on Security

DECEMBER 5, 2023

Before the internet, putting someone under surveillance was expensive and time-consuming. Surveillance has become the business model of the internet, and there’s no reasonable way for us to opt out of it. Governments around the world already use mass surveillance; they will engage in mass spying as well. They conform.

Surveillance 362

Surveillance Internet Internet Government 362

Security Affairs

NOVEMBER 14, 2024

government officials. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. A cyberattack tied to the Chinese government penetrated the networks of a swath of U.S. broadband providers is still ongoing, government experts are assessing its scope.

Government 111

Government Telecommunications Surveillance Risk 111

Schneier on Security

OCTOBER 21, 2020

Most of the vulnerabilities listed below can be exploited to gain initial access to victim networks using products that are directly accessible from the Internet and act as gateways to internal networks.

Hacking 331

Hacking Government Internet Internet 331

Security Affairs

NOVEMBER 14, 2024

government officials. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. A cyberattack tied to the Chinese government penetrated the networks of a swath of U.S. broadband providers is still ongoing, government experts are assessing its scope.

Government 112

Government Telecommunications Surveillance Risk 112

Krebs on Security

NOVEMBER 9, 2024

The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based based technology companies.

Hacking 275

Hacking Accountability Government Social Engineering 275

Krebs on Security

DECEMBER 4, 2024

government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies. government’s “Wanted” poster for him.

Cybercrime 227

Cybercrime Ransomware Cryptocurrency Government 227

Schneier on Security

FEBRUARY 8, 2022

Intelligence collectors are everywhere, and government spy agencies are drowning in data. Now everyone is racing for insight and the internet gives them tools to do it. Wired has an excerpt : In short, data volume and accessibility are revolutionizing sensemaking.

Internet 230

Internet Internet Technology Government 230

Schneier on Security

SEPTEMBER 16, 2024

CISA wants everyone—and government agencies in particular—to remove or upgrade an Ivanti Cloud Service Appliance (CSA) that is no longer being supported. Welcome to the security nightmare that is the Internet of Things.

Internet 302

Internet Internet Government 302

Adam Shostack

JANUARY 2, 2025

Thats why a group of us, led by Evan Lam and Sudheesh Singanamalla, have a new short paper* in NDSS, On the (In)Security of Government Web and Mail Infrastructure : Abstract: Government web infrastructure is a critical part of todays Internet and the functioning of society.

Government 130

Government DNS Internet Internet 130

Krebs on Security

MAY 29, 2024

” The arrest coincided with the seizure of the 911 S5 website and supporting infrastructure, which the government says turned computers running various “free VPN” products into Internet traffic relays that facilitated billions of dollars in online fraud and cybercrime. government.

VPN 342

VPN Government Cybercrime Internet 342

Krebs on Security

MARCH 11, 2022

As their cities suffered more intense bombardment by Russian military forces this week, Ukrainian Internet users came under renewed cyberattacks, with one Internet company providing service there saying they blocked ten times the normal number of phishing and malware attacks targeting Ukrainians.

DNS 327

DNS Internet Internet Phishing 327

Krebs on Security

MARCH 5, 2021

On March 2, Microsoft released emergency security updates to plug four security holes in Exchange Server versions 2013 through 2019 that hackers were actively using to siphon email communications from Internet-facing systems running Exchange. The web shell gives the attackers administrative access to the victim’s computer servers.

Hacking 364

Hacking Software Government Internet 364

Security Affairs

DECEMBER 2, 2024

The Tor Project seeks help deploying 200 WebTunnel bridges by year-end to counter government censorship. “We are calling on the Tor community and the Internet freedom community to help us scale up WebTunnel bridges. If you’ve ever thought about running a Tor bridge, now is the time.

Government 127

Government Internet Internet Hacking 127

Krebs on Security

JANUARY 16, 2025

Merrill said the different purveyors of these SMS phishing tools traditionally have impersonated shipping companies, customs authorities, and even governments with tax refund lures and visa or immigration renewal scams targeting people who may be living abroad or new to a country.

Phishing 299

Phishing Scams Mobile Passwords 299

Schneier on Security

DECEMBER 13, 2021

NSO Group’s descent into Internet pariah status continues. Its Pegasus spyware was used against nine US State Department employees. We don’t know which NSO Group customer trained the spyware on the US. ” .

Spyware 357

Spyware Internet Internet Government 357

Security Affairs

NOVEMBER 10, 2024

The US government’s Consumer Financial Protection Bureau (CFPB) advises employees to avoid using cellphones for work after China-linked APT group Salt Typhoon hackers breached major telecom providers. internet service providers in recent months as part of a cyber espionage campaign code-named Salt Typhoon. Wall Street Journal reported.

Hacking 130

Hacking Internet Internet Government 130

Security Affairs

MARCH 16, 2025

A Micronesian state suffered a ransomware attack and was forced to shut down all computers of its government health agency. A state in Micronesia, the state of Yap, suffered a ransomware attack, forcing the shutdown of all computers in its government health agency. In response, the whole network was taken offline.

Ransomware 116

Ransomware Government Internet Internet 116

Schneier on Security

MARCH 8, 2024

An Argument for More Dialogues in Academia Aditi Juneja, Ensuring We Have A Democracy in 2076 Nick Couldry, Resonance, Not Scalability Jon Evans, Experimentocracy Nathan Schneider, Democracy On, Not Just Around, the Internet Eugene Fischer, The Enrichment and Decay of Ionia We are starting to think about IWORD 2024 this December.

Government 298

Government Internet Internet 298

Security Affairs

JANUARY 18, 2025

telecommunication and internet service providers. government IT systems and critical infrastructure. government systems, including the recent targeting of Treasurys information technology (IT) systems, as well as sensitive U.S. China-linked threat actors persistently target U.S. critical infrastructure.” national security.”

Cybersecurity 119

Cybersecurity Telecommunications Government Healthcare 119

Security Affairs

NOVEMBER 28, 2024

Many reports claim these bad actors have gained access to some providers’ customer information over an extended period of time – phone calls, text messages, and other sensitive information, particularly from government officials. Connectivity to a compromised provider was interrupted, and T-Mobile notified industry and government leaders.

Mobile 115

Mobile Telecommunications Government Internet 115

Schneier on Security

JANUARY 7, 2025

officials say employed workers responsible for the Flax Typhoon attacks which compromised devices including routers and internet-enabled cameras to infiltrate government and industrial targets in the United States, Taiwan, Europe and elsewhere.

Internet 251

Internet Internet Government Technology 251

Adam Shostack

JANUARY 2, 2025

[no description provided] Today, a global coalition led by civil society and technology experts sent a letter asking the government of Australia to abandon plans to introduce legislation that would undermine strong encryption.

Internet 130

Internet Internet Government Manufacturing 130

Krebs on Security

SEPTEMBER 16, 2021

man charged in 2018 with operating two online services that allowed paying customers to launch powerful distributed denial-of-service (DDoS) attacks against Internet users and websites. A jury in California today reached a guilty verdict in the trial of Matthew Gatrel , a St. Charles, Ill. The user interface for Downthem[.]org.

DDOS 347

DDOS DNS Internet Internet 347

Schneier on Security

SEPTEMBER 19, 2024

The FBI has shut down a botnet run by Chinese hackers: The botnet malware infected a number of different types of internet-connected devices around the world, including home routers, cameras, digital video recorders, and NAS drives.

Telecommunications 304

Telecommunications Media Malware Internet 304

Security Affairs

FEBRUARY 16, 2024

CISA revealed that threat actors breached an unnamed state government organization via an administrator account belonging to a former employee. The government experts conducted an incident response assessment of the state government organization after its documents were posted on the dark web.

Government 144

Government VPN Accountability Authentication 144

Schneier on Security

JANUARY 21, 2022

The app also includes a censorship keyword list, which, while presently inactive, targets a variety of political topics including domestic issues such as Xinjiang and Tibet as well as references to Chinese government agencies. The US government has already advised athletes to leave their personal phones and laptops home and bring burners.

Surveillance 362

Surveillance Encryption Wireless Government 362

Krebs on Security

JUNE 10, 2022

At the outset of their federal criminal trial for hijacking vast swaths of Internet addresses for use in large-scale email spam campaigns, three current or former executives at online advertising firm Adconion Direct (now Amobee ) have pleaded guilty to lesser misdemeanor charges of fraud and misrepresentation via email.

Government 318

Government Marketing Internet Internet 318

Schneier on Security

APRIL 11, 2024

Last week, the internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. There are libraries for everything: displaying objects in 3D, spell-checking, performing complex mathematics, managing an e-commerce shopping cart, moving files around the internet—everything.

Software 361

Software Engineering Internet Internet 361

SecureWorld News

DECEMBER 17, 2024

government is sounding the alarm on a growing cybersecurity risk for critical infrastructureinternet-exposed Human-Machine Interfaces (HMIs). However, when improperly configured or left exposed to the internet, HMIs become prime targets for cyberattacks. This underscores the urgent need to secure these systems.

Internet 109

Internet Internet Risk Passwords 109

Krebs on Security

FEBRUARY 4, 2020

A Pennsylvania man who operated one of the Internet’s longest-running online attack-for-hire or “booter” services was sentenced to five years probation today. ” The government suggested a lenient sentence considering the defendant’s ongoing health complications, which include liver failure.

Internet 321

Internet Internet Government Accountability 321

Schneier on Security

JUNE 25, 2020

van Oorschot: Abstract: Best practices for Internet of Things (IoT) security have recently attracted considerable attention worldwide from industry and governments, while academic research has highlighted the failure of many IoT product manufacturers to follow accepted practices. by Christopher Bellman and Paul C.

IoT 276

IoT Manufacturing Internet Internet 276

Krebs on Security

JANUARY 31, 2025

The core Manipulaters product is Heartsender , a spam delivery service whose homepage openly advertised phishing kits targeting users of various Internet companies, including Microsoft 365 , Yahoo , AOL , Intuit , iCloud and ID.me , to name a few.

Phishing 248

Phishing Cybercrime Advertising Malware 248