Schneier on Security

DECEMBER 5, 2023

Before the internet, putting someone under surveillance was expensive and time-consuming. Surveillance has become the business model of the internet, and there’s no reasonable way for us to opt out of it. The technologies aren’t perfect; some of them are pretty primitive. Spying is another matter. But so do humans.

Surveillance 361

Surveillance Internet Internet Government 361

Schneier on Security

NOVEMBER 14, 2019

Technology is now deeply intertwined with policy. It's all changing fast; technology is literally creating the world we all live in, and policymakers can't keep up. Or, more specifically, where and how should government step in and regulate what is largely a market-driven industry? Today, it's a crisis.

Technology 251

Technology Government Artificial Intelligence Marketing 251

Security Affairs

NOVEMBER 14, 2024

government officials. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. broadband providers, including Verizon, AT&T, and Lumen Technologies, potentially accessing systems for lawful wiretapping and other data. .” broadband providers.

Government 112

Government Telecommunications Surveillance Risk 112

Schneier on Security

FEBRUARY 8, 2022

Intelligence collectors are everywhere, and government spy agencies are drowning in data. Now everyone is racing for insight and the internet gives them tools to do it. The third challenge posed by emerging technologies strikes at the heart of espionage: secrecy.

Internet 231

Internet Internet Technology Government 231

The Last Watchdog

MARCH 24, 2025

There are two sides to this: 1) assessing a technology vendors cryptoagility efforts in your RFPs as a part of determining third-party tech supplier risk, 2) assessing a technology vendors capability to help you in your PQC migration as technology functionality you can use.

Encryption 130

Encryption Financial Services Technology Risk 130

Krebs on Security

JANUARY 16, 2025

Merrill said the different purveyors of these SMS phishing tools traditionally have impersonated shipping companies, customs authorities, and even governments with tax refund lures and visa or immigration renewal scams targeting people who may be living abroad or new to a country.

Phishing 295

Phishing Scams Mobile Passwords 295

Security Affairs

JANUARY 18, 2025

Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned Chinese firm Sichuan Juxinhe Network Technology Co., telecommunication and internet service providers. government IT systems and critical infrastructure. China-linked threat actors persistently target U.S. critical infrastructure.”

Cybersecurity 120

Cybersecurity Telecommunications Government Healthcare 120

Schneier on Security

JANUARY 7, 2025

From the Washington Post : The sanctions target Beijing Integrity Technology Group , which U.S. officials say employed workers responsible for the Flax Typhoon attacks which compromised devices including routers and internet-enabled cameras to infiltrate government and industrial targets in the United States, Taiwan, Europe and elsewhere.

Internet 248

Internet Internet Government Technology 248

The Last Watchdog

DECEMBER 18, 2024

To wrap up our 2024 year-end roundtable, we turn our attention to new technologies and trends that are emerging to help bridge the gaps. Enterprises must secure AI agents, adopt proactive data governance, and deploy AI-based security platforms. We can expect security teams feeling pressure to adopt new technology quickly.

Risk 173

Risk Threat Detection Technology Phishing 173

Schneier on Security

FEBRUARY 21, 2020

And for maybe half a decade, I have been talking about the world-sized robot that is the Internet of Things, and how digital security is now a matter of public safety. Your data is no longer in a bazillion places on the Internet, controlled by you-have-no-idea-who. Solid is one of those technologies. It's yours. So here I am.

IoT 362

IoT Internet Internet Technology 362

Schneier on Security

JUNE 1, 2023

In my talk at the RSA Conference last month, I talked about the power level of our species becoming too great for our systems of governance. Talking about those systems, I said: Now, add into this mix the risks that arise from new and dangerous technologies such as the internet or AI or synthetic biology.

Risk 334

Risk Artificial Intelligence Technology Internet 334

Schneier on Security

JULY 25, 2024

Friday’s massive internet outage, caused by a mid-sized tech company called CrowdStrike, disrupted major airlines, hospitals, and banks. The catastrophe is yet another reminder of how brittle global internet infrastructure is. Compare the internet with ecological systems. Nearly 7,000 flights were canceled.

Marketing 347

Marketing Software Internet Internet 347

Schneier on Security

NOVEMBER 13, 2020

Your data is no longer in a bazillion places on the Internet, controlled by you-have-no-idea-who. This is a significant step forward to realizing Tim’s vision : The technologies we’re releasing today are a component of a much-needed course correction for the web. It’s yours.

Insurance 355

Insurance IoT Healthcare Technology 355

Schneier on Security

MAY 14, 2021

Modern ransomware has two dimensions: pay to get your data back, and pay not to have your data dumped on the Internet. An industry group called the Institute for Security and Technology (no, I haven’t heard of it before, either) just released a comprehensive report on combating ransomware.

Ransomware 359

Ransomware Cryptocurrency Cybercrime Internet 359

Adam Shostack

JANUARY 2, 2025

[no description provided] Today, a global coalition led by civil society and technology experts sent a letter asking the government of Australia to abandon plans to introduce legislation that would undermine strong encryption.

Internet 130

Internet Internet Government Manufacturing 130

Schneier on Security

OCTOBER 12, 2018

Stories like the recent Facebook hack , the Equifax hack and the hacking of government agencies are remarkable for how unremarkable they really are. The government needs to step in and regulate this increasingly dangerous space. It's no secret that computers are insecure. Security is not a problem the market will solve.

Government 266

Government Internet Internet Marketing 266

Malwarebytes

DECEMBER 19, 2024

The US government launched a national security investigation into the popular, Chinese-owned router maker TP-Link, with a potential eye on banning the company’s devices in the United States. TP-Link Systems is an entity based in Irvine, California, and no longer affiliated with the Chinese TP-Link Technologies.

Marketing 113

Marketing Retail Technology Wireless 113

Security Affairs

NOVEMBER 28, 2024

Many reports claim these bad actors have gained access to some providers’ customer information over an extended period of time – phone calls, text messages, and other sensitive information, particularly from government officials. Connectivity to a compromised provider was interrupted, and T-Mobile notified industry and government leaders.

Mobile 116

Mobile Telecommunications Government Internet 116

Schneier on Security

MAY 3, 2019

It's an impassioned debate, acrimonious at times, but there are real technologies that can be brought to bear on the problem: key-escrow technologies, code obfuscation technologies, and backdoors with different properties. Public-interest technology isn't new. So does society's underlying security needs.

Cybersecurity 275

Cybersecurity Technology Government Internet 275

Security Affairs

SEPTEMBER 23, 2023

The Government of Bermuda believes that the recent cyberattack against its IT infrastructure was launched by Russian threat actors. This week a cyber attack hit the Government of Bermuda causing the interruption of internet/email and phone services. The attack impacted all the government departments. ” said Burt.

Cyber Attacks 140

Cyber Attacks Government Internet Internet 140

Security Affairs

JANUARY 18, 2025

Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned Chinese firm Sichuan Juxinhe Network Technology Co., telecommunication and internet service providers. government IT systems and critical infrastructure. China-linked threat actors persistently target U.S. critical infrastructure.”

Cybersecurity 98

Cybersecurity Telecommunications Government Healthcare 98

Joseph Steinberg

MAY 9, 2022

Other parties familiar with Russian Internet usage patterns have also estimated that as many as a third of all Russian Internet users now regularly use VPNs. VPN technologies deliver two major benefits to Russian citizens. They allow Russians to access banned sites, and they help protect users from government surveillance.

VPN 256

VPN Government Artificial Intelligence Technology 256

Schneier on Security

MARCH 5, 2019

It's an impassioned debate, acrimonious at times, but there are real technologies that can be brought to bear on the problem: key-escrow technologies, code obfuscation technologies, and backdoors with different properties. Public-interest technology isn't new. So does society's underlying security needs.

Cybersecurity 266

Cybersecurity Technology Government Internet 266

The Last Watchdog

APRIL 9, 2020

There’s no stopping the Internet of Things now. And industry groups and government regulators are stepping up efforts to incentivize IoT device makers to embed security at the device level. ExtraHop’s technology is designed to assimilate any new IoT system added to the network. Very clearly, something more is needed.

Internet 195

Internet Internet IoT Technology 195

Malwarebytes

DECEMBER 5, 2024

The infrastructure that the US government relies to communicate on is made up of the same private sector systems that everybody else uses. During transit the message remains encrypted the entire time it is moving across the internet. Among the culprits are four major APT groups: Volt Typhoon, Salt Typhoon, Flax Typhoon, and Velvet Ant.

Encryption 143

Encryption Identity Theft Media Telecommunications 143

Schneier on Security

AUGUST 28, 2019

All of those "consumer products" Barr wants access to are used by government officials -- heads of state, legislators, judges, military commanders and everyone else -- worldwide. Before the Internet revolution, military-grade electronics were different from consumer-grade. This wasn't true during much of the Cold War.

Computers and Electronics 279

Computers and Electronics Encryption Internet Internet 279

CyberSecurity Insiders

JANUARY 3, 2023

Spy”-type cyberspace race as both criminals and defenders vie to gain the upper hand using new and emerging technologies. Every technology that enables our cyber teams to pinpoint and resolve threats and prevent attacks more quickly and accurately also benefits cybercriminals.

Technology 135

Technology Cybercrime Artificial Intelligence Government 135

Joseph Steinberg

JULY 20, 2022

And, while today’s commercially-created quantum machines are nowhere near powerful enough to approach quantum supremacy, absolutely nobody knows the true extent of the quantum capabilities of all of the technologically-advanced governments around the world. Clearly, there is a need to act in advance – and acting takes time.

Risk 338

Risk Encryption Government Artificial Intelligence 338

SecureWorld News

JANUARY 8, 2025

Cyber Trust Mark, a voluntary cybersecurity labeling program designed to help consumers make informed decisions about the security of their internet-connected devices. National Institute of Standards and Technology (NIST) and certified by accredited labs. The White House has officially launched the U.S.

IoT 114

IoT Manufacturing Government Cybersecurity 114

Schneier on Security

SEPTEMBER 30, 2019

The United States government's continuing disagreement with the Chinese company Huawei underscores a much larger problem with computer technologies in general: We have no choice but to trust them completely, and it's impossible to verify that they're trustworthy. and other technologies to make decisions without human intervention.

Government 267

Government Internet Internet Artificial Intelligence 267

Security Affairs

FEBRUARY 16, 2024

CISA revealed that threat actors breached an unnamed state government organization via an administrator account belonging to a former employee. The government experts conducted an incident response assessment of the state government organization after its documents were posted on the dark web.

Government 144

Government VPN Accountability Authentication 144

Security Affairs

NOVEMBER 18, 2024

telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. The US agencies confirmed that Chinese threat actors had compromised the private communications of a “limited number” of government officials following the compromise of multiple U.S.

Mobile 113

Mobile Telecommunications Data breaches Hacking 113

Schneier on Security

JUNE 3, 2024

Technology was once simply a tool—and a small one at that—used to amplify human intent and capacity. That was the story of the industrial revolution: we could control nature and build large, complex human societies, and the more we employed and mastered technology, the better things got.

Technology 317

Technology Government Engineering Internet 317

Krebs on Security

JUNE 10, 2022

At the outset of their federal criminal trial for hijacking vast swaths of Internet addresses for use in large-scale email spam campaigns, three current or former executives at online advertising firm Adconion Direct (now Amobee ) have pleaded guilty to lesser misdemeanor charges of fraud and misrepresentation via email.

Government 314

Government Marketing Internet Internet 314

Schneier on Security

APRIL 7, 2022

government has previously attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation (the GRU). The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used for command and control (C2) of the underlying botnet.

Manufacturing 273

Manufacturing Firewall Malware Internet 273

Krebs on Security

NOVEMBER 21, 2024

technology companies between 2021 and 2023, including LastPass , MailChimp , Okta , T-Mobile and Twilio. Federal prosecutors in Los Angeles this week unsealed criminal charges against five men alleged to be members of a hacking group responsible for dozens of cyber intrusions at major U.S.

Identity Theft 245

Identity Theft Phishing Cryptocurrency Accountability 245

The Last Watchdog

JANUARY 11, 2022

Last August, NTT , the Tokyo-based technology giant, unveiled its Health and Wellbeing initiative – an ambitious effort to guide corporate, political and community leaders onto a more enlightened path. We want to use technology and best practices to bring about a more human-centric approach to health and wellbeing. Uphill climb.

Big data 279

Big data Healthcare Technology Government 279