Latest

Access Management

CA Security - Digital Trust

CA  •  March 6, 2018

Catch discussions with security luminaries and gain insight on building trust without sacrificing security.

Cybercrime

How 'Slingshot' Router Malware Lurked for Six Years

Jeremy Kirk  •  March 12, 2018

Kaspersky Lab says it has uncovered an elegantly written piece of malware that leverages a Latvian-designed router to launch stealthy attacks. The security firm hints that the malicious code could only have come from a well-resourced attacker, but it stops short of naming one.

Cybercrime

Putin Offers Extradition Promise to US: 'Never'

Mathew J. Schwartz  •  March 7, 2018

Russian President Vladimir Putin has issued an unequivocal promise about the extradition potential for 13 Russian nationals accused of working for a Kremlin-backed troll factory: "Never." It's unclear how the U.S. might best battle Russia's influence operations.

Ukraine Sentences Two Citizens for DDoS Extortion Campaigns

Mathew J. Schwartz  •  March 6, 2018

In a groundbreaking prosecution, two individuals in Ukraine have been sentenced for running extortion campaigns that disrupted international victims' websites with massive DDoS attacks unless they paid bitcoin ransoms of up to $10,000.

166 Applebee's Restaurants Hit With Payment Card Malware

Mathew J. Schwartz  •  March 6, 2018

Anyone who dined out at one of 166 Applebee's restaurants in 15 states may have had their payment card details compromised by point-of-sale malware infections that began in November 2017, RMH Franchise Holdings warns.

Data Cache May Contain 2,800 Partly Undiscovered Breaches

Jeremy Kirk  •  February 27, 2018

An analysis of a massive 8.8 GB trove of files containing usernames and plaintext passwords suggests hundreds of services may have experienced unreported or undiscovered data breaches. Data breach expert Troy Hunt says the trove of 80 million records appears to contain fresh data.

10 Cybersecurity Trends: What to Expect in 2018

Mathew J. Schwartz  •  January 2, 2018

Information security truisms: 2017 was the year of more cybersecurity - more attacks, more spending, more defenses, more breaches - and 2018 will see more of everything "cyber," plus GDPR enforcement, proxy wars online and more.

Threat Info Sharing Key Part of Election Security Bill

Eric Chabrow  •  November 1, 2017

Under bipartisan legislation introduced in the Senate, federal authorities would share classified cyber threat information with state election officials. The bill also would provide grants to states to support election security efforts.

Payments Fraud

Hilton Reaches $700,000 Settlement Over Two Data Breaches

Mathew J. Schwartz  •  November 1, 2017

Global hotel chain Hilton has reached a $700,000 settlement agreement with New York and Vermont over two separate data breaches discovered in 2015 that exposed more than 360,000 payment card numbers.

IoT Security Fail: Hacked Vacuum Cleaner Becomes Spy Cam

Jeremy Kirk  •  October 30, 2017

Security probes into IoT vulnerabilities too often swerve into creepy territory. Take security researchers at Check Point who discovered they could seize control of an internet-connected LG vacuum cleaner's camera, allowing them to turn a roving robotic cleaner into a spy cam.

DHS Imposes Email Security Measures on Federal Agencies

Eric Chabrow  •  October 17, 2017

A new directive from the U.S. Department of Homeland Security elevates federal agencies' email security to the DMARC standard that's widely adopted by commercial email providers, including Google, Yahoo and Microsoft.

Payments

Security Investments Consume SWIFT's Profits

Mathew J. Schwartz  •  June 13, 2017

Banks that collectively own SWIFT saw their profits vanish last year as the organization increased its investments in information security, even as the interbank messaging service handled record volumes of money-moving messages.