Cyber Security and Privacy News of the Week, 10 - 17 Feb 2015

Cyber Security and Privacy News of the Week

Links to stories/ pictures:
1. http://www.reuters.com/article/2015/02/16/us-usa-cyberspying-idUSKBN0LK1QV20150216

2. http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html

3. http://www.invincea.com/2015/02/chinese-espionage-campaign-compromises-forbes/

4. http://www.gallup.com/poll/178856/hacking-tops-list-crimes-americans-worry.aspx

5. http://www.wired.com/2015/02/nsa-acknowledges-feared-iran-learns-us-cyberattacks/

6. http://www.databreachtoday.com/ny-to-launch-cyber-exams-for-insurers-a-7901

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

Cyber Security and Privacy News of the Week, 3 - 10 Feb 2015

This Week in Cyber Security and Privacy

Links to stories/ pictures:
1. www.forbes.com/sites/thomasbrewster/2015/02/02/yet-another-adobe-flash-zero-day/

2. http://www.theguardian.com/us-news/2015/feb/05/millions-of-customers-health-insurance-details-stolen-in-anthem-hack-attack

3. http://www.reuters.com/article/2015/02/05/us-sony-pascal-idUSKBN0L92BG20150205

4. https://nakedsecurity.sophos.com/2015/02/06/facebooks-deepface-facial-recognition-technology-has-human-like-accuracy/

5. http://www.bbc.com/news/technology-31296188

6. http://thenextweb.com/insider/2015/02/10/uber-reportedly-left-lost-found-items-log-exposed-online/

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

Anthem and the stock market post breach

This was the pre-trading situation with Anthem yesterday. Impressive, yet ups and downs are a regular thing, we'll see how they're doing in a couple of weeks.

(via Ram Levi)

Gadi Evron.

Cyber Security and Privacy News of the Week, 27 January - 3rd February, 2015

This Week in Cyber Security and Privacy

Links to stories/ pictures:
1. http://www.scmagazine.com/report-most-us-weapons-programs-contain-significant-vulnerabilities/article/394499/
http://element-y.com/wp-content/uploads/2013/01/pentagon.jpg

2. http://www.infosecurity-magazine.com/news/us-army-releases-cyberforensic/
3. http://www.cnet.com/news/chrome-becoming-tool-in-googles-push-for-encrypted-web/

4. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-0235
https://cve.mitre.org/
5. http://www.spiegel.de/international/world/regin-malware-unmasked-as-nsa-tool-after-spiegel-publishes-source-code-a-1015255.html

6. http://www.pcworld.com/article/2878437/bmw-cars-found-vulnerable-in-connected-drive-hack.html
http://www.autoblog.com/2015/02/03/bmws-connected-drive-feature-vulnerable-to-hackers/

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

Where did they go wrong?

My experience was short lived but fascinating to me.

I rang the bell. The receptionist came out through an open door, tried for this combo biometric plus code authentication device on the main door, failed, asked me to wait and went in through the other door, walked around and opened the door from the inside.

Where did whoever designed this security go wrong? :)

Gadi Evron.

Cyber Security and Privacy News of the Week, 20-27 January - 2015

Cyber Security and Privacy News of the Week, 20-27 January - 2015

This Week in Cyber Security and Privacy

Links to stories/ pictures:

1. http://kukuruku.co/hub/infosec/backdoor-in-a-public-rsa-key?ModPagespeed=noscript
2. http://www.bbc.com/news/uk-wales-south-west-wales-30898417
3. http://www.secretsofthefed.com/15-year-old-swatted-gamer-convicted-domestic-terrorism-25-years-life-federal-prison/
4. https://news.yahoo.com/kenya-govt-considers-request-repatriate-chinese-hackers-121447172.html
5. http://thehackernews.com/2015/01/progressive-snapshot-device-hacking-car.htm
6. https://www.eff.org/who-has-your-back-government-data-requests-2014

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

This Week in Cyber Security and Privacy, 13-20 January 2015

This Week in Cyber Security and Privacy, 5-12 January 2015.

Links to stories/ pictures:

1. http://www.gironsec.com/blog/2015/01/owning_modems_and_routers_silently/

2. http://itinsight.hu/en/posts/articles/2015-01-28-android-bypass/

3. http://thehackernews.com/2015/01/google-windows-vulnerability.html

4. http://www.theregister.co.uk/2015/01/18/snowden_doc_leak_confirms_china_stole_f35_data/

5. http://www.businessinsider.com/apple-touch-id-icloud-patent-2015-1

6. http://thehackernews.com/2015/01/microsoft-windows-7-support.html

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

This Week in Cyber Security and Privacy, 5-12 January 2015

This Week in Cyber Security and Privacy, 5-12 January 2015.

Links to stories/pictures:

1. http://www.darkreading.com/attacks-breaches/banking-trojans-disguised-as-ics-scada-software-infecting-plants/d/d-id/1318542
http://threatpost.com/is-it-time-for-certified-ics-security-specialists/104804
2. https://privacyassociation.org/news/a/obama-announces-legislation-on-student-id-consumer-privacy/
3. http://krebsonsecurity.com/2015/01/lizard-stresser-runs-on-hacked-home-routers/
4. http://www.engadget.com/2015/01/02/google-posts-unpatched-microsoft-bug/
5. http://motherboard.vice.com/read/you-can-now-install-the-north-korean-operating-system-redstar-30
6. http://www.morganstanley.com/about/press/articles/7f189537-f51c-40b0-a963-fc0dc6c65861.html

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

This Week in Cyber Security and Privacy, 28 Dec - 4 Jan 2015

This Week in Cyber Security and Privacy, 28 Dec - 4 Jan 2015

Links to stories and photos:
1. http://mashable.com/2014/12/31/sony-cyberattack-blackberrys/

2. http://uk.businessinsider.com/report-angela-merkels-office-hit-by-cyber-attack-2014-12?r=US

3. http://threatpost.com/cellular-privacy-ss7-security-shattered-at-31c3/110135

4. http://www.reuters.com/article/2014/12/27/hacking-tool-idUSL1N0UB00U20141227

5. http://venturebeat.com/2014/12/28/chaos-computer-club-claims-it-can-reproduce-fingerprints-from-peoples-public-photos/

6. http://mobile.nytimes.com/blogs/dealbook/2014/12/22/entry-point-of-jpmorgan-data-breach-is-identified/?_r=2&referrer

7. http://www.haaretz.com/news/diplomacy-defense/1.633119

8. http://www.healthcareinfosecurity.com/nist-to-address-medical-device-security-a-7718

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

This Week in Cyber Security and Privacy, 21-27 December, 2014

This Week in Cyber Security and Privacy's summary is released early this week, due to the holidays - with a personal message, on how cyber affects us personally. Merry Christmas! :)

Stories that didn't make it include hacking a skateboard, the FBI making "Cyber" a top priority, and the Kremlin announcing that Russia is on constant cyber alert.

Links to stories:
1. http://m.nextgov.com/cybersecurity/2014/12/opm-alerts-feds-second-background-check-breach/101622/

2. http://www.reuters.com/article/2014/12/21/us-southkorea-nuclear-idUSKBN0JZ05120141221
http://www.theguardian.com/world/2014/dec/22/south-korea-nuclear-power-cyber-attack-hack

3. http://www.threatconnect.com/news/operation-poisoned-helmand/

4. http://www.itworld.com/article/2861675/cyberattack-on-german-steel-factory-causes-massive-damage.html
http://www.bbc.com/news/technology-30575104

5. http://www.wired.com/2014/12/mathematicians-make-major-discovery-prime-numbers/

6. http://www.geekrepublic.org/tor-exit-node-cluster-shut-down/

Originally posted on Gadi Evron's blog, at: http://gadievron.blogspot.com/
Also on Facebook: http://www.facebook.com/gadioncyber
And on Twitter: http://twitter.com/gadievron

Gadi Evron.

Cyber is not "passwords" - it's about YOU - Sony experience

Cyber is personal, it is about your life, your business - your kids.

A story from an employee at Sony, following the hack. Worth reading:
http://fortune.com/2014/12/20/sony-pictures-entertainment-essay/

 

Gadi Evron.

Sony and PRNK, still a better love story than...

Gina from Cymmetria Research created another meme on Sony's incident.