Skip to main content

Security News

For discussion of current events in security and cybersecurity

  • 33 Topics
  • 97 Replies
33 Topics
T
thakkar.karan04
posted in Security News
SpinOk Module in Android Apps Installed 421M Times

This new report shows how Android ecosystem is plagued with malicious apps is very concerning. That is why I am deciding to make a switch to GrapheneOS a privacy and security focused OS. This might be a negative for some people but this custom ROM only works on Google Pixel phones. Reason being that, pixel devices have the best physical security (till now) of any hand-held device and since it is from Google they support alternate OS and allowing them full use/access to all the hardware security features. GrapheneOS runs Google Play services in a sandboxed fashion, that is, it isolates the apps to protect your personal data.  Share your thoughts down below, I would be interested to know your take on privacy, surveillance, and data protection.

0
T
1 year ago
A
Anonymous
posted in Security News
OKTA Adds Identity Verification for Zoom

OKTA, the top independent identity provider, has introduced a new identity verification tool for Zoom meetings that makes use of Okta to validate a conference attendee's identity by email (E2EE). By using this identity authentication and attestation, which is enabled by Okta, you may determine for yourself whether a meeting participant is who they claim to be.All of Zoom's paid users have access to Okta Authentication for E2EE. In the Security tab of the Zoom Web Portal, account administrators for Zoom can enable Okta Authentication for E2EE. A meeting participant can authorise sharing of their identify by turning on the feature in their personal settings after the Zoom account admin has enabled it.Check out the press release at https://www.cxotoday.com/press-release/okta-announces-new-identity-verification-feature-for-zoom-video-conferencing-and-collaboration/ to learn more.

1
A
1 year ago
T
ThreatModeler
published in Security News
Defending Against the Surge of DDoS Attacks

The significant surge in DDoS attacks poses a serious threat to various industries and critical infrastructure, including healthcare, financial institutions, government agencies, telecommunications, transportation, and more. Cybercriminals are using increasingly sophisticated tactics, such as multi-vector attacks and the use of virtual private server (VPS) botnets, to target essential services and overwhelm their targets. The shift towards politically motivated attacks on the financial sector and government services indicates a growing trend of cyber threats impacting the stability of critical infrastructure and public services. The rise in DDoS attacks also has potential economic consequences, reputation damage, and data breach risks for affected organizations. Implications of DDos attacks Service DisruptionsDDoS attacks can cause severe disruptions to essential services, affecting public access to healthcare, financial transactions, and government services, leading to potential publi

190
T
1 year ago
A
Anonymous
posted in Security News
Large scale cyberattack in Europe via VMWare ESXi

https://www.techradar.com/news/widespread-cyberattack-hits-servers-across-europeLooks like this is a bad one, and it’s not a new vulnerability.  Patch your stuff!Anyone here been hit by this one?

1
A
1 year ago
T
ThreatModeler
published in Security News
State-Linked Cyber-Espionage Targeting Global ResearchBlog

The focal concern at hand pertains to a series of cyber-espionage endeavours orchestrated by an entity identified as Patchwork, a hacking collective believed to be affiliated with India. Their modus operandi involves a deliberate focus on infiltrating universities, research institutions, and diverse entities across multiple nations, including China. This syndicate employs an array of strategies encompassing spear-phishing, watering hole assaults, and the dissemination of malevolent applications. The hallmark of their campaigns is marked by the deployment of a particular covert tool termed EyeShell, further deepening the complexity of their activities. Implications of Cyber-Espionage  National Security ConcernsThe cyber-espionage activities by Patchwork pose significant national security concerns for the targeted countries, as sensitive research, intellectual property, and confidential information can be compromised.Diplomatic StrainSuch activities can strain diplomatic relations betwee

130
T
1 year ago
T
ThreatModeler
published in Security News
Cybersecurity Challenges Threaten India's Economic AmbitionsNews

The problem here  is that there has been a significant increase in cyberattacks in India, which poses a critical risk to the country's economic ambitions. These cyberattacks can disrupt various sectors of the economy, compromise sensitive information, and potentially lead to financial losses. The Implications of This Problem are Multifaceted Economic impactCyberattacks can lead to significant financial losses for businesses, government organizations, and individuals. Disruption of critical infrastructure, theft of intellectual property, and financial fraud can all impact the economy negatively.Reputation damageSuccessful cyberattacks can damage the reputation of organizations and the country as a whole. This can lead to decreased investor confidence, affecting foreign investment and economic growth.Loss of sensitive dataCyberattacks can result in the theft of sensitive personal, business, and government data. This can have serious consequences for national security and privacy.Disrupti

121
A
1 year ago
Kristen Canady
Kristen Canady
posted in Security News
Dallas Cyberattack Highlights Ransomware Risks

If you’ve seen the news, you know that latest ransomware attack in Dallas affected government agencies and hospitals. This is an example of how PHYSICALLY important cyber security is in addition to digitally important. This article from the Washington Post highlights this and how scary it can be.https://www.washingtonpost.com/politics/2023/05/08/dallas-cyberattack-highlights-ransomwares-risks-public-safety-health/

0
Kristen Canady
1 year ago
A
Anonymous
asked in Security News
Europe To Tackle Cyber in New Law

https://www.afcea.org/signal-media/cyber-edge/europe-tackle-cyber-new-lawIt looks like they’re planning a two-tiered system of requirements, and tightening up reporting requirements.It’s going to be a messy time for cybersecurity, although on the plus side we’re getting (hopefully) better regulation, and there’s going to be a ton of work to go around for those of us in the field.  This will be the first update to the cybersecurity regulations since 2016.What would you hope to see in the results of this new law?  Any predictions of what’s likely to be in there? 

0
A
1 year ago
Terms & ConditionsCookie settings