ThiefQuest Ransomware for the Mac
July 6 2020There's a new ransomware for the Mac called ThiefQuest or EvilQuest. It's hard to get infected: For your Mac to become infected, you would need to torrent a compromised...
Read moreFriday Squid Blogging: Strawberry Squid
July 3 2020Pretty. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here....
Read moreEncroChat Hacked by Police
July 3 2020French police hacked EncroChat secure phones, which are widely used by criminals: Encrochat's phones are essentially modified Android devices, with some models using the "BQ Aquaris X2," an Android...
Read moreThe Security Value of Inefficiency
July 2 2020For decades, we have prized efficiency in our economy. We strive for it. We reward it. In normal times, that's a good thing. Running just at the margins is...
Read moreSecuring the International IoT Supply Chain
July 1 2020Together with Nate Kim (former student) and Trey Herr (Atlantic Council Cyber Statecraft Initiative), I have written a paper on IoT supply chain security. The basic problem we try...
Read moreAndroid Apps Stealing Facebook Credentials
June 30 2020Google has removed 25 Android apps from its store because they steal Facebook credentials: Before being taken down, the 25 apps were collectively downloaded more than 2.34 million times....
Read moreiPhone Apps Stealing Clipboard Data
June 29 2020iOS apps are repeatedly reading clipboard data, which can include all sorts of sensitive information. While Haj Bakry and Mysk published their research in March, the invasive apps made...
Read moreFriday Squid Blogging: Fishing for Jumbo Squid
June 26 2020Interesting article on the rise of the jumbo squid industry as a result of climate change. As usual, you can also use this squid post to talk about the...
Read moreThe Unintended Harms of Cybersecurity
June 26 2020Interesting research: "Identifying Unintended Harms of Cybersecurity Countermeasures": Abstract: Well-meaning cybersecurity risk owners will deploy countermeasures (technologies or procedures) to manage risks to their services or systems. In some...
Read more
Recent Comments