REvil is Off-Line
July 16 2021
This is an interesting development:
Just days after President Biden demanded that President Vladimir V. Putin of Russia shut down ransomware groups attacking American targets, the most aggressive of...
Read more
China Taking Control of Zero-Day Exploits
July 14 2021
China is making sure that all newly discovered zero-day exploits are disclosed to the government.
Under the new rules, anyone in China who finds a vulnerability must tell the...
Read more
Iranian State-Sponsored Hacking Attempts
July 13 2021
Interesting attack:
Masquerading as UK scholars with the University of London’s School of Oriental and African Studies (SOAS), the threat actor TA453 has been covertly approaching individuals since at...
Read more
More Russian Hacking
July 2 2021
Two reports this week. The first is from Microsoft, which wrote:
As part of our investigation into this ongoing activity, we also detected information-stealing malware on a machine belonging...
Read more
Insurance and Ransomware
July 1 2021
As ransomware becomes more common, I’m seeing more discussions about the ethics of paying the ransom. Here’s one more contribution to that issue: a research paper that the...
Read moreRisks of Evidentiary Software
June 29 2021
Over at Lawfare, Susan Landau has an excellent essay on the risks posed by software used to collect evidence (a Breathalyzer is probably the most obvious example).
Bugs...
Read moreThe Future of Machine Learning and Cybersecurity
June 21 2021
The Center for Security and Emerging Technology has a new report: “Machine Learning and Cybersecurity: Hype and Reality.” Here’s the bottom line:
The report offers four conclusions:
- Machine learning can... Read more
The Story of the 2011 RSA Hack
May 27 2021Really good long article about the Chinese hacking of RSA, Inc. They were able to get copies of the seed values to the SecurID authentication token, a harbinger of...
Read more
Most US critical infrastructure is run by private corporations. This has major security implications, because it’s putting a random power company in — say — Ohio — up against...
Read moreNew US Executive Order on Cybersecurity
May 13 2021
President Biden signed an executive order to improve government cybersecurity, setting new security standards for software sold to the federal government.
For the first time, the United States...
Read more
Recent Comments