News
  • "Is Your Smart Watch Sharing Your Data?"
    Users may be unaware of the exchange of data that household Internet of Things (IoT) devices, such as the Ring doorbell, Peloton exercise bike, and Nest thermostat conduct with other devices and systems over the network. These devices store various types…
  • "Exposed Database Reveals 100K+ Compromised Facebook Accounts"
    Researchers have discovered an exposed ElasticSearch database used by cybercriminals that revealed a global attack that compromised Facebook accounts. The unsecured database was used by fraudsters to store the usernames and passwords of at least 100,000…
  • "DoD Must Expand Its Mission-Critical Cybersecurity Focus to Include Connected Weapons"
    The 2020 Association of the United States Army (AUSA) Annual Meeting and Exposition presented various systems that will be available to the nation's military, many of which will be smart, connected weapons. The expected battlefield advantages offered by…
  • "Ransomware Incidents in Manufacturing Grow as Transparency, and Attack Options, Increase"
    According to the industrial security company Dragos, the number of documented ransomware incidents experienced by organizations in the manufacturing sector has increased significantly in 2020. Attackers continue to discover new ways to disrupt operations…
  • "Encryption Vulnerabilities Allow Hackers to Take Control of Schneider Electric PLCs"
    Schneider Electric has released advisories about four vulnerabilities found in Modicon M221 Programmable Logic Controllers (PLCs). These vulnerabilities were discovered by researchers at Claroty and Trustwave. According to blog posts published by the…
  • "ML Tool Identifies Domains Created to Promote Fake News"
    Researchers at UCL and other institutions have collaborated to develop a machine learning tool that identifies new domains created to promote false information so that they can be stopped before fake news can be spread through social media and online…
  • "Honour Among Thieves: The Study of a Cybercrime Marketplace in Action"
    Researchers at the Cambridge Cybercrime Center conducted a study on an underground cybercrime forum. They collected and examined data on illicit trades from HackForums, the largest and most popular online cybercrime community. Online underground forums…
  • "Cyber Skills Gap Shrinks, but Lack of Talent Remains Major Risk Factor"
    According to the International Information System Security Certification Consortium ((ISC)2), there has been a year-over-year reduction in the global cybersecurity workforce gap. The gap has shrunk from 4 million to 3.1 million. The (ISC)2 annual…
  • "Microsoft Advises Users to Stop Using SMS- And Voice-Based MFA"
    Multi-factor authentication (MFA) is better than relying just on a password for security.  The rate of compromise of accounts using any type of MFA was less than 0.1% last year.  Researchers at Microsoft are advising people to avoid using…
  • "Cybercriminal Offers Email Implant Software That Dodges Traditional Security Platforms"
    The cybersecurity firm Gemini Advisory recently released information about a tool called the Email Appender advertised by a hacker on a dark web forum. According to Gemini Advisory, this tool raises the success rate of malware attacks as it allows…
  • "Double Patterns Could Advance Android Device Security"
    Researchers at George Washington University have discovered that the security of Android devices can be significantly enhanced using two unlock patterns rather than the current single-pattern method. According to the researchers, using multiple patterns…
  • "PLATYPUS Reveals New Vulnerabilities Discovered in Intel Processors"
    A team of security researchers is conducting a project called PLATYPUS. They are presenting a new method for enabling power-side channel attacks. These attacks exploit power fluctuations to gain access to cryptographic keys and other sensitive…