News
  • "Escalation in Healthcare Data Breaches"
    The number of healthcare data breaches reported in the United States has increased for the third month in a row.  Records kept by the Department of Health and Human Services' Office for Civil Rights (OCR) indicate that the total number of reported…
  • "Ransomware Attackers Have 'Industry Standards' Too"
    The actors behind ransomware attacks are creating industry standards to define ideal targets for their malicious campaigns. In July 2021, researchers with the threat intelligence company KELA found 48 discussion threads on dark web marketplaces in which…
  • "Hackers Can Penetrate 93% of Local Networks"
    Researchers at Positive Technologies have found that cyberattackers can breach 93% of organizations’ network perimeters and gain access to their resources.  The study showed results from the company’s penetration testing projects in the second half…
  • "Security Flaws Found in a Popular Guest Wi-Fi System Used in Hundreds of Hotels"
    A security researcher named Etizaz Mohsin discovered that the Airangel HSMX Gateway, used by hundreds of hotels to provide and manage guest Wi-Fi networks, contains security flaws, putting hotel guests' personal information at risk. According to Mohsin,…
  • "New Log4j Patch Released to Fix DoS Flaw"
    Apache has released a new patch for Log4j to mitigate a high severity vulnerability, as researchers separately found a new attack vector for the Log4Shell bug.  The open-source web server community had previously released a patch to fix the now-…
  • "ESF Members, NSA and CISA Publish the Fourth Installment of 5G Cybersecurity Guidance"
    The National Security Agency (NSA) and the US Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) have published the fourth installment pertaining to securing the integrity of 5G cloud infrastructures titled "…
  • "Play a Video Game, Learn Cybersecurity Skills"
    A team at Carnegie Mellon University welcomes anyone interested in exploring the world of cybersecurity to play a video game named "Katalyst," which introduces players to command line operations, password hashing, and the Python programming language…
  • "US and Australia Enter CLOUD Act Agreement"
    The United States has entered into an agreement with Australia to share electronic data to help facilitate the investigation of serious crimes. The crimes that fall under the category of serious include terrorism, ransomware attacks, and the sexual abuse…
  • "The Best Way to Protect Personal Biomedical Data From Hackers Could Be to Treat the Problem Like a Game"
    The National COVID Cohort Collaborative, the Personal Genome Project, and other modern biomedical research require large amounts of data specific to individuals. Therefore, such projects face the critical challenge of making detailed datasets publicly…
  • "Malicious Joker App Scores Half-Million Downloads on Google Play"
    Beware of Joker malware found in the Color Message app. The malware is part of a an app that promises better colors, emojis and screen overlays. What it really does is subscribe users to unwanted paid premium services controlled by the attackers in a…
  • "Keeping the World Connected, Without Sacrificing Privacy"
    A multi-university team led by the University of Michigan industrial operations and engineering assistant professor Raed Al Kontar is looking at a new type of connected device infrastructure called the Internet of Federated Things (IoFT) that could do…
  • "Spider-Man Fans Warned About Scams Leveraging New Movie"
    Researchers at Kasperksy have discovered that fraudsters are leveraging the latest Spider-Man movie to spread malicious files and phishing pages.  The researchers found numerous phishing websites pop up ahead of the movie premiere, purporting to…