News
  • "Pwn2Own Hackers Go Remote, Then Crack macOS and Oracle Machines Anyway"
    Pwn2Own is a hacking contest in which ethical hackers can earn rewards for discovering vulnerabilities in different programs. Global technology firms are now using the competition as a way to recruit bug hunters who can help improve the security of their…
  • CMU is the NSA Featured School of the Quarter
    Each quarter, The National Security Agency recognizes the agency's engagement with an academic institution. This quarter, the school is Carnegie Mellon University in Pittsburgh, PA. CMU has many relationships with the NSA including hosting an SoS Lablet…
  • "Data Privacy and Security in the Travel Industry"
    The COVID-19 outbreak has had a significant impact on the travel industry, temporarily forcing operations to shut down. The cruise, airline, and hotel sectors could take this time to examine and improve the privacy and security of the personally…
  • "Vulnerability Exposed Tesla Central Touchscreen to DoS Attacks"
    Researchers have discovered a flaw in Tesla Model 3's web interface.  Tesla Model 3's web interface has a denial of service (DoS) vulnerability.  To exploit the vulnerability, a user would have to go to a malicious webpage.  If the user…
  • "Process Injection Tops Attacker Techniques for 2019"
    Red Canary's "2020 Threat Detection Report" highlights findings from the analysis of 15,000 confirmed threats that appeared in customer environments from the past year. Researchers' findings shared in the report give insight into the most common attack…
  • "Healthcare Cybersecurity in the Time of Coronavirus"
    Despite the COVID-19 crisis, hackers are still not holding back on attacking healthcare organizations. Brno University Hospital in the city of Brno, Czech Republic, faced a cyberattack that resulted in postponed surgeries and the redirection of some…
  • "'Dirty Little Secret' Extortion Email Threatens to Give Your Family Coronavirus"
    Researchers have discovered an extortion email where adversaries are sending threatening emails to people demanding 4,000 dollars.  In the email, the adversaries say that if the money is not sent to them, then they will infect the individual's…
  • "NIST, DHS Publish Guidance on Securing Virtual Meetings, VPNs"
    The National Institute of Standards and Technology (NIST) and the Department of Homeland Security's (DHS) Cybersecurity and Infrastructure Agency (CISA) are offering recommendations to organizations on how to conduct virtual meetings securely. They are…
  • "SANS Offers Free Kit to Secure Home Workers"
    The SANS Institute is offering a training kit and additional resources aimed at providing knowledge for organizations, parents, and individuals on how to protect themselves against cyber threats when working from home during the COVID-19 outbreak. The…
  • "Chip-Based Devices Improve Practicality of Quantum-Secured Communication"
    Quantum computers will render current encryption algorithms obsolete. Today's encrypted data could be exposed by attackers through the use of quantum computers, posing a significant threat to the privacy of data stored and handled by the government…
  • "Facebook Accidentally Blocks Genuine COVID-19 News"
    Fake news is a problem Facebook has been trying to deal with a lot, and COVID-19 is not making it more manageable.  On Monday, Facebook joined other social media sites on trying to scrub posts of fake news about COVID-19. After Facebook declared it…
  • "Attacks on DOD Networks Soar as Telework Inflicts 'Unprecedented' Loads"
    There has been a rise in cyberattacks on Defense Department networks as the demand on military computer networks by teleworking employees increases. To safeguard DOD networks and address the increased telework demand due to the coronavirus outbreak, the…