"FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures"

"FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures"

The US Federal Trade Commission (FTC) recently announced that it will send a total of $5.6m in refunds to customers of Ring, a home camera provider, due to a settlement with Ring over security and privacy failings. Ring, which was bought by tech giant Amazon in 2018, reached a settlement with the FTC in 2023 over charges that the company allowed employees and contractors to access consumers’ private videos and failed to implement security protections, enabling hackers to take control of consumers’ accounts, cameras, and videos.

Submitted by Adam Ekwall on

"Cybersecurity Researchers Spotlight a New Ransomware Threat – Be Careful Where You Upload Files"

"Cybersecurity Researchers Spotlight a New Ransomware Threat – Be Careful Where You Upload Files"

A team of researchers from Florida International University's (FIU) Cyber-Physical Systems Security Lab, in collaboration with Google Senior Research Scientist Guliz Seray Tuncay, delved into how hackers can gain access to a user's computer files via the File System Access Application Programming Interface (API), which allows web applications in modern browsers to interact with users' local file systems. The threat affects Google Chrome and Microsoft Edge browsers, but not Apple Safari or Mozilla Firefox.

Submitted by grigby1 CPVI on

"HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees"

"HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees"

As reported by security researcher "3xp0rt," a hacker claiming to be the creator of "HelloKitty" ransomware has rebranded the gang as "HelloGookie." HelloKitty is known for hacking the game company CD Project Red in 2021 and stealing the source code for Cyberpunk 2077, Witcher 3, and Gwent. The threat actor debuted with a massive data dump on a new dark web website. HelloGookie uploaded a 750GB archive with Witcher 3 builds and Cyberpunk 2077 source code. This article continues to discuss the rebranding of the HelloKitty ransomware. 

Submitted by grigby1 CPVI on

IEEE Secure Development Conference (SecDev)

"SecDev​ ​is​ ​a​ ​venue​ ​for​ ​presenting​ ​ideas,​ ​research,​ ​and​ ​experience​ ​about​ ​how​ ​to​ ​develop​ ​secure systems. It focuses on theory,​ ​techniques,​ ​and​ ​tools​ ​to ​'build​ ​security​ ​in' to​ ​existing​ ​and​ ​new​ ​computing​ ​systems, and does not focus on simply discovering​ ​the​ ​absence​ ​of​ ​security.​

 

6th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)

"IEEE TPS-ISA is an international multidisciplinary forum for presentation of state-of-the art innovations, and discussion among academic, industrial researchers, and practitioners on issues related to trust, privacy and security in emerging smart and intelligent systems and applications."

11th International Conference on Internet of Things: Systems, Management and Security (IOTSMS 2024)

"The international conference on Internet of Things: Systems, Management, and Security (IoTSMS) aims at soliciting original ideas on the broad area of IoT, including challenges and opportunities, concepts and applications, and future trends. The IoTSMS aims to facilitate discussions among academics and IoT practitioners and make positive contributions to the field."

24th International Conference on Software Quality, Reliability and Security (QRS)

"This conference gives engineers and scientists from both industry and academia a platform to present their ongoing work, relate their research outcomes and experiences, and discuss the best and most efficient techniques for the development of reliable, secure, and trustworthy systems."

 

9th IEEE European Symposium on Security and Privacy

"Euro S&P has traditionally focused on technical aspects of computer security and privacy research. We consider the scope of the symposium to include economic, ethical, legal, and social aspects and interdependencies of computer security and privacy. We especially encourage submissions that address global aspects of computer security and privacy, including issues particular to parts of the world and communities that are often neglected."

 

"Why Banks Should be Taking Quantum Security Very Seriously"

"Why Banks Should be Taking Quantum Security Very Seriously"

According to Elshan Kashefi, UK's National Quantum Computing Centre Chief Scientist, banks should be concerned about quantum security. Kashefi warned of the immense threat quantum computers pose before they are even fully functional. Today, cybercriminals are stealing encrypted data in bulk to decrypt it with a quantum device in the future. These Harvest Now, Decrypt Later (HNDL) attacks put today's sensitive information at risk of theft. Due to their large and varied data, financial institutions are prime targets for these attacks.

Submitted by grigby1 CPVI on

"Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries"

"Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries"

Over 1,000 "Godfather" mobile banking Trojan samples are circulating in dozens of countries, targeting hundreds of banking apps. Godfather, which can record screens and keystrokes, intercept Two-Factor Authentication (2FA) calls and texts, initiate bank transfers, and more, was discovered in 2022. It has become one of the most popular Malware-as-a-Service (MaaS) offerings in cybercrime. According to Zimperium's 2023 "Mobile Banking Heists Report," Godfather targeted 237 banking apps in 57 countries as of late 2023.

Submitted by grigby1 CPVI on
Subscribe to