Cybersecurity

A federal appeals court upheld a law requiring TikTok’s Chinese parent company to sell the popular app or face a U.S. ban. Read it at @TheHill. #TikTok #ByteDance #SocialMedia #Cybersecurity #Tech #Technology https://flip.it/LyB-sg

As telecoms scramble to oust Chinese hackers, FCC Chairwoman Jessica Rosenworcel says a yearly cyberdefense plan should be mandatory. Read more at @TechRadar. #Hack #Telecoms #FCC #Cybersecurity #SaltTyphoon #China #Tech #Technology https://flip.it/Zi2vUW

All Windows Workstation and Server versions from 7 to the latest 11 v24H2 and Server 2022 are affected by a zero-day vulnerability.

#cybersecurity #Windows #vulnerability #CyberAttack #infosec

https://cnews.link/windows-zero-day-attackers-can-steal-ntlm-credentials-1/

"A UK-led operation has uncovered a multibillion-dollar money laundering scheme run out of London, Moscow and Dubai that enabled Russian spies and European drug traffickers to evade sanctions using cryptocurrency.

The UK’s National Crime Agency said on Wednesday that its “Operation Destabilise” investigation centred on two companies — Smart and TGR — that acted as a financial hub for cash-rich global criminals and sanctioned individuals relying on cryptocurrency outside the banking system.

The NCA said the network had been used by clients including the Kinahan cartel, Irish cocaine traffickers linked to numerous contract killings, as well as funding ransomware groups, and “Russian espionage operations” from late 2022 to summer 2023.

The illicit network, operating across more than 30 countries, illustrates the growing interaction between hostile states and organised criminals as economic sanctions have forced countries such as Russia to find new ways of operating in the west. The case also shows the increasing use of cryptocurrencies by those cut off from the global banking system."

https://www.ft.com/content/31b9053f-343e-4c47-ace9-2b0080ec8799

#Crypto #Cryptocurrencies #UK #Russia #CyberSecurity #Cybercrime #Ransomware

"Security firm iVerify said a leader of a big company was among several individuals whose iPhones were recently targeted with the Pegasus spyware.

While journalists, human rights defenders, lawmakers, and political officials are frequent targets of state surveillance, reports of spyware compromising the phones of business leaders are rare, but not unheard of. The findings come as a fresh warning that spyware typically used by governments under the guise of preventing serious crime and terrorism can also be misused for commercial espionage.

In a call with TechCrunch this week, iVerify chief executive Rocky Cole declined to name who was targeted, but said that the spyware targeted a business “that you’ve heard about.” Cole, a former analyst at the National Security Agency, said the business leader, who iVerify is in contact with, was “completely surprised” by the attempt to compromise their phone."

https://techcrunch.com/2024/12/04/business-leaders-among-pegasus-spyware-victims-says-security-firm/

#CyberSecurity #NSOGroup #Spyware #Pegasus #iPhone

"At the start of 2024, OpenAI’s rules for how armed forces might use its technology were unambiguous.

The company prohibited anyone from using its models for “weapons development” or “military and warfare.” That changed on January 10, when The Intercept reported that OpenAI had softened those restrictions, forbidding anyone from using the technology to “harm yourself or others” by developing or using weapons, injuring others, or destroying property. OpenAI said soon after that it would work with the Pentagon on cybersecurity software, but not on weapons. Then, in a blog post published in October, the company shared that it is working in the national security space, arguing that in the right hands, AI could “help protect people, deter adversaries, and even prevent future conflict.”

Today, OpenAI is announcing that its technology will be deployed directly on the battlefield.

The company says it will partner with the defense-tech company Anduril, a maker of AI-powered drones, radar systems, and missiles, to help US and allied forces defend against drone attacks."

https://www.technologyreview.com/2024/12/04/1107897/openais-new-defense-contract-completes-its-military-pivot/amp/

#AI #OpenAI #AIWarfare #Cybersecurity #DroneWarfare

🧪 NEW BETA RELEASE 🧪

🔨 Xcode 16.2 RC (16C5031c)

#apple #cybersecurity #infosec #security #ios

🧪 NEW BETA RELEASES 🧪

📱 iOS 18.2 RC (22C150)
📱 iPadOS 17.7.3 RC (21H312)
📱 iPadOS 18.2 RC (22C150)
💻 macOS 15.2 RC (24C98)
📺 tvOS 18.2 RC (22K154)
🥽 visionOS 2.2 RC (22N840)
⌚ watchOS 11.2 RC (22S99)

#apple #cybersecurity #infosec #security #ios

European police authorities have dismantled a criminal network running an online marketplace described as a "central hub" for trading stolen data.

#Europe #online #DataPrivacy #DataSecurity #cybercrime #CyberSecurity

https://cnews.link/europol-shuts-down-stolen-data-marketplace-2/

Operation "Destabilize" disrupted Russian money laundering, cash couriers, and a crypto exchange linked to ransomware, drugs, and espionage.

#CyberSecurity #cybercrime #Russia #UK #infosec

https://cnews.link/nca-dismantles-huge-russian-cybercrime-network-1/

▪ @cybernews@infosec.exchange research ▪ Millions of Iraqis had their phone numbers and associated locations exposed.

#DataSecurity #DataPrivacy #cybersecurity #Iraq #Telecom #infosec

https://cnews.link/telecom-customers-phone-numbers-locations-exposed-3/

Self-scans reveal that Pegasus, an invasive and powerful spyware, might be more widespread than previously thought.

#CyberSecurity #spyware #cybercrime #Smartphones

https://cnews.link/pegasus-spyware-detected-on-ordinary-peoples-phones-1/

Biometric security was once heralded as a foolproof solution for any business.

#CyberSecurity #AI #deepfake #Security #cybercrime #infosec

https://cnews.link/artificial-intelligence-deepfake-fraud-2/

The FBI is warning Americans to use encrypted messaging apps as a result of the "Salt Typhoon" hack, which one U.S. Senator called “the worst [in] our nation’s history.” Read more at @Gizmodo. #SaltTyphoon #Hack #Cybersecurity #Signal #FBI #Tech #Technology https://flip.it/xdDXo_

Brain Cipher gang claims to have stolen 1TB of data from Deloitte UK. The breach is unconfirmed.

#Deloitte #ransomware #cybersecurity #UK #CyberCrime

https://cnews.link/ransomware-gang-claims-deloitte-uk-3/

Hundreds of thousands of individuals had their personal details revealed.

#databreach #cybersecurity #DataPrivacy #cyberattack #infosec

https://cnews.link/chemonics-usaid-contractor-data-breach-3/

Zabbix, a widely used IT infrastructure management and monitoring tool, recently patched a critical 9.9 out of 10 defect.

#cybersecurity #IT #Zabbix #cyberattack #infosec

https://cnews.link/critical-flaw-in-zabbix-monitoring-tool-1/

Cybercriminals are increasingly relying on generative AI to generate text, images, audio, and videos to amplify their scams.

#cybercrime #FBI #cybersecurity #AI #scams

https://cnews.link/cybercriminals-using-ai-for-most-types-of-scams-fbi-3/

The FTC restricted Mobilewalla and Gravy Analytics for selling location data of millions of Americans.

#dataprivacy #FTC #DataSecurity #cybersecurity #location #USA

https://cnews.link/ftc-bans-data-brokers-sensitive-location-data-3/

A South Korean company has allegedly exported 240,000 satellite receivers with DDoS attack capabilities to an overseas client.

#DDoS #SouthKorea #satellite #CyberSecurity #infosec

https://cnews.link/korean-firm-exporting-satellite-receivers-ddos-1/

🧪 NEW BETA RELEASE 🧪

🥽 visionOS 2.2 beta 4 (22N5800a)

#apple #cybersecurity #infosec #security #ios

▪ @cybernews@infosec.exchange research ▪ A safe linking service accidentally leaked millions of private links, revealing their creators.

#CyberSecurity #DataSecurity #Links #DataPrivacy #infosec

https://cnews.link/safelinking-data-leak-3/

"So, what should we make of all this? I’m always worried to see the rise of far-right candidates, but by now we have plenty of examples of establishment parties pointing to social media manipulation (often with some link to Russian interference) as the reason for their declining support instead of probing how the public has (often rightfully) become disillusioned with the politics they’re offering. I don’t know enough about Romania to know where this case falls, but I wouldn’t be surprised if it’s somewhere in the middle.

It doesn’t appear that TikTok intentionally manipulated its algorithms to promote Georgescu, but rather that actors took advantage of the way its platform is designed to get the results they were expecting — not unlike how Russian actors didn’t actually “hack” the 2016 US election. For now it’s worth watching to see where the Romanian case goes."

https://disconnect.blog/roundup-whats-going-on-in-romania/

#SocialMedia #Romania #TikTok #Algorithms #FarRight #CyberSecurity #Politics #Elections #Russia

Russian authorities have arrested notorious hacker Mikhail Matveev linked to $200M in ransomware payments.

#Russia #hacker #ransomware #cybercrime #CyberSecurity

https://cnews.link/cybercriminal-wazawaka-arrested-in-kaliningrad-russia-1/

In 2023, two ex-hackers reunited after years in prison to protest the courthouse that sentenced them.

#hackers #jail #Crime #court #cybercrime #cybersecurity

https://cnews.link/hackers-march-outside-courthouse-prison-1/