Page 238 - Computer Security News Today

New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites Researchers have disclosed a new type of attack that exploits misconfigurations in transport layer security (TLS) servers to redirect HTTPS traffic from a victims web browser to a different TLS service endpoint located on another IP address to steal sensitive information. The attacks have been dubbed ALPACA, short for "Application Layer Protocol Confusion - Analyzing and mitigating Cracks in tls Authentication," by...

A Latvian woman has been charged for her role in creating the Trickbot banking malware

F.B.I. Director Compares Danger of Ransomware to 9/11 Terror Threat The Biden administration is taking steps to counter the growing threat of cyberattacks on U.S. businesses, and encouraging companies to do more to protect themselves. Christopher A. Wray, the F.B.I. director, said that Russia was harboring some of the most dangerous ransomware groups.Credit...Anna Moneymaker for The New York Times June 4, 2021Updated 8:39 p.m. ET WASHINGTON — The Biden administration is sounding increasingly ...

Are We Waiting for Everyone to Get Hacked? It’s been almost a decade since Leon Panetta, then the secretary of defense, warned of an impending “Cyber Pearl Harbor.” He didn’t want to be right. Credit...Cayce Clifford for The New York Times June 5, 2021Updated 5:56 a.m. ET MONTEREY, Calif. — Leon Panetta is one of the few American government officials who can look around at the nation’s rolling cyberdisasters and justifiably say, “I told you so.” The former secretary of defense w...

TikTok updated its privacy policy quietly to collect biometric data from users.

Authorities succeeded in shuttering an activist site for three days. The takedown, and its reversal, presage a battle over internet freedoms.

Supreme Court Limits Reach of Federal Law on Computer Crime In a 6-to-3 decision featuring unusual alliances, the court said it was wary of interpreting the law to allow commonplace conduct to be prosecuted. Justice Amy Coney Barrett, writing for the majority, said a former police officer’s conduct was not a crime under the Computer Fraud and Abuse Act of 1986.Credit...Stefani Reynolds for The New York Times June 3, 2021, 12:38 p.m. ET WASHINGTON — The Supreme Court on Thursday narrowed the...

Researchers Uncover Hacking Operations Targeting Government Entities in South Korea A North Korean threat actor active since 2012 has been behind a new espionage campaign targeting high-profile government officials associated with its southern counterpart to install an Android and Windows backdoor for collecting sensitive information. Cybersecurity firm Malwarebytes attributed the activity to a threat actor tracked as Kimsuky, with the targeted entities comprising of the Korea Internet and Secu...

U.S. Department of Justice has seized two domain names used by SolarWinds hackers in a cyberespionage campaign.

Hackers with suspected ties to China penetrated the New York transit agency’s computer systems in April, an M.T.A. document shows. Transit officials say the intrusion did not pose a risk to riders.