Page 248 - Computer Security News Today

© Getty Images As cyber investigators continue to examine the SolarWinds attack, a more complicated picture of what actually happened has begun to emerge. The Acting Director of Homeland Security’s Cybersecurity and Infrastructure Security Agency, Brandon Wales, said that federal investigators had found Russian intelligence agents alleged to have been behind the SolarWinds hack actually used a variety of techniques well beyond the eponymous compromised software. Wales added that Russian agen...

SolarWinds Blames Intern for solarwinds123 Password Lapse As cybersecurity researchers continue to piece together the sprawling SolarWinds supply chain attack, top executives of the Texas-based software services firm blamed an intern for a critical password lapse that went unnoticed for several years. The said password "solarwinds123" was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018, before the misconfiguration was addressed on November 22, 2...

Study Finds Malicious Amazon Alexa Skills Can Easily Bypass Vetting Process

North Korean Hackers Targeting Defense Firms with ThreatNeedle Malware

Ukraine Says Russian Hackers Launched Supply-Chain Malware Attack Against its Government Agencies

Chinese Hackers Using Firefox Extension to Spy On Tibetan Organizations Cybersecurity researchers today unwrapped a new campaign aimed at spying on vulnerable Tibetan communities globally by deploying a malicious Firefox extension on target systems. "Threat actors aligned with the Chinese Communist Partys state interests delivered a customized malicious Mozilla Firefox browser extension that facilitated access and control of users Gmail accounts," Proofpoint said in an analysis. The Sunnyvale-b...

After Russian Cyberattack, Looking for Answers and Debating Retaliation Key senators and corporate executives warned at a hearing on Tuesday that the “scope and scale” of the hacking of government agencies and companies, the most sophisticated in history, were still unclear. Video -0:00 The Scale of the SolarWinds Breach Is Still Unclear, Executives Say During a Senate Intelligence Committee hearing on Tuesday, executives defended how they responded to the SolarWinds breach and warned senat...

Photo: KIRILL KUDRYAVTSEV/AFP (Getty Images) It’s been a mystery as to who is responsible for the disastrous pummeling of Accellion, the global cloud provider that, in December, suffered through a large cyberattack. This week, researchers announced that the responsible party may have ties to two prominent hacker groups. Advertisement Accellion recently discovered that a threat actor had been exploiting zero-day vulnerabilities in its legacy file-transfer service application (called “FTA”...

We’ve lost far too many hackers to suicide. What if Satoshi was one of them? Embedded on every single node of the Bitcoin network is an obituary. Hacked into the transaction data, it’s a memorial to Len Sassaman, a man essentially immortalized in the blockchain itself. A fitting tribute in more ways than one. Len was a true Cypherpunk— equal parts brilliant, irreverent, and idealistic. He devoted his life to defending personal freedoms through cryptography, working as a developer on PGP e...

It’s the economy, stupid. By Bruce Schneier Mr. Schneier is a security technologist and the author of 14 books, including “Click Here to Kill Everybody: Security and Survival in a Hyper-Connected World.” He is a fellow at the Belfer Center at the Harvard Kennedy School and a fellow at the Berkman Klein Center for Internet and Society at Harvard University. Feb. 23, 2021 Credit...Alex Merto Early in 2020, cyberspace attackers apparently working for the Russian government compromised a piec...