Cybersecurity

The latest news and reviews of cybersecurity services and software.

Explore Cybersecurity
VPN

Latest

Deepfake Queen Elizabeth II will deliver 'alternative' Christmas message (updated)
Just about every year since 1952, Queen Elizabeth II of the United Kingdom has delivered a Christmas address to the masses, and 2020 will be no different. Shortly after she gives her remarks, however, British broadcaster Channel 4 will air an “alternative message” from the Queen, brought to life by deepfake software and an actress with a pseudo-regal affect. “On the BBC, I haven’t always been able to speak plainly and from the heart,” the “Queen” said in a promo posted to the broadcaster’s Twitter.
New York is the first state to temporarily ban facial recognition in schools
New York state is suspending the use of facial recognition in schools until it can study the privacy and security implications.
Apple begins sending hacker-friendly iPhones to security experts
The security experts participating in Apple’s Security Research Device (SRD) Program may soon be receiving their hacker-friendly iPhones.
Microsoft, McAfee and others form a ransomware task force
They hope to create a standardized framework for responding to attacks.
Facebook will offer enhanced security to more people in 2021
Facebook has a higher-level of security it offers to US political figures. Now human rights activists, journalists and politicians outside the US will be able to access it.
Let's Encrypt will help old Android phones browse securely for three more years
Back in November, Let's Encrypt warned that older Android phones stuck running 7.1.1 Nougat or lower won’t be able to visit large portions of the secure web by September 2021. Now, the nonprofit certificate authority has announced that it has found a solution for the problem that will extend older Android phones’ compatibility with its certificates by three years. Let's Encrypt relies on IdenTrust, another certificate authority, for cross-signature that allows its certificates to work on older platforms.
NVIDIA and Intel used compromised SolarWinds software
NVIDIA and Intel have joined the growing list of organizations affected by the unprecedented hack US officials have blamed on Russia. 
Civil rights groups demand CBP stops facial recognition expansion at airports
The ACLU, Electronic Frontier Foundation and others objected to a proposed rule change.
iPhone security flaw let spies hack dozens of Al Jazeera journalists
A security vulnerability in iPhones let spies hack dozens of Al Jazeera journalists using an NSO Group tool.
Trump administration proposes splitting Cyber Command from the NSA
The Trump administration has proposed splitting Cyber Command leadership from the NSA, although it's not clear if the division is ready.
Secretary of State says Russia is 'clearly' behind federal agency hacks (updated)
US Secretary of State Mike Pompeo has blamed Russia for a hacking campaign against federal agencies — the first in the administration to accuse Putin.
Microsoft confirms it found compromised SolarWinds code in its systems
Various organizations are grappling with the impact of a massive hacking campaign that compromised networks using SolarWinds’ Orion network management tools, and now Microsoft says it found “malicious binaries” on its systems. As Reuters reports, the NSA sent out a cybersecurity advisory on Thursday that specifically referenced Microsoft products like Azure and Active Directory as tools the attackers targeted to gain access to other resources. In a statement, Microsoft confirmed it had found “malicious binaries” on its systems from the attacks, but found no access that anyone had accessed production services or customer data.
State-sponsored hackers have breached the US' nuclear weapons agency
Foreign hackers have breached the networks of the US Department of Energy and National Nuclear Security Administration.
Prosecutors say Trump's Twitter was 'hacked' through simple password guess
Dutch prosecutors say a man really did 'hack' Donald Trump's Twitter account by guessing the password.
Microsoft Authenticator can now store and autofill mobile device passwords
Microsoft’s Authenticator on mobile will soon be updated with password management and autofill capabilities, the company announced.
Facebook takes down fake accounts linked to French military and Russia
Facebook has identified more coordinated inauthentic behavior. The takedowns were linked to people associated with the French military and Russia's IRA.
Foreign state hackers reportedly breached the US Treasury (updated)
Hackers backed by a foreign government reportedly breached the US Treasury Department and NTIA, stealing info in the process.
Spotify forces more password resets after plugging a security hole
Spotify recently reset the passwords of a small subset of its users after a software oversight exposed private account information to some of its business partners.    
DOJ announces guilty plea for 2016 cyberattack that broke the internet
More than four years after the Dyn cyberattack in 2016, we have a better idea of who was behind one of the most disruptive DDoS attacks in internet history.
Cybersecurity firm FireEye says state-sponsored hackers stole its tools
FireEye, one of the largest cybersecurity firms in the US, says it believes it’s been the victim of a state-sponsored hacking attack that saw the theft of internal tools it uses to conduct penetration testing for other companies.

...