Skip to main content

Security

No over-the-air update means GM has to recall four million cars to fix fatal software defect

posted onSeptember 13, 2016
by l33tdawg

US motor company General Motors is recalling four million vehicles worldwide due to a software bug that has been linked to at least one death.

A variety of trucks and cars released between 2014 and 2017 are to be recalled to have their software updated for free, according to an announcement issued by the National Highway Traffic Safety Administration on Friday.

The recalled vehicles are:

Now the Head of NSA Is Concerned About Russia Hacking U.S. Elections

posted onSeptember 13, 2016
by l33tdawg

The head of the National Security Agency, Adm. Michael Rogers, said on Tuesday that he is concerned about the possibility of Russia hacking the U.S. electoral process.

During a Senate Armed Services Committee hearing, Sen. John McCain asked Rogers if Russia could “disrupt the voting results in the upcoming election,” NBC reported. The back-and-forth went like this:

    Admiral Mike Rogers, head of the NSA and U.S. Cyber Command, spoke about the disparate structure with some states voting manually and others electronically.

GCHQ blocks 58,000 scam emails from government addresses every day

posted onSeptember 13, 2016
by l33tdawg

The UK's intelligence agency GCHQ has stepped up the fight against online scammers and created a tool that blocks malicious emails that appear to be sent from government addresses, but are in fact run by cyber criminals.

The blocking system can identify when "gov.uk" emails are being sent from IP addresses not associated with an official government computer and block them.

Mergers create greater security risk

posted onSeptember 13, 2016
by l33tdawg

Corporate mergers and acquisitions (M&A) can be fraught with risks related to financial matters, company culture, personnel, IT systems integration and other areas.

Security risks, both cyber and physical, certainly belong on the list of concerns. And with the ongoing shortage of professionals who are expert in various aspects of data protection—coupled with the seemingly endless stream of reports about data breaches and other security threats—this has become an even bigger concern for companies that are considering or in the midst of M&A deals.

Russian hackers allegedly target the World Anti-Doping Agency

posted onSeptember 13, 2016
by l33tdawg

The same Russian state-sponsored hackers that allegedly breached the Democratic National Committee may have also targeted the World Anti-Doping Agency.

On Tuesday, the sports drug-testing agency blamed a recent breach of its network on a Russian hacking group known as APT 28 or Fancy Bear.

Seagate sued by its own staff for leaking personal info to identity thieves

posted onSeptember 11, 2016
by l33tdawg

Seagate is trying to fight off a lawsuit filed by employees whose personal information was lost when the storage giant was hit with a phishing attack.

The company is in the midst of a hearing over whether the aggrieved workers have grounds to sue their employer for negligence after someone in human resources was duped into handing over copies of employee W‑2 tax forms.

2016 mega breaches continue as hackers steal and leak 33 million QIP.ru accounts

posted onSeptember 11, 2016
by l33tdawg

2016 appears to be the year of the "mega breaches" and the hits keep on coming, with the Russian instant messaging service QIP.ru becoming the latest victim of hackers.

Cybersecurity startup Heroic, which offers hacker and cyberattack protection to users, told IBTimes UK that the firm had "obtained and validated a data breach of over 33 million accounts associated with the Russian instant messaging platform".

Dropbox tackles security fears surrounding its Mac app

posted onSeptember 11, 2016
by l33tdawg

Dropbox has already raised some eyebrows over its requests for ever-deeper access to your computer, and recent discoveries aren't helping things much. Users now claim that Dropbox's Mac app asks for overly broad permissions, swipes your password and even hacks the operating system. The cloud storage service denies the claims and is trying to allay those fears, though. Desktop app team member Ben Newhouse has responded to concerns on Hacker News with both an explanation of design decisions and a promise to improve its transparency.

And this is why you don’t scam a security professional on Reddit

posted onSeptember 11, 2016
by l33tdawg

Trying to scam someone on the internet is always a bad idea, but if that someone turns out to be the head of a security research company, you’re in for a whole world of hurt.

Christian Haschek is an Austrian security researcher who was trying to sell $500 in US Apple gift cards on Reddit, since they’re a pain to use from overseas. He thought he had struck a deal with a buyer, but that buyer turned out to be less than honest.