China poses a broad range of data security risks.
Tag Archives: computer security
A Breach at LastPass Has Password Lessons for Us All
The hacking of the password manager should make us reassess whether to trust companies to store our sensitive data in the cloud.
A Cyberattack Shuts the Met Opera’s Box Office, but the Show Goes On
After hackers knocked out the ticket-selling system of the Met, the largest performing arts organization in the United States, the company decided to sell $50 general admission seats.
Brazil Counted All Its Votes in Hours. It Still Faces Fraud Claims.
A report from the military found no voter fraud — but left room for Bolsonaro’s supporters to argue maybe he’d actually won.
Gaming Is Booming. That’s Catnip for Cybercriminals.
Cybersecurity experts warn that threats lurk in cheat codes, microtransactions and messages from fellow players.
The Uber Hack Exposes More Than Failed Data Security
We need strong regulations that force organizations to maintain good security practices.
As Ex-Uber Executive Heads to Trial, the Security Community Reels
Joe Sullivan, Uber’s former chief of security, faces criminal charges for his handling of a 2016 security breach. His trial this week has divided the security industry.
How Russia Relies on Old Tech in Weapons Aimed at Ukraine
Investigators who examined the electronics in Russia’s newest cruise missiles and attack helicopters were surprised to find decades-old technology reused from earlier models.
A Dad Took Photos of His Naked Toddler for the Doctor. Google Flagged Him as a Criminal.
Google has an automated tool to detect abusive images of children. But the system can get it wrong, and the consequences are serious.
A Cyberattack Illuminates the Shaky State of Student Privacy
At a moment when education technology firms are stockpiling sensitive information on millions of school children, safeguards for student data have broken down.
In a Post-Roe World, the Future of Digital Privacy Looks Even Grimmer
The sheer amount of tech tools and knowledge required to discreetly seek an abortion underlines how wide open we are to surveillance.
Chinese Police Database Was Unsecured Long Before It Was Seized
The breach is “a big black eye” for the Chinese security apparatus, one expert says, exposing the risk of the state’s vast effort to amass citizens’ personal data.
Hacker Offers to Sell Chinese Police Database in Potential Breach
For about $200,000, an unidentified person or group is offering what is described as data on a billion Chinese citizens. A sampling seemed to show the data to be genuine.
Accused Capital One Hacker Stands Trial for Fraud and Identity Theft
A woman is accused of downloading data of more than 100 million Capital One customers. Her lawyers argue a conviction would criminalize legitimate research practices.
‘Quantum Internet’ Inches Closer With Advance in Data Teleportation
Scientists have improved their ability to send quantum information across distant computers — and have taken another step toward the network of the future.
Tina Peters, G.O.P. Colorado Secretary of State Candidate, Is Barred From Overseeing Elections
A judge ruled that Tina Peters, a pro-Trump Republican accused of tampering with voting equipment in Mesa County, had “committed a neglect of duty.”
Text Spam Is on the Rise. Here’s How to Spot It and What to Do
Text spam is on the rise. The latest version involves scammers sending messages to you seemingly from your own phone number. Here’s what to do.
Hackers’ Fake Claims of Ukrainian Surrender Aren’t Fooling Anyone. So What’s Their Goal?
Experts say the hackers’ intentions might not be to actually trick anyone, but to erode confidence in Ukrainian media outlets and institutions.
U.S. Accuses 4 Russians of Hacking Infrastructure, Including Nuclear Plant
The announcement covered hackings from 2012 to 2018, but served as yet another warning from the Biden administration of Russia’s ability to conduct such operations.
Poland Wins European Tree of the Year After Russia Is Banned
After Russia was banned from the European Tree of the Year competition, organizers reflected on how a celebration of trees became tangled up in global politics.
With Eye to Russia, Biden Administration Asks Companies to Report Cyberattacks
A new law requires companies to tell the federal government about hacks, but the Cybersecurity and Infrastructure Security Agency still has to work out the details of what must be reported.
Yes, You Can Make Your Tech Survive Obsolescence
Our gadgets eventually become outdated, but here are workarounds to keep them alive and secure past when manufacturers say.
I.R.S. Will Allow Taxpayers to Forgo Facial Recognition Amid Blowback
The agency, dealing with controversy over its decision to use facial recognition software, said it would allow taxpayers to authenticate their accounts with a live, virtual interview.
Kazakhstan’s Internet Shutdowns Could Be a Warning for Ukraine
Control of the internet is increasingly part of any modern conflict.
2020 Election Denier Will Run for Top Elections Position in Colorado
Tina Peters, the Mesa County clerk, has been stripped of her county election oversight but is seeking to oversee her state’s elections as secretary of state.
I.R.S. to End Use of Facial Recognition for Identity Verification
The tax collection agency will transition away from using a service from the authentication service ID.me amid bipartisan backlash.
U.S. Sends Official to Help NATO Brace for Russian Cyberattacks
Intelligence assessments suggest that a Russian invasion of Ukraine would most likely be preceded by cyberattacks on Ukraine’s electric grid, its communications systems and its government.
China’s Olympics App for Athletes Has Security Flaws, Study Says
Researchers said the app, which will store sensitive health data on participants at the Winter Games, has serious encryption vulnerabilities.
Ransomware Group REvil Dismantled in Raids, Russia Says
Moscow said the ransomware group REvil “ceased to exist” after raids and arrests. It is not clear if the operation will ease tensions with Washington.
We’re All ‘Experts’ Now. That’s Not a Good Thing.
Widespread scams and institutional failures force us to rely on only ourselves.
Biden Administration Warns Against Spyware Targeting Dissidents
The U.S. intelligence community offered steps that would mitigate — but not stop — spyware developed by firms like the NSO Group.
Someone Offered ‘Harvard’ Jobs to Known Women in India. It Was a Scam.
For over a year, prominent women in India, including journalists, were reeled into a labyrinthine online scam, offering work with Harvard University. Who targeted them, and why, is a mystery.
Microsoft Seizes 42 Websites From a Chinese Hacking Group
The group was likely using the websites to install malware that helped it gather data from government agencies and other groups, the company said.
Companies Linked to Russian Ransomware Hide in Plain Sight
Cybersecurity experts tracing money paid by American businesses to Russian ransomware gangs found it led to one of Moscow’s most prestigious addresses.
Israeli Company’s Spyware Is Used to Target U.S. Embassy Employees in Africa
The hack is the first known case of the spyware, known as Pegasus, being used against American officials.
Israel and Iran Broaden Cyberwar to Attack Civilian Targets
Iranians couldn’t buy gas. Israelis found their intimate dating details posted online. The Iran-Israel shadow war is now hitting ordinary citizens.
Apple Sues Israeli Spyware Maker NSO Group
Apple accused NSO Group, the Israeli surveillance company, of “flagrant” violations of its software, as well as federal and state laws.
Alan Paller, a Mover on Cybersecurity Threat, Is Dead at 76
He made it his mission to find, recruit and develop the next generation of digital warriors to defend the nation against an onslaught of cyberattacks.
Palestinian Diplomats Targeted by Israeli Spyware, Official Says
The accusation, which has not been independently verified, raises new questions over whether Israel is using software made by NSO Group to spy on Palestinians.
I Was Hacked. The Spyware Used Against Me Makes Us All Vulnerable.
Invasive hacking software sold to countries to fight terrorism is easily abused. Researchers say my phone was hacked twice, probably by Saudi Arabia.
A Rare Win in the Cat-and-Mouse Game of Ransomware
A team of private security sleuths, in their first public detailing of their efforts, discuss how they used cybercriminals’ mistakes to quietly help victims recover their data.
The Sheikh, the Businessman and a Hacking Mystery on 3 Continents
A case that began with a feud in the United Arab Emirates, stretched from the U.S. to India and is now playing out in the British courts offers a rare glimpse into the anatomy of a hack-and-leak operation.
Submarine Spy Case: Couple Stewed Over Money and Politics
Jonathan and Diana Toebbe, charged with trying to sell classified nuclear secrets to a foreign power, struggled with finances, family and the state of America.
Couple in Submarine Spy Case Stewed Over Money and Politics
Jonathan and Diana Toebbe, charged with trying to sell classified nuclear secrets to a foreign power, struggled with finances, family and the state of America.
Governor Accuses Reporter of Hacking After Flaws in State Website Are Revealed
Gov. Mike Parson of Missouri has asked for a criminal investigation of a St. Louis Post-Dispatch reporter who told the state that a website revealed teachers’ Social Security numbers.
Cybersecurity Experts Sound Alarm on Apple and E.U. Phone Scanning Plans
A group of researchers said the “dangerous technology” was invasive and not effective at detecting images of child sexual abuse.
It’s Time to Stop Paying for a VPN
Many virtual private network services that were meant to protect your web browsing can no longer be trusted. Here are other ways.
How to Find ‘Stalkerware’ on Your Devices
These spyware apps record your conversations, location and everything you type, all while camouflaged as a calculator or calendar.
Stairwell secures $20M Series A to help organizations outsmart attackers
Back when Stairwell emerged from stealth in 2020, the startup was shrouded in secrecy. Now with $20 million in Series A funding, its founder and CEO Mike Wiacek — who previously served as chief security officer at Chronicle, Google’s moonshot cybersecurity company — is ready to talk.
As well as raising $20M, an investment round co-led by Sequoia Capital and Accel, Stairwell is launching Inception, a threat hunting platform that aims to help organizations determine if they were compromised now or in the past. Unlike other threat detection platforms, Inception takes an “inside out” approach to cybersecurity, which starts by looking inwards at a company’s data.
“This helps you study what’s in your environment first before you start thinking about what’s happening in the outside world,” Wiacek tells TechCrunch. “The beautiful thing about that approach is that’s not information that outside parties, a.k.a. the bad guys, are privy to.”
This data, all of which is treated as suspicious, is continuously evaluated in light of new indicators and new threat intelligence. Stairwell claims this enables organizations to detect anomalies within just days, rather than the industry average of 280 days, as well as to “bootstrap” future detections.
“If you go and buy a threat intelligence feed from Vendor X, do you really think that someone who’s spending hundreds of thousands, or even millions of dollars to conduct an offensive campaign isn’t going to make sure that whatever they’re using isn’t in that field?,” said Wiacek. “They know what McAfee knows and they know other antivirus engines know, but they don’t know what you know and that’s a very powerful advantage that you have there.”
Stairwell’s $20 million in Series A funding, which comes less than 12 months after it secured $4.5 million in seed funding, will be used to further advance the Inception platform and to increase the startup’s headcount; the Palo Alto-based firm currently has a modest headcount of 21.
The Inception platform, which the startup claims finally enables enterprises to “outsmart the bad guys”, is launching in early release for a limited number of customers, with full general availability scheduled for 2022.
“I just wish we had a product to market when SolarWinds happened,” Wiacek added.
America Is Being Held for Ransom. It Needs to Fight Back.
Businesses attacked. Data stolen. Miles of pipeline shut down. The scourge of ransomware is worse than ever.