US Gov Warns of Ransomware Attacks on Pipeline Operations DHS’s CISA issued an alert this week to all U.S. critical infrastructure that a U.S. natural gas compressor station suffered a ransomware attack. While they claim that the attackers did not get control of the gas compression hardware, they did come damn close. The ransomware took […]
Continue reading → [DISPLAY_ACURAX_ICONS]Feds Say 4 Chinese Hackers Took Down Equifax The Department of Justice indicted 4 members of the Chinese People Liberation Army, saying that they were responsible for detecting the fact that Equifax did not patch their some of their servers and thus were easily hackable. This, of course, means that the hack did not require […]
Continue reading → [DISPLAY_ACURAX_ICONS]In one case, the answer is probably. If I want to delete one of my blog posts, I can probably do that. But not if someone copied it. Which I can’t control. Then they can upload it again. I can send a DCMA take-down notice to the hosting provider, which they might ignore if they […]
Continue reading → [DISPLAY_ACURAX_ICONS]While I have reported about software supply chain attacks in the past, they have all been one-off and in some cases highly targeted attacks. The FBI has issued a warning about ongoing, large scale, software supply chain attacks. The attackers are using the Kwampirs malware to install a Remote Access Trojan or RAT. The FBI […]
Continue reading → [DISPLAY_ACURAX_ICONS]Iran Expands Oil & Gas Attacks to Electric as Well According to researchers, Iran linked APT33 has expanded its attack surface. Initially they were going after the global oil and gas industry but now they have added the electric grid to the mix. Right now, they say, the goal is reconnaissance – gathering information to […]
Continue reading → [DISPLAY_ACURAX_ICONS]UK Proposes Weak Security Law for IoT Devices; Calls it Strong The UK is proposing a law similiar to California’s existing IoT law and calls it strong security. What makes it strong is that they call it strong, maybe? The bill requires that default passwords on IoT devices be unique (likely part of the serial […]
Continue reading → [DISPLAY_ACURAX_ICONS]