As part of CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) in the just passed omnibus spending bill, CISA is required to stand up a Ransomware Task Force. Jen Easterly, head of CISA, having just won the battle that requires companies to report breaches and ransomware payments to her rather than the FBI (which pissed […]
Continue reading → [DISPLAY_ACURAX_ICONS]While any form of two factor authentication is better than none, there are still security holes. In a story I read tonight, a tech savvy user fell for a social engineering attack. He received what he thought was an Instagram message from a friend and responded to it. It turns out it was a social […]
Continue reading → [DISPLAY_ACURAX_ICONS]Flaw in uClibc Allows DNS Poisoning Attacks A flaw in all versions of the popular C standard libraries uClibc and uClibc-ng can allow for DNS poisoning attacks against target devices. The library is likely used in milliosn of Internet of Things devices that will never be patched and will always be vulnerable. This is where […]
Continue reading → [DISPLAY_ACURAX_ICONS]We all know that North Korea has been funding their terrorism – and their economy – using ransomware attacks and other malware. Now they have a new way and it is pretty creative. According to an advisory from the feds, North Korean IT workers have been trying to get IT jobs in the United States […]
Continue reading → [DISPLAY_ACURAX_ICONS]There have been many issues over the years with passive (keyless) entry systems, including but not limited to vehicles. In this case, researchers at the NCC Group used a “relay attack” to not only unlock a Tesla Model 3, but also start it and drive away. A relay attack works like this. You take one […]
Continue reading → [DISPLAY_ACURAX_ICONS]CIOs have always had to worry about the challenges of preserving evidence, but now we have a whole new class of challenges. The so called Duty to Preserve comes into play when one party learns about the possibility of litigation. This happens, many times, before any lawsuit is actually filed. Once a party has reasonable […]
Continue reading → [DISPLAY_ACURAX_ICONS]