While this column is directed at lawyers, it applies equally well to anyone sending or receiving confidential communications via email and expecting those communications to actually be confidential. We think of business email compromise as one of those spear phishing emails that pretend to come from the boss telling you to wire money to China […]
Continue reading → [DISPLAY_ACURAX_ICONS]Merchants want you to believe that HTTPS equals secure. I keep saying that it doesn’t. Here is another story for my side of the argument. First, a little background. If a web site want to support HTTPS (also known as SSL or TLS), they need to have a certificate. The certificate is used as part […]
Continue reading → [DISPLAY_ACURAX_ICONS]Appalachian Regional Healthcare (ARH), which operates two hospitals in West Virginia and nine in Kentucky reported over the weekend that it was the target of a cyberattack that forced staff to revert to paper. No email, no electronic health records, no other electronic systems. Just paper. The hospitals are assessing whether to transfer critically ill […]
Continue reading → [DISPLAY_ACURAX_ICONS]Mailguard is reporting a new phishing scam that uses the old “here is an invoice for you to review” or “here is a purchase order for you to review”. A screenshot of one of the emails is shown below. In both cases, the malware takes advantage of a vulnerability in Word that has been patched, […]
Continue reading → [DISPLAY_ACURAX_ICONS]It seems like there are a lot more breakins than there are convictions in court, but every now and then the feds catch a big one. In this case it is Roman Seleznev, the son of a Russian lawmaker. He was accused of costing banks about $170 million in losses and costs to repair the […]
Continue reading → [DISPLAY_ACURAX_ICONS]When is a hack not a hack? When an Israeli company sells it as a feature. The company, NSO Group, sells the software, to governments among others. The software allows the attacker to: Control the camera Listen to the microphone Track the phone’s location Intercept text messages Intercept emails Download the calendar data Download your […]
Continue reading → [DISPLAY_ACURAX_ICONS]