Security News Bites for March 21, 2025
Humans **ARE** The Weak Link in Security
North Korean hackers are tricking their victims into downloading a supposed patch for Zoom by convincing them that they have a meeting with an important venture capitalist and the reason you can’t hear him is a Zoom bug that they have a fix for. Of course, the fix is really malware. Don’t fall for it. Credit: Cybernews
FCC is Pretending They Are Cybersecurity Experts
The Federal Communications Commission says they plan to form a Council (like the councils that CISA disbanded) to combat foreign adversaries threats to American tech and telecommunications infrastructure. It is not clear that Congress authorized the FCC to perform this sort of task and it is also unclear that the FCC has the skillset to do this. Maybe. Hope. Wait and see. Credit: The Register
France is Debating Encryption Backdoor
The French government is working on inventing the new math. They want an encryption backdoor that only works for them. That doesn’t exist. Of course, that doesn’t stop those tech savvy politicians from demanding it. We shall see what they do. They want to be able to watch the drug traffickers, but it isn’t that simple. Credit: Computer World
Hackers Go After Big Law – Steal Millions of Socials, Other Info
Law firm Wolf Halderstein was hit by a cyber attack last December, but they are just announcing it now. Targeting law firms makes perfect sense given the sensitive data they have. Stolen data for 3.5 million peops includes full names, dates of birth, socials, addresses, proof of current address, government IDs and police reports. To make matters worse, the law firm isn’t sure whose data was taken. Will lawyers sue lawyers? Probably. If you are not vetting law firms you engage you should. If they don’t give you answers you like, go elsewhere. Credit: Toms Guide
Lawmakers Push for DeepSeek Ban for Fed Devices
Lawmakers have introduced a bill to ban the Chinese AI app DeepSeek from any federal device due to concerns over Chinese spying. The concern is where the data you give to DeepSeek is stored – which is in China. They are not hiding that fact. Italy has already banned DeepSeek, as have Australia, the Netherlands and South Korea. More are likely in the works. Credit: The Record
by 