Security News

Find latest security news in the field of PC, Computer, Network Security.

• Apple publishes free resources to improve password security
  The new tools are meant to help the developers of password managers and Apple hopes the tools will reduce the instances where users chose their own password rather than rely on the password manager.
  
• QNAP NAS devices targeted in another wave of ransomware attacks
  eCh0raix ransomware gang returns with a new wave of attacks against QNAP NAS devices.
  
• How do tech giants know so much about you?
  A new study shows just how much valuable information we freely give away.
  
• IBM releases toolkit aimed at keeping data encrypted even while in use
  IBM's new toolkit aims to give developers easier access to fully homomorphic encryption, a nascent technology with significant promise for a number of security use cases.
  
• Singapore updates contact tracing app to include foreign visitors
  Country's COVID-19 contact tracing app has been updated to include travellers visiting Singapore and the government also is looking at issuing wearable devices to every resident to facilitate such efforts.
  
• Facebook slaps labels on 'state-controlled' media outlets
  Social media platform has begun labelling media outlets it deems to be state-controlled, including China's Xinhua News and Russia's Sputnik, which it assesses based on various factors such as government influence and ownership.
  
• China, Iran, and Russia worked together to call out US hypocrisy on BLM protests
  Report from social media research group shows foreign diplomats and state-controlled media pounced on the US' abysmal handling of the BLM protests to attack the US as a beacon of freedom and further their own political goals.
  
• Google: Chinese and Iranian hackers targeted Biden and Trump campaign staffers
  Google's TAG team said phishing attacks against Biden and Trump campaign staffers were unsuccessful.
  
• Brazilians are mostly unaware of social scoring systems
  But many are willing to share private information in exchange for discounts and other benefits, according to a new Kaspersky study.
  
• When it comes to saving lives, cybersecurity pros emerge as influencers
  As individuals debated whether or not to download contact-tracing apps in the fight against COVID-19, more and more have been engaging with and listening carefully to security and privacy professionals. Cybersecurity pros are now very clearly influencers, helping society in its quest to save lives.
  
• FTC Slams Children’s App Developer for COPPA Violations
  Children's app developer HyperBeard must pay $150,000 after the FTC claimed it violated privacy laws.
  
• Electrolux, Others Conned Out of Big Money by BEC Scammer
  Kenenty Hwan Kim has pleaded guilty to swindling the appliance giant and other companies in a set of elaborate schemes.
  
• News Wrap: Fake Minneapolis Police Breach, Zoom End-To-End Encryption Debate
  Threatpost editors discuss debunked reports of a Minneapolis police department breach and Zoom announcing only paying users would get end-to-end encryption.
  
• WhatsApp Phone Numbers Pop Up in Google Search Results — But is it a Bug?
  A researcher found that phone numbers tied to WhatsApp accounts are indexed publicly on Google Search creating what he claims is a “privacy issue” for users.
  
• Tycoon Ransomware Banks on Unusual Image File Tactic
  To fly under the radar, the newly discovered ransomware is compiled into a Java image file format that's rarely used by developers.
  
• Trump, Biden Campaign Staffers Targeted By APT Phishing Emails
  Google TAG researchers warn that APTs are targeting campaign staffers for both Donald Trump and Joe Biden with phishing emails.
  
• Understanding the Payload-Less Email Attacks Evading Your Security Team
  Business email compromise (BEC) attacks represent a small percentage of email attacks, but disproportionately represent the greatest financial risk.
  
• Zoom Restricts End-to-End Encryption to Paid Users
  The end-to-end encryption feature will not be offered to free users, Zoom's CEO said, in case Zoom needed to comply with federal and local law enforcement.
  
• U.S. Nuclear Contractor Hit with Maze Ransomware, Data Leaked
  Westech International provides maintenance for the Minuteman III nuclear-missile program and runs programs for multiple branches of the military.
  
• Google Faces Privacy Lawsuit Over Tracking Users in Incognito Mode
  A $5 billion class-action lawsuit filed in a California federal court alleges that Google's Chrome incognito mode collects browser data without people’s knowledge or consent.