Millions of IGN and PCMag user records sit exposed, online

A website configuration issue affecting itmanagement.com, a property owned by New York City digital publisher Ziff Davis, can be exploited to access a company database full of private user contact information, including names, phone numbers, employment details, email and employer addresses. The database also contains contact information for users registered on other Ziff Davis properties. Beyond itmangement.com, […]

The post Millions of IGN and PCMag user records sit exposed, online appeared first on Cyberscoop.

Continue reading Millions of IGN and PCMag user records sit exposed, online

Millions of IGN and PCMag user records sit exposed, online

A website configuration issue affecting itmanagement.com, a property owned by New York City digital publisher Ziff Davis, can be exploited to access a company database full of private user contact information, including names, phone numbers, employment details, email and employer addresses. The database also contains contact information for users registered on other Ziff Davis properties. Beyond itmangement.com, […]

The post Millions of IGN and PCMag user records sit exposed, online appeared first on Cyberscoop.

Continue reading Millions of IGN and PCMag user records sit exposed, online

Software vulnerability disclosures by NSA will continue under Trump, officials say

The disclosure process that governs how and when federal agencies should tell tech firms about flawed computer code is in no immediate danger of termination under the Trump administration, current and former U.S. officials said. Flawed code by its very nature offers vulnerabilities that can be targeted by hackers. Knowledge of these vulnerabilities — especially those […]

The post Software vulnerability disclosures by NSA will continue under Trump, officials say appeared first on Cyberscoop.

Continue reading Software vulnerability disclosures by NSA will continue under Trump, officials say

Israeli soldiers’ personal Android phones hacked by spies, researchers say

A group of highly talented and well resourced hackers are spying on the Israeli Defense Force by hacking into the personal smartphones of individual soldiers, according to newly released research by Lookout and Kaspersky. More than a 100 Israeli servicemen are believed to have been effectively targeted with the spyware. Dubbed ViperRAT, the clandestine hacking […]

The post Israeli soldiers’ personal Android phones hacked by spies, researchers say appeared first on Cyberscoop.

Continue reading Israeli soldiers’ personal Android phones hacked by spies, researchers say

Spies used malware to eavesdrop on Ukrainian businesses and media, researchers say

Security researchers have found that a mysterious hacking group is spying on dozens of Ukrainian businesses by infecting their computers with highly sophisticated malware that allows for eavesdropping and data exfiltration. The espionage campaign successfully compromised at least 70 victims, according to research published Wednesday by threat intelligence firm CyberX. Dubbed BugDrop, the clandestine hacking collective […]

The post Spies used malware to eavesdrop on Ukrainian businesses and media, researchers say appeared first on Cyberscoop.

Continue reading Spies used malware to eavesdrop on Ukrainian businesses and media, researchers say

Spies used malware to eavesdrop on Ukrainian businesses and media, researchers say

Security researchers have found that a mysterious hacking group is spying on dozens of Ukrainian businesses by infecting their computers with highly sophisticated malware that allows for eavesdropping and data exfiltration. The espionage campaign successfully compromised at least 70 victims, according to research published Wednesday by threat intelligence firm CyberX. Dubbed BugDrop, the clandestine hacking collective […]

The post Spies used malware to eavesdrop on Ukrainian businesses and media, researchers say appeared first on Cyberscoop.

Continue reading Spies used malware to eavesdrop on Ukrainian businesses and media, researchers say

FBI is ‘moving towards’ predictive cybercrime-fighting tools, assistant director says

The FBI’s cybercrime unit is developing predictive policing capabilities, Assistant Director Scott Smith said during a panel discussion at the 2017 RSA conference. “It’s where we are moving, and hope to go when you talk about predicting as opposed to proactive and reactive. Reactive is consistently where we have been, proactive means we’re really trying […]

The post FBI is ‘moving towards’ predictive cybercrime-fighting tools, assistant director says appeared first on Cyberscoop.

Continue reading FBI is ‘moving towards’ predictive cybercrime-fighting tools, assistant director says

Russian-speaking hacker ‘Rasputin’ broke into HUD and more, researchers say

A Russian-speaking hacker has compromised and is now offering access to databases that belong to numerous U.S. universities and federal, state and local government agencies, according to new research published Wednesday by cyber threat intelligence firm Recorded Future. Over the last several months the hacker — dubbed Rasputin by cybersecurity experts — had breached multiple government […]

The post Russian-speaking hacker ‘Rasputin’ broke into HUD and more, researchers say appeared first on Cyberscoop.

Continue reading Russian-speaking hacker ‘Rasputin’ broke into HUD and more, researchers say

How a failed lawsuit trailed Crowdstrike into RSA

Rumors of a failed lawsuit launched by Crowdstrike, a cybersecurity industry leader, against product-testing firm NSS Labs quickly spread Tuesday among the thousands of attendees at the 2017 RSA conference. During one of the conference’s many industry-promoted parties Monday night, multiple attendees could be overheard talking about the controversy even before media reports began circulating. Other […]

The post How a failed lawsuit trailed Crowdstrike into RSA appeared first on Cyberscoop.

Continue reading How a failed lawsuit trailed Crowdstrike into RSA

New DHS Russian hacking report was designed for RSA crowds

The Homeland Security Department quietly released a second technical report on Friday about Russian hacking, adding significant detail to a Dec. 29 document that private-sector security experts had criticized for lacking actionable information. “We know this new one is a significant improvement over the last one,” said John Felker, Director of the National Cybersecurity and Communications Integration Center, of […]

The post New DHS Russian hacking report was designed for RSA crowds appeared first on Cyberscoop.

Continue reading New DHS Russian hacking report was designed for RSA crowds