Syrian hacker who served Assad regime gets 42 months in US prison

Ahmad Umar Agha is best known for posting a fake Associated Press tweet claiming President Obama was injured in a White House bombing.

The post Syrian hacker who served Assad regime gets 42 months in US prison appeared first on CyberScoop.

Continue reading Syrian hacker who served Assad regime gets 42 months in US prison→

Before you file that AI bug report, OpenAI has some advice

Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination.

The post Before you file that AI bug report, OpenAI has some advice appeared first on CyberScoop.

Continue reading Before you file that AI bug report, OpenAI has some advice→

What happens when security tools go dark before the ransomware

A China-linked ransomware crew disabled the security tools at a critical infrastructure operator before it launched the encryptor. Most security budgets never priced that in.

The post What happens when security tools go dark before the ransomware appeared first on CyberScoop.

Continue reading What happens when security tools go dark before the ransomware→

eMudhra kills its certificate business after researchers cracked its private keys in under a second

The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.

The post eMudhra kills its certificate business after researchers cracked its private keys in under a second appeared first on CyberScoop.

Continue reading eMudhra kills its certificate business after researchers cracked its private keys in under a second→

Encryption isn’t enough to protect data wherever it goes 

Once data is in use, encryption falls short. A tested approach that replaces sensitive values with realistic substitutes could make stolen information far less useful to hackers.

The post Encryption isn’t enough to protect data wherever it goes  appeared first on CyberScoop.

Continue reading Encryption isn’t enough to protect data wherever it goes →

Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.

The post Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities appeared first on CyberScoop.

Continue reading Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities→

Spyware found on devices belonging to prominent Serbian critics as elections loom

The confirmed and suspected targets include a university rector backing Serbia’s protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parliamentary elections.

The post Spyware found on devices belonging to prominent Serbian critics as elections loom appeared first on CyberScoop.

Continue reading Spyware found on devices belonging to prominent Serbian critics as elections loom→

Cybersecurity incident at BAE Systems disrupts US bankruptcy court system

The outage has stopped official bankruptcy notices nationwide since Oct. 9, with no cause or restoration date announced.

The post Cybersecurity incident at BAE Systems disrupts US bankruptcy court system appeared first on CyberScoop.

Continue reading Cybersecurity incident at BAE Systems disrupts US bankruptcy court system→

AdFection: How mercenary spyware invades victims’ devices through targeted advertising

Researchers say the attacks have serious implications for the online advertising world, and regulators.

The post AdFection: How mercenary spyware invades victims’ devices through targeted advertising appeared first on CyberScoop.

Continue reading AdFection: How mercenary spyware invades victims’ devices through targeted advertising→