Category Archives: Icann

New EU Privacy Law May Weaken Security

Posted on by

Companies around the globe are scrambling to comply with new European privacy regulations that take effect a little more than three months from now. But many security experts are worried that the changes being ushered in by the rush to adhere to the law may make it more difficult to track down cybercriminals and less likely that organizations will be willing to share data about new online threats.

On May 25, 2018, the General Data Protection Regulation (GDPR) takes effect. The law, enacted by the European Parliament, requires technology companies to get affirmative consent for any information they collect on people within the European Union. Organizations that violate the GDPR could face fines of up to four percent of global annual revenues. Continue reading New EU Privacy Law May Weaken Security→

ICANN, Duo Security, iPhone Hacking, and Whole Foods – Hack Naked News #143

Posted on by

The internet isn’t ready for DNS sec, Netgear patches away, Whole Foods is the latest victim of a credit card breach, and more. Ferruh Mavituna and Sven Morgenroth of Netsparker join us to discuss Apache Struts vulnerability and the Equifax breach on this episode of Hack Naked News! News ICANN Postpones Scheduled DNS Crypto Key […]

The post ICANN, Duo Security, iPhone Hacking, and Whole Foods – Hack Naked News #143 appeared first on Security Weekly.

Continue reading ICANN, Duo Security, iPhone Hacking, and Whole Foods – Hack Naked News #143→

Hottest trend for phishing scammers: Buying web domains instead of hacking them

Posted on by

Hackers are increasingly abusing the highly decentralized web domain-name registration system to buy internet addresses they can use in phishing attacks, a new report says. The scams use legitimately acquired addresses to set up webpages that mimic bank or other e-commerce sites with the intention of tricking consumers into giving over login details and passwords. Such abuse of the domain-name registration system is not new, but it more than trebled last year, according to the Anti-Phishing Working Group’s 2016 Global Phishing Survey, released last week. The report documents in detail more than a quarter-million individual phishing sites that mimicked the web presence of nearly 700 genuine banks or other financial, e-commerce or social media companies and attracted potential victims through links in spam email or other messages. Those 255,056 phishing sites were hosted on nearly 200,000 domains (some domains had multiple sites on them), almost half of which, or 95,424, were registered by hackers through the legitimate domain registration system, overseen by […]

The post Hottest trend for phishing scammers: Buying web domains instead of hacking them appeared first on Cyberscoop.

Continue reading Hottest trend for phishing scammers: Buying web domains instead of hacking them→

David Conrad, ICANN – Paul’s Security Weekly #501

Posted on by

David Conrad is a long-time and active participant in Internet infrastructure, development, and operations. As the CTO of ICANN, David is at the heart the organization’s mission to help maintain the security, resiliency, and stability of the global Internet. Prior to being named CTO, David held several different positions at ICANN, including Vice President of Continue reading David Conrad, ICANN – Paul’s Security Weekly #501→

Hacked ICANN data still sells for hundreds of dollars years after the breach

Posted on by

Stolen data has no expiration date. Three years after hackers used a spearphishing attack to successfully gain access to internal data at the Internet Corporation for Assigned Names and Numbers (ICANN), the data is still being passed around and sold on black markets for $300, complete with claims that it’s never been leaked before. The 2014 […]

The post Hacked ICANN data still sells for hundreds of dollars years after the breach appeared first on Cyberscoop.

Continue reading Hacked ICANN data still sells for hundreds of dollars years after the breach→