Collaborate Disseminate
Like earlier ransomware worm, PetyaWrap attacks use potent exploit stolen from the NSA. Continue reading A new ransomware outbreak similar to WCry is shutting down computers worldwide
Fighting attackers needs a new approach that leverages a public-private data sharing framework, enabling immediate and collective responses. Continue reading NSA Advocates Data Sharing Framework
Automaker briefly stops making cars to contain worm that first struck in May. Continue reading Honda shuts down factory after finding NSA-derived Wcry in its networks
Company warns of “destructive cyberattacks” as it tries to prevent another WCry. Continue reading Win XP patched to avert new outbreaks spawned by NSA-leaking Shadow Brokers
Mysterious group with cache of NSA exploits promises new release to those who pay. Continue reading New Shadow Brokers 0-day subscription forces high-risk gamble on whitehats
A run-down of recent WCry developments you may have missed. Continue reading Windows 7, not XP, was the reason last week’s WCry worm spread so widely
Storm clouds are rising over the U.S. government’s policy on software flaw disclosure after the massive WannaCry infection spread using a cyberweapon developed by the NSA, and even former agency leaders say it might be time to take a fresh look at the Vulnerability Equities Process. Under the VEP, U.S. officials weigh the benefits of disclosing a newly discovered flaw to the manufacturer — which can issue a patch to protect customers — or having the government retain it for spying on foreign adversaries who use the vulnerable software. The process has always had a bias toward disclosure, former federal officials said. “We disclose something like 90 percent of the vulnerabilities we find,” said Richard Ledgett, who retired April 28 as the NSA’s deputy director. “There’s a narrative out there that we’re sitting on hundreds of zero days and that’s just not the case,” he told Georgetown University Law Center’s annual cybersecurity law institute. […]
The post Should the government stockpile zero day software vulnerabilities? appeared first on Cyberscoop.
Continue reading Should the government stockpile zero day software vulnerabilities?
WaPo confirms long-held suspicions as NSA cyberweapons crisis threatens to grow worse. Continue reading Fearing Shadow Brokers leak, NSA reported critical flaw to Microsoft
WikiLeaks released details on what it claims are two frameworks for malware samples dubbed AfterMindnight and Assassin, both allegedly developed by the US Central Intelligence Agency. Continue reading WikiLeaks Reveals Two CIA Malware Frameworks
Campaign that flew under the radar used hacked computers to mine Monero currency. Continue reading Massive cryptocurrency botnet used leaked NSA exploits weeks before WCry