A ‘Cyber Event’ Disrupted the Power Grid in California and Wyoming, But Don’t Panic Just Yet

The Department of Energy says a “cyber event” disrupted operations in California, Wyoming, and Utah last month. But it’s unclear if hackers were behind it. Continue reading A ‘Cyber Event’ Disrupted the Power Grid in California and Wyoming, But Don’t Panic Just Yet

DockerHub database breach exposes 190K customer data including tokens for GitHub and Bitbucket repositories

On Friday, DockerHub informed its users of a security breach in its database, via email written by Kent Lamb, Director of Docker Support. The breach exposed sensitive information including some usernames and hashed passwords, as well as tokens for GitH… Continue reading DockerHub database breach exposes 190K customer data including tokens for GitHub and Bitbucket repositories

Hackers Breached a Programming Tool Used By Big Tech and Stole Private Keys and Tokens

Docker Hub lost keys and tokens for around 190,000 accounts, which could have downstream effects if hackers used them to access source code at big companies. Continue reading Hackers Breached a Programming Tool Used By Big Tech and Stole Private Keys and Tokens

Stripe updates its product stack to prepare European businesses for SCA-compliance

On Tuesday, Stripe, the online payments platform provider, announced that it has upgraded its products to be compliant with Strong Customer Authentication (SCA) under the second Payment Services Directive (PSD2). This announcement comes just after Stri… Continue reading Stripe updates its product stack to prepare European businesses for SCA-compliance

EU parliament votes to amass the largest biometric database on earth

The EU parliament voted last week to develop what is being described as the largest biometric database on earth. Once created, the database will connect the systems used by various border control, migration and law enforcement agencies into a truly gig… Continue reading EU parliament votes to amass the largest biometric database on earth

Liz Fong-Jones on how to secure SSH with Two Factor Authentication (2FA)

Over the weekend, Liz Fong-Jones, a Developer Advocate at honeycomb.io posted her experience with the security hardening of honeycomb.io’s infrastructure. In her post, on GitHub, Liz explains how SSH keys, which provide authentication between hos… Continue reading Liz Fong-Jones on how to secure SSH with Two Factor Authentication (2FA)

WannaCry hero, Marcus Hutchins pleads guilty to malware charges; may face upto 10 years in prison

Marcus Hutchins, who authors the popular blog MalwareTech, and a British security researcher has pleaded guilty today to writing malware in the years prior to his prodigious career as a malware researcher. Marcus posted a statement on his website and o… Continue reading WannaCry hero, Marcus Hutchins pleads guilty to malware charges; may face upto 10 years in prison

Hacker destroys Iranian cyber-espionage data; leaks source code of APT34’s hacking tools on Telegram

On Wednesday, ZDNet reported that hacker with the online name Lab Dookhtegan leaked a set of hacking tools belonging to Iran’s espionage groups, often identified as the APT34, Oilrig, or HelixKitten, on Telegram. The leaks started somewhere in th… Continue reading Hacker destroys Iranian cyber-espionage data; leaks source code of APT34’s hacking tools on Telegram

‘WannaCry Hero’ Marcus Hutchins Pleads Guilty to Making Banking Malware

The researcher who helped stop the WannaCry ransomware pleaded guilty to two counts of hacking for writing banking malware in 2014. Continue reading ‘WannaCry Hero’ Marcus Hutchins Pleads Guilty to Making Banking Malware