Security News > 2020 > August

Porn Video Interrupts US Court Hearing for Accused Twitter Hacker
2020-08-06 01:23

A court hearing held via Zoom for a US teenager accused of masterminding a stunning hack of Twitter was interrupted Wednesday with rap music and porn, a newspaper reported. The purpose of the hearing was to discuss reducing bail terms set for the 17 year old Tampa resident arrested last Friday over the hack last month of the accounts of major US celebrities.

US voting hardware maker's shock discovery: Security improves when you actually work with the community
2020-08-06 01:09

Just hours after Professor Matt Blaze today discussed the state of election system security in America, one of the largest US voting machine makers stepped forward to say it's trying to improve its vulnerability research program. In addition to its ongoing vulnerabilities rewards program, ES&S said it will employ the services of security house Synack to bridge the gap with bounty hunters, and make its products better able to withstand attacks from the likes of state-sponsored groups.

Intel and VMware extend virtualization to RAN through broadened collaboration for 5G
2020-08-05 23:30

Intel and VMware are collaborating on an integrated software platform for virtualized Radio Access Networks to accelerate the rollout of both existing LTE and future 5G networks. As part of this effort, Intel and VMware will collaborate in building programmable open interfaces that leverage Intel's FlexRAN software reference architecture and a VMware RAN Intelligent Controller, to enable development of innovative radio network functions using AI/ML learning for real time resource management, traffic steering and dynamic slicing.

Ever wonder how a pentest turns into felony charges? Coalfire duo explain Iowa courthouse arrest debacle
2020-08-05 23:08

The pair were performing a routine penetration test at the Dallas County courthouse at night when they tripped an alarm, were collared by deputies, and, ultimately, charged with felony trespassing - a crime that can lead to up to seven years behind bars. Part of the problem, the two professional attackers told the Black Hat online conference today, was the imprecise terms of the penetration tests Coalfire was hired to perform at the request of the US state of Iowa.

Ever wondered how a pentest turned into felony charges? Coalfire duo explains Iowa courthouse arrest debacle
2020-08-05 23:08

The pair were performing a routine penetration test at the Dallas County courthouse at night when they tripped an alarm, were collared by deputies, and, ultimately, charged with felony trespassing - a crime that can lead to up to seven years behind bars. Part of the problem, the two professional attackers told the Black Hat online conference today, was the imprecise terms of the penetration tests Coalfire was hired to perform at the request of the US state of Iowa.

Microchip releases Flashtec NVMe 3108 PCIe Gen 4 enterprise NVMe SSD controller
2020-08-05 23:00

These SSDs require controllers with optimized footprints and power while driving the NAND flash to its maximum potential and maintaining a rich feature set and the reliability demanded by this enterprise class of NVMe SSD. Microchip announced its newest member of the Flashtec family, the Flashtec NVMe 3108 PCIe Gen 4 enterprise NVMe SSD controller. The 8-channel Flashtec NVMe 3108 complements the 16-channel Flashtec NVMe 3016 and provides a full suite of PCIe Gen 4 NVMe SSD solutions to support a comprehensive set of data center storage requirements.

Black Hat 2020: Linux Spyware Stack Ties Together 5 Chinese APTs
2020-08-05 22:32

A stack of Linux backdoor malware used for espionage, compiled dynamically and customizable to specific targets, is being used as a shared resource by five different Chinese-language APT groups, according to researchers. Finally, the sixth item is the Linux XOR DDoS botnet, which is the largest known Linux botnet, first coming to notice in 2015.

Patrick Harr becomes CEO of SlashNext
2020-08-05 22:30

SlashNext announced that security and cloud services veteran Patrick Harr has joined the company as CEO. With a proven track record of leading security and cloud startups, as well as Fortune 100 divisions, Harr will drive the company's next phase of growth and accelerate its mission to protect the world's internet users from all forms of phishing across email, mobile, web, SMS, social networking, gaming and collaboration services. Phishing attacks have skyrocketed, with a 350% increase since January 2020 according to Google and 85% of phishing attacks are happening outside of email on mobile devices according to Verizon.

Black Hat 2020: In a Turnaround, Voting Machine Vendor Embraces Ethical Hackers
2020-08-05 22:27

Voting machine-maker Election Systems & Software has formally announced a vulnerability disclosure policy, Wednesday, during a Black Hat USA 2020 session. The adoption of safe-harbor language marks a drastic turnaround from how the voting-machine vendor has interacted with the research community in previous years.

Twitter Fixes High-Severity Flaw Affecting Android Users
2020-08-05 21:36

Twitter has fixed a vulnerability in its Android app, which could have enabled attackers to access private Twitter data, like direct messages on Android devices. The flaw is related to an underlying Android operating system security issue, which affects operating system versions 8 and 9, said Twitter.