Security News > 2020 > November

GitHub threatens to ban users who bypass YouTube-dl takedown
2020-11-02 11:27

GitHub has issued a warning that accounts could be banned if they continue to upload content that was removed due to DMCA takedown notices. On October 23rd, 2020, GitHub removed the source code repositories for the popular video download tool called YouTube-dl after the Recording Industry Association of America, Inc. filed a DMCA infringement notice.

All Bark No Byte? Unease Over Irish Performance as EU's Lead Data Watchdog
2020-11-02 11:21

Two years after the EU launched its landmark GDPR data rights charter, there are signs Ireland is faltering in its outsized role as regulator of many of the most powerful digital giants. "It's a blessing for Ireland economically to be the seat of these big digital companies for Europe, and that brings a lot of revenue," one EU Commission official with deep knowledge of the area told AFP. "With this, of course, comes an obligation. With the role as a lead regulator it has a duty to the citizens all over Europe."

You can't spell 'electronics' without 'elect': The time for online democracy has come
2020-11-02 11:00

Last time, as it usually does, the Republican party lost the popular vote and won the presidency; it has spent much of the time since trying very hard to suppress the votes of people it doesn't like. If the US had a single electronic voting system across the country, with access for those without the right personal technology, and it was reliable, trustworthy, and efficient, then democracy would be much better served.

Naked Security Live – Ransomware: what to do?
2020-11-02 11:00

Did you know you can join us for a live cybersecurity lecture every Friday? Thanks for watching hope to see you online later this week!

Google discloses actively exploited Windows zero-day (CVE-2020-17087)
2020-11-02 10:48

Google researchers have made public a Windows kernel zero day vulnerability that is being exploited in the wild in tandem with a Google Chrome flaw that has been patched on October 20. CVE-2020-17087 is a vulnerability in the Windows Kernel Cryptography Driver, and "Constitutes a locally accessible attack surface that can be exploited for privilege escalation."

Microsoft is investigating lost Windows 10 certificates issue
2020-11-02 10:48

Microsoft is investigating a known issue leading to missing system and user certificates after updating certain managed Windows 10 systems using outdated installation media through update management tools, physical media, or ISO images. "System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10," Microsoft explains.

US Judge Sets Up Fresh Roadblock in Trump Bid to Ban TikTok
2020-11-02 09:39

A US federal judge on Friday issued an injunction temporarily blocking an executive order by President Donald Trump aimed at banning TikTok, throwing up a legal roadblock ahead of a November 12 deadline. TikTok influencers suing the president over the ban convinced US District Court Wendy Beetlestone to issue the injunction against it.

Maze ransomware shuts down operations, denies creating cartel
2020-11-02 08:25

The infamous Maze ransomware gang announced today that they have officially closed down their ransomware operation and will no longer be leaking new companies' data on their site. "Perhaps Maze was intentionally vague, or perhaps this was lost in translation, but the 'press release's' statement about removing the data of victims that did not pay, is NOT an offer to have that data removed for free. It is an invitation back to the negotiation table for one last round. We don't advise any companies that were victims of Maze contact them based on the statements Maze has made. We do not credibly believe that Maze or any other Ransomware group ever fully deletes the data stolen from victims, even if they choose to pay," Coveware CEO Bill Siegel told BleepingComputer.

Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use
2020-11-02 08:15

Google insists it doesn't use reCAPTCHA data for personalized adverts, and says as much in the reCAPTCHA terms of service. Google's reCAPTCHA terms of service state that the service sends device and application data to the company.

Google reCAPTCHA service under the microscope: Questions raised over privacy promises, cookie use
2020-11-02 08:15

Google insists it doesn't use reCAPTCHA data for personalized adverts, and says as much in the reCAPTCHA terms of service. Google's reCAPTCHA terms of service state that the service sends device and application data to the company.