Security News > 2020

Iowa Fiasco Highlights Security Risks in US Vote, Officials Say
2020-02-05 14:06

US officials and cyber experts warned Tuesday that the voting debacle in the Democratic caucuses in Iowa underscored the vulnerabilities in the country's election infrastructure in everything from hacking to trust-eroding conspiracy theories. The technology problems which have prevented a complete vote count in the first test for the 2020 election were founded on what experts described as a poorly-tested, poorly performing vote reporting smartphone app.

Trial Begins for Ex-CIA Worker Charged With Leaking Secrets
2020-02-05 13:28

A prosecutor told a jury at the opening of an espionage trial Tuesday that an angry CIA employee got his vengeance by committing the agency's biggest leak of classified information ever, but a defense lawyer said her client was innocent. Assistant U.S. Attorney David Denton pointed at 30-year-old Joshua Adam Schulte in a Manhattan courtroom as he blamed him for the massive leak of secrets that was published by WikiLeaks in March 2017.

Prepare for Cisco, CompTIA, and More IT Certifications with this Bundle
2020-02-05 12:55

Exams are pretty important in professional IT. You can have all the practical knowledge in the world, but technical recruiters want to see certificates. If you want to improve your resume, the Complete 2020 IT Certification Exam Prep Mega Bundle will help you ace nine of the most important exams.

5 High Impact Flaws Affect Cisco Routers, Switches, IP Phones and Cameras
2020-02-05 12:46

Four of the five high-severity bugs are remote code execution issues affecting Cisco routers, switches, and IP cameras, whereas the fifth vulnerability is a denial-of-service issue affecting Cisco IP phones. Collectively dubbed 'CDPwn,' the reported vulnerabilities reside in the various implementations of the Cisco Discovery Protocol that comes enabled by default on virtually all Cisco devices and can not be turned OFF. Cisco Discovery Protocol is an administrative protocol that works at Layer 2 of the Internet Protocol stack.

Tree Code
2020-02-05 12:10

Artist Katie Holten has developed a tree code (basically, a font in trees), and New York City is using it to plant secret messages in parks....

How to defend your organization against the latest malware, botnets and security exploits
2020-02-05 12:00

Though the fourth quarter of 2019 saw a decrease in malicious activity, threats such as the Emotet malware continued to thrive, says Nuspire. Organizations received a type of holiday gift during the fourth quarter of 2019 as the volume of malware and other security threats declined.

Someone else may have your videos, Google tells users
2020-02-05 11:58

During this time, some videos in Google Photos were incorrectly exported to unrelated users' archives. Conversely, being a two-way issue, affected users might notice any videos in their archive not belonging to them.

Facebook will let parents see kids’ chat history, peer into inbox
2020-02-05 11:58

Seven months after a crack formed in the keep-the-kids-safe bubble of Facebook's Messenger Kids chat app, it's beefing up the app's Parent Dashboard with new tools and letting parents read their kids' chat histories, see the most recent videos and photos they sent or received, and delete any content they find objectionable. Facebook is pulling kids into that "What are you doing with my data?" conversation: it's developed an in-app activity that educates them on what other people can see about them, such as that people they know may see their name and photo and that parents can see and download their messaging content.

Cybersecurity Bill Would Set Defense Plan for Local Agencies
2020-02-05 11:53

A new Maryland bill would ask the state's Department of Information Technology to develop a baseline plan for localities within the state to help battle cyber attacks. Senate bill 120, introduced by Sen. Susan Lee, D-Montgomery, would give the Maryland Department of Information Technology the expanded responsibility of developing a cybersecurity strategy and helping agencies within the state implement it at their discretion.

Critical Android flaws patched in February bulletin
2020-02-05 11:46

Google has patched some serious bugs in Android, including a couple of critical flaws that could let hackers run their own code on the mobile operating system. What Google does tell us in its February 2020 advisory is that it lies in the system component of Android, which contains the system apps that ship with the OS. It's a remote code execution bug in the context of a privileged process, giving the attacker a high level of access to the operating system, and it applies to versions 8.0, 8.1, and 9 of the Android Open-Source Project, on which the various phone implementations of Android are based.