Security News > 2023 > September

Meta Takes Down Thousands of Accounts Involved in Disinformation Ops from China and Russia
2023-09-05 06:17

Meta has disclosed that it disrupted two of the largest known covert influence operations in the world from China and Russia, blocking thousands of accounts and pages across its platform. The network, which included 7,704 Facebook accounts, 954 Pages, 15 Groups and 15 Instagram accounts, is said to have been run by "Geographically dispersed operators" across China, posting content about China and its province Xinjiang, criticism of the U.S, Western foreign policies, and critics of the Chinese government.

Connected cars and cybercrime: A primer
2023-09-05 05:00

The likelihood of substantially more frequent, devious, and harmful attacks is portended by the complex attacks on connected cars that we have seen devised by industry researchers. How are attacks on tomorrow's connected cars likely to evolve?

The misconceptions preventing wider adoption of digital signatures
2023-09-05 04:30

In your opinion, what misconceptions about digital signatures prevent wider adoption, and how can these be effectively addressed? These signatures are neither secure nor legally valid, and people have learned from their legal councils that they need to use paper for relevant signatures.

Why end-to-end encryption matters
2023-09-05 04:00

In this Help Net Security video, Kayne McGladrey, IEEE Senior Member and Field CISO at Hyperproof, discusses end-to-end encryption (E2EE). E2EE ensures that only two parties – a sender and a...

6 free resources for getting started in cybersecurity
2023-09-05 03:30

Here are some excellent free resources for getting started in cybersecurity. To help close the cybersecurity skills gap, CyberSeek provides detailed, actionable data about supply and demand in the cybersecurity job market.

Reaper: Open-source reconnaissance and attack proxy workflow automation
2023-09-05 03:00

Reaper is an open-source reconnaissance and attack proxy, built to be a modern, lightweight, and efficient equivalent to Burp Suite/ZAP. It focuses on automation, collaboration, and building universally distributable workflows. Reaper is a work in progress, but it's already capable of much.

Freecycle confirms massive data breach impacting 7 million users
2023-09-04 18:09

Freecycle, an online forum dedicated to exchanging used items rather than trashing them, confirmed a massive data breach that affected more than 7 million users. The nonprofit organization says it discovered the breach on Wednesday, weeks after a threat actor put the stolen data for sale on a hacking forum on May 30, warning affected people to switch passwords immediately.

Insurer fined $3M for exposing data of 650k clients for two years
2023-09-04 17:51

The Swedish Authority for Privacy Protection has fined insurer Trygg-Hansa $3 million for exposing on its online portal sensitive data belonging to hundreds of thousands of customers. To make matters worse, IMY determined that the data was exposed through Trygg-Hansa's portal to unauthorized parties for more than two years, between October 2018 and February 2021.

German financial agency site disrupted by DDoS attack since Friday
2023-09-04 17:11

The German Federal Financial Supervisory Authority announced today that an ongoing distributed denial-of-service attack has been impacting its website since Friday. BaFin is Germany's financial regulatory authority, part of the Federal Ministry of Finance, responsible for supervising 2,700 banks, 800 financial, and 700 insurance service providers.

Hackers exploit MinIO storage system to breach corporate networks
2023-09-04 16:45

Hackers are exploiting two recent MinIO vulnerabilities to breach object storage systems and access private information, execute arbitrary code, and potentially take over servers. MinIO is an open-source object storage service offering compatibility with Amazon S3 and the ability to store unstructured data, logs, backups, and container images of up to 50TB in size.