Security News

Ever wonder how a pentest turns into felony charges? Coalfire duo explain Iowa courthouse arrest debacle
2020-08-05 23:08

The pair were performing a routine penetration test at the Dallas County courthouse at night when they tripped an alarm, were collared by deputies, and, ultimately, charged with felony trespassing - a crime that can lead to up to seven years behind bars. Part of the problem, the two professional attackers told the Black Hat online conference today, was the imprecise terms of the penetration tests Coalfire was hired to perform at the request of the US state of Iowa.

Ever wondered how a pentest turned into felony charges? Coalfire duo explains Iowa courthouse arrest debacle
2020-08-05 23:08

The pair were performing a routine penetration test at the Dallas County courthouse at night when they tripped an alarm, were collared by deputies, and, ultimately, charged with felony trespassing - a crime that can lead to up to seven years behind bars. Part of the problem, the two professional attackers told the Black Hat online conference today, was the imprecise terms of the penetration tests Coalfire was hired to perform at the request of the US state of Iowa.

Bad: US govt says Chinese duo hacked, stole blueprints from just about everyone. Also bad: They extorted cash
2020-07-21 19:02

On Tuesday, the US Department of Justice charged two Chinese nationals with allegedly hacking hundreds of organizations and individuals in America and elsewhere to steal confidential corporate secrets on behalf of Beijing for more than a decade. The US claims that the two accused worked both for themselves and with the backing of the Chinese government's Ministry of State Security.

Bitglass’ integration with Duo Security guards company data through verification options
2020-06-18 00:30

Together, Bitglass and Duo balance enterprise-grade access control and data protection with the flexibility and seamless user experience needed to support a global, remote, and multi-device workforce. It is crucial organizations adjust their security strategies as employees can download, upload, and share data from personal devices or public networks, meaning data is traveling beyond the corporate firewall.

Mind the gap: Google patches holes in Chrome – exploit already out there for one of them after duo spot code fix
2020-02-25 21:22

Google has updated Chrome for Linux, Mac, and Windows to address three security vulnerabilities - and exploit code for one of them is already public, so get patching. Interestingly enough, at the time, this public source-code tweak was spotted and studied by Exodus Intelligence researchers István Kurucsai and Vignesh Rao, who hoped to see whether it's still practical to identify security bug fixes among code changes in the Chromium source tree and develop an exploit before the patch sees an official release, a practice known as patch-gapping.

Mind the gap: Google patches holes in Chrome – exploit already out there for one of them after duo spot code fix
2020-02-25 21:22

Google has updated Chrome for Linux, Mac, and Windows to address three security vulnerabilities - and exploit code for one of them is already public, so get patching. Interestingly enough, at the time, this public source-code tweak was spotted and studied by Exodus Intelligence researchers István Kurucsai and Vignesh Rao, who hoped to see whether it's still practical to identify security bug fixes among code changes in the Chromium source tree and develop an exploit before the patch sees an official release, a practice known as patch-gapping.

Romanian Duo Receives Jailtime For Infecting 400,000 With Malware
2019-12-09 20:36

Since 2007, the two allegedly operated a cybercrime ring called "Bayrob Group."

Feds slap $5m bounty on 'Evil Corp' Russian duo accused of running ZeuS, Dridex banking trojans
2019-12-05 16:49

Account-draining malware masterminds charged but remain in motherland US prosecutors have slapped a $5m bounty on the heads of two Russian nationals they claim are part of the malware gang behind...

What a pair of Massholes! New England duo cuffed over SIM-swapping cryptocoin charges
2019-11-14 20:52

Account takeovers allegedly used to plunder digital wallets Two men from Massachusetts have been arrested and charged with 11 criminal counts stemming from a string of account takeovers and...

Ex-Twitter staff charged with spying for Saudi royals: Duo accused of leaking account records, including those of critics
2019-11-07 02:52

One cuffed by Feds this week Two now-ex Twitter employees have been charged with spying on behalf of Saudi Arabia – after they allegedly leaked internal records for accounts linked to critics of...