Security News
Iran-linked cyber thugs have exploited Israeli-made programmable logic controllers used in "Multiple" water systems and other operational technology environments at facilities across the US, according to multiple law enforcement agencies. The gang did not need sophisticated tactics to run this attack: the joint advisory suggests Cyberav3ngers likely broke into US-based water facilities by using default passwords for internet-accessible PLCs. The alert was issued just days after CISA said it was investigating a cyberattack against a Pennsylvania water authority by the IRGC-backed crew, which forced operators to switch a pumping station to manual control.
A PhD student has been found guilty of building a potentially deadly drone for Islamic State terrorists, in part using his home 3D printer. The prosecution said he had designed the single-use, video-transmitting "Kamikaze" drone "Somewhat inspired by the design of the Tomahawk missile," and used a 3D printer to build the wings.
Mandiant has named a new threat group, APT42, that it says functions as the cyberspy arm of Iran's Islamic Revolutionary Guard Corps, which has plotted to murder US citizens including former National Security Advisor John Bolton. While its financial backers turn their attention to assasination attempts and other terrorist activities, APT42 favors selective spear-phishing to target corporate and personal email accounts, according to the Google-owned threat intel business.
The RAF has scored its first air-to-air "Kill" - where an aircraft downs an enemy aircraft - for almost 40 years after shooting down a drone over Syria. "The engagement took place on 14 December when the drone activity was detected above the Al Tanf Coalition base in Syria," said the MoD. "RAF Typhoons conducting routine patrols in the area were tasked to investigate."
researcher has revealed the discovery of a federal terrorist watchlist that includes 1.9 million records, which were available online without any security protections."The watchlist came from the Terrorist Screening Center, a multi-agency group administered by the FBI," he wrote in the post.
Security researcher Bob Diachenko claims to have discovered an unprotected Elasticsearch database containing 1.9 million records related to what appeared to be a terrorist watchlist of the United States government. Diachenko identified what he believed to be a no-fly list maintained by the Terrorist Screening Center, a multi-agency group administered by the FBI. The no-fly list represents only a subset of a larger terrorist watchlist maintained by the U.S. Department of Homeland Security.
A secret terrorist watchlist with 1.9 million records, including classified "No-fly" records was exposed on the internet. Millions of people on no-fly and terror watchlists exposed.
1, A teenager used a defect in the way an Apple product AirDrop works,2, to send a photo of an airsoft pellet gun to a whole group of passengers using Apple products,3, because they had the virtually undocumented by Apple settings on their Apple phone incorrectly set.4, A product that Apple and it's staff could have fixed or correctly documented years ago but deliberately chose not to do so. Not an Android App, running on Googles Android OS, or any other mobile phone OS, running on some other manufactures mobile phone hardware etc, Apple's products from start to finish.
The Washington Post has published a long story on the unlocking of the San Bernardino Terrorist's iPhone 5C in 2016. We all thought it was an Israeli company called Cellebrite.
Edinburgh, Scotland-based start-up Cyan Forensics has secured £5 million in a Series A funding round led by Par Equity. Cyan Forensics offers products designed to rapidly identify and block illegal content such as child pornography and terrorist material.