БЛОГ

Archive for the ‘cybercrime/malcode’ category: Page 105

Dec 12, 2021

New Cyber Protections Against Stealthy “Logic Bombs” Targeting 3D Printed Drones, Prostheses and Medical Devices

Posted by in categories: biotech/medical, cybercrime/malcode, drones, health

Cyber attackers could target 3D printed objects in health care, aerospace, and other fields.

Cybersecurity researchers at Rutgers University-New Brunswick and the Georgia Institute of Technology have proposed new ways to protect 3D printed objects such as drones, prostheses, and medical devices from stealthy “logic bombs.”

The researchers will present their paper, titled “Physical Logic Bombs in 3D Printers via Emerging 4D Techniques,” at the 2021 Annual Computer Security Applications Conference on December 10, 2021.

Dec 10, 2021

Global race to patch critical computer bug

Posted by in categories: cybercrime/malcode, government

Security experts around the world raced Friday to patch one of the worst computer vulnerabilities discovered in years, a critical flaw in open-source code widely used across industry and government in cloud services and enterprise software.

“I’d be hard-pressed to think of a company that’s not at risk,” said Joe Sullivan, chief security officer for Cloudflare, whose online infrastructure protects websites from malicious actors. Untold millions of servers have it installed, and experts said the fallout would not be known for several days.

New Zealand’s computer emergency response team was among the first to report that the flaw in a Java-language utility for Apache servers used to log user activity was being “actively exploited in the wild” just hours after it was publicly reported Thursday and a patch released.

Dec 10, 2021

Community of ethical hackers needed to prevent AI’s looming ‘crisis of trust’, experts argue

Posted by in categories: cybercrime/malcode, existential risks, robotics/AI

The Artificial Intelligence industry should create a global community of hackers and “threat modelers” dedicated to stress-testing the harm potential of new AI products in order to earn the trust of governments and the public before it’s too late.

This is one of the recommendations made by an international team of risk and machine-learning experts, led by researchers at the University of Cambridge’s Center for the Study of Existential Risk (CSER), who have authored a new “call to action” published today in the journal Science.

They say that companies building intelligent technologies should harness techniques such as “red team” hacking, audit trails and “bias bounties”—paying out rewards for revealing ethical flaws—to prove their integrity before releasing AI for use on the wider public.

Dec 10, 2021

Microsoft researchers: We’ve trained AI to find software bugs using hide-and-seek

Posted by in categories: cybercrime/malcode, robotics/AI

Microsoft creates an AI bug detector that learns to hunt for and fix bugs without being trained on data from real bugs.

Dec 9, 2021

Google disrupts cybercrime web infecting 1 mn devices

Posted by in categories: bitcoin, cybercrime/malcode

Google said Tuesday it has moved to shut down a network of about one million hijacked electronic devices used worldwide to commit online crimes, while also suing Russia-based hackers the tech giant claimed were responsible.

The so-called botnet of infected devices, which was also used to surreptitiously mine bitcoin, was cut off at least for now from the people wielding it on the internet.

“The operators of Glupteba are likely to attempt to regain control of the botnet using a backup command and control mechanism,” wrote Shane Huntley and Luca Nagy from Google’s threat analysis group.

Dec 7, 2021

Criminal hackers are now going after phone lines, too

Posted by in categories: cybercrime/malcode, mobile phones

One way or another, most phone calls these days involve the internet. Cybersecurity experts say that makes us vulnerable in ways we might not realize.

Dec 6, 2021

Hackers take $196 million from crypto exchange Bitmart, security firm says

Posted by in categories: bitcoin, cybercrime/malcode

Hackers have taken $196 million from crypto trading platform Bitmart, a security firm said Saturday.

Bitmart confirmed the hack in an official statement Saturday night, calling it “a large-scale security breach” and writing that hackers withdrew about $150 million in assets. However, blockchain security and data analytics firm Peckshield estimates that the loss is closer to $200 million.

Continue reading “Hackers take $196 million from crypto exchange Bitmart, security firm says” »

Dec 6, 2021

Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats

Posted by in categories: cybercrime/malcode, mobile phones

Apple reportedly notified several U.S. Embassy and State Department employees that their iPhones may have been targeted by an unknown assailant using state-sponsored spyware created by the controversial Israeli company NSO Group, according to multiple reports from Reuters and The Washington Post.

Dec 4, 2021

Futurists predict how we’ll one day eat, vacation and work

Posted by in categories: cybercrime/malcode, mobile phones, privacy, robotics/AI

Forget about Mark Zuckerberg, Facebook and all the talk about a metaverse. The real future will be a world that is convenient and scary and fantastical — at least according to futurologists. As this year ends, here’s a glimpse at what life might be like … one day.

Facial recognition is already common for phones, but “In 30 years it’s quite possible that you will not use a key or even a credit card. You’ll use your face or iris to make purchases and open locks. Recognition will be that good,” said Martin Ford, author of “Rule of the Robots: How Artificial Intelligence will Transform Everything.”

“The scary thing, though, will be if someone hacks your biometric data. Right now you can call the bank to change your pin or cancel a credit card. But you can’t cancel your biometrics.”

Dec 4, 2021

Pegasus maker probes reports its spyware targeted US diplomats

Posted by in categories: cybercrime/malcode, government, mobile phones, surveillance

The Israeli spyware maker in the Pegasus surveillance scandal said Friday it was investigating reports the firm’s technology was used to target iPhones of some US diplomats in Africa.

Apple has begun alerting people whose phones were hacked by NSO’s spyware, which essentially turns handsets into pocket spying devices and sparked controversy this year after reportedly being used on activists, journalists and politicians.

“On top of the independent investigation, NSO will cooperate with any relevant government authority and present the full information we will have,” the firm said in a statement.