Ransomware Attack Hit Gas Pipeline Facility
A gas compression facility was the victim of a ransomware attack that took its operations offline for two days and required replacement equipment.
SEARCH
Changes in Kernel Code Created New Security Bugs in Android Devices
Code changes intended to prevent attacks can wind up creating even more security issus, Google Project Zero warned.
Microsoft Pulls Buggy UEFI Security Update
Microsoft has removed the Windows security update addressing issues with third-party boot managers after users complained the...
OpenSSH Adds Support for U2F Hardware Keys
OpenSSH has added support for hardware security keys that implement the U2F standard.
Review Finds Downgrade Attack in Solokey Firmware
A review of the SoloKey firmware found a serious downgrade attack flaw, which an attacker could use to install an older,...
Senate Bill Would Create Data Protection Agency
Sen. Kirsten Gillibrand has introduced a new bill that would establish a federal Data Protection Agency with privacy oversight.
Sale of Corp.com Can Expose Corporate Data
Depending on who winds up buying corp.com, administrators with Active Directory in their networks may wind up with sensitive...
Browsers Will Block Sites Using Old Versions of TLS
Starting in March 2020, all the major web browsers—Firefox, Chrome, Safari, and Edge—will display warnings when users visit...
Decipher Podcast: Rick Altherr
Rick Altherr of Eclypsium joins Dennis Fisher to talk about the company's new research on unsigned device firmware.
Dennis Has Some Questions About…2FA
Two-factor authentication is a vital part of many corporate security strategies, and is now offered by lots of consumer apps,...
Maze Turns Ransomware Incidents into Data Breaches
Maze ransomware, which infected Pensacola, Florida, exfiltrates the data to a remote server before encrypting the local copies...
Imperva Breach Stemmed From Compromised Internal Compute Instance
A data breach disclosed in August by Imperva came from an AWS API key stolen from a compromised internal compute instance in 2017.
Imperva Discloses Data Breach, Theft of Customer API Keys
Security firm Imperva says that API keys and SSL certificates for some of its Cloud WAF customers were exposed in a data breach.
