LastPass Identity provides simple control and visibility across every entry point to your business through single sign-on, password management and multi-factor authentication in one unified solution. LastPass Identity provides a holistic view of end user activity to simplify security for IT, all while delivering the passwordless login experience employees want. Start a free LastPass Identity trial today.
The CyberWire is pleased to announce the launch of our new newsletter focused on connecting women in the cybersecurity field across the globe! The publication will launch on August 3rd, and will appear on the first Monday of every month. It's brought to you by women in the industry, and you're invited to join our league of cyber ladies and create lasting connections. Learn more or subscribe here.
Amazon, Apple, Google, and Facebook completed (by WebEx) yesterday’s testimony before the US House Judiciary Committee’s anti-trust subcommittee. Messrs. Bezos, Cook, Pichai, and Zuckerberg hewed to foreseeable lines during their testimony (the Telegraph thought they emerged “unharmed”), but observers thought the Congressional inquisitors generally well-prepared. The House subcommittee was interested in both anti-competitive practices and the roles the platforms have assumed in moderating content and influencing elections. The Wall Street Journal sees the central issue raised in the session as the economic and social power big data analytics have enabled Big Tech to concentrate.
Eclypsium has found a vulnerability, “BootHole,” that affects the GRUB2 bootloader used by most Linux systems. It could be exploited to gain the ability to execute arbitrary code even when secure boot is enabled. An attacker would need either administrative privileges or physical access to a device to infect it, however, which as Ars Technica points out, if the attacker has those, you’ve got a lot of other problems to worry about.
EclecticIQ and its partners at ThreatFabric report that malicious Android packages have been found presenting themselves as legitimate, government-backed COVID-19 contact-tracing apps.
According to BleepingComputer, the FBI has issued a warning that Netwalker ransomware is being deployed against government agencies, both in the US and internationally.
China says that it’s always been firmly opposed to cyberespionage and that anyone (like Recorded Future, whose report has been widely cited) who thinks Beijing hacked the Vatican needs to put up or shut up, Global News writes.
Today's issue includes events affecting Canada, China, the Holy See, India, Ireland, Israel, the Democratic Peoples Republic of Korea, Latvia, Lithuania, New Zealand, Poland, Russia, Singapore, Turkey, the United Kingdom, and the United States.
Subscribe to CyberWire Pro to gain exclusive access to actionable reporting, analysis and insights on the global information security industry reshaping our world. CyberWire Pro is an independent news service you can depend on to stay informed, and save time. This unique offer includes access to exclusive podcasts, briefings, webinars, and much more! Visit thecyberwire.com/pro to learn more.
North Korean Hackers Sniffing for US Defense Secrets (Infosecurity Magazine) McAfee reveals “Operation North Star” campaign
China Hacked Vatican Ahead of Negotiations, U.S. Cybersecurity Firm Says (Wall Street Journal) A Chinese-state-backed group recently hacked into Vatican computers on the eve of important negotiations with Beijing, according to a U.S. cybersecurity firm.
China demands ‘sufficient evidence’ to support Vatican cyber attack accusations (Global News) China’s Foreign Ministry on Wednesday said that “sufficient evidence” should be presented in relation to a U.S. cybersecurity firm indicating that hackers linked to the Chinese government had infiltrated Vatican computer networks. The firm indicated the Catholic diocese of Hong Kong had also been targeted.
Hackers Broke Into Real News Sites to Plant Fake Stories (Wired) A disinfo operation broke into the content management systems of Eastern European media outlets in a campaign to spread misinformation about NATO.
US jabs Russia over claim of spreading virus disinformation (WILX) U.S. officials say Russian intelligence officers are spreading disinformation about the coronavirus pandemic through English-language websites, trying to exploit a crisis that America is struggling to contain before the presidential election in November.
China vs UK: Hackers launch bizarre impersonation campaign against senior Tory MP (Express) CHINESE cyber agents are thought to be behind a bizarre campaign against a senior Conservative Party MP involving hacking attempts and impersonations, with the National Cyber Security Centre (NCSC) called in to investigate the attacks.
Tory MP believes he was victim of ‘state-supported’ cyber campaign after China criticism (PublicTechnology.net) A senior Conservative MP has accused Chinese hackers of impersonating him online to try and discredit him after he criticised Beijing. Tom Tugendhat, chair of the foreign affairs select committee, said professional contacts received bizarre fake press releases, while friends and family were sent untrue claims about his private life.
FBI warns of Netwalker ransomware targeting US government and orgs (BleepingComputer) The FBI has issued a security alert about Netwalker ransomware operators targeting U.S. and foreign government organizations, advising their victims not to pay the ransom and reporting incidents to their local FBI field offices.
Billions of Devices Impacted by Secure Boot Bypass (Threatpost) The "BootHole" bug could allow cyberattackers to load malware, steal information and move laterally into corporate, OT, IoT and home networks.
New flaw neuters Secure Boot, but there’s no reason to panic. Here’s why (Ars Technica) Boot Hole provides a new way to install boot-level malware. But it's hardly the only.
'BootHole' Flaw Allows Installation of Stealthy Malware, Affects Billions of Devices (SecurityWeek) Billions of Windows and Linux devices are affected by a serious GRUB2 bootloader vulnerability dubbed BootHole that can be exploited to install persistent and stealthy malware
Mitigating BootHole – ‘There’s a hole in the boot’ – CVE-2020-10713 and related vulnerabilities (Ubuntu) Responsible disclosure and coordinated response as a benefit to all Today we released updates for a series of vulnerabilities termed ‘There’s a hole in the boot’ / BootHole in GRUB2 (GRand Unified Bootloader version 2) that could allow an attacker to subvert UEFI Secure Boot. The original vulnerability, CVE-2020-10713, which is a high pri […]
There’s a Hole in the Boot (Eclypsium) “BootHole” vulnerability in the GRUB2 bootloader opens up Windows and Linux devices using Secure Boot to attack. All operating systems using GRUB2 with Secure Boot must release new installers and bootloaders. Join Eclypsium for a webinar "Managing The Hole In Secure Boot" on August 5th, where CEO Yuriy Bulygin and…
Question Quiz - The Forgotten Scam (Akamai) Overview Over a year ago, Akamai's threat research team published research regarding a widely-used phishing toolkit we referred to as the
EclecticIQ and ThreatFabric investigation reveals evidence of malicious Android packages posing as legitimate Covid-19 contact tracing apps (WFMZ) EclecticIQ, the global provider of cyber threat intelligence (CTI) technology solutions, has teamed up with fraud and cybercrime prevention experts at ThreatFabric to publish
Joint Threat Intelligence investigation by EclecticIQ and ThreatFabric (EclecticIQ) An investigation into instances of threat actors actively pushing malicious Android packages disguised as legitimate contact tracing applications.
CTI Investigation into COVID-19 Contact Tracing Apps (EclecticIQ) An investigation into instances of threat actors actively pushing malicious Android packages disguised as legitimate contact tracing applications.
CCleaner flagged as potentially unwanted by Windows Defender (gHacks Technology News) Microsoft Defender Antivirus flags certain CCleaner installers as potentially unwanted software according to a new database entry on the company's malware encyclopedia site.
This basic Zoom flaw allowed hackers to break into any private meeting (TechRadar India) Until recently, there were only one million possible Zoom meeting passcodes
California pharmaceutical firm hit by DopplePaymer ransomware (iTWire) California-based Amphastar Pharmaceuticals has joined the army of companies hit by ransomware, with the firm appearing to have suffered an attack by cyber criminals who have used the DopplePaymer ransomware that attacks Windows systems. The publicly listed company had revenue of US$322.4 million (A$...
Apple's Thunderbolt is being targeted by cyberattacks. Here's how to stop them (Verdict) Cybersecurity company ESET has published guidance on how to protect against cyberattacks targeting Apple's Thunderbolt hardware.
Ransomware: How clicking on one email left a whole business in big trouble (ZDNet) A food and drink manufacturer fell victim to a ransomware attack and crucially didn't give into the extortion demand - but it could've been much worse.
Security breach detected in Kentucky's unemployment system (WLWT) Kentucky's unemployment system was hit with another security breach, but state officials offered assurances Wednesday that it posed no threat to sensitive financial information.
Beshear confirms employment system data breach (WOWK 13 News) Kentucky Gov. Andy Beshear confirmed an additional 619 cases of the coronavirus, bringing the state’s total to 28,727. He said the state’s positive percenta…
Kentucky unemployment system breached again as Beshear administration faces backlash (The Courier-Journal) The incident occurred Monday as the Office of Unemployment Insurance was told that a claimant saw another claimant's employer, health information.
Vermont tax department dealing with data breach (WCAX) Darren Perron spoke with Vermont Tax Commissioner Craig Bolio to find out what happened, who’s at risk, and how they can protect themselves.
Vermont Tax Department exposed 3 years worth of tax return info (BleepingComputer) The Vermont Department of Taxes today disclosed that taxpayers' private information was exposed because of a security issue affecting its online filing site discovered on July 2, 2020.
Nonprofits Respond to Blackbaud Data Breach (Chronicle of Philanthropy) A ransomware attack at fundraising technology provider Blackbaud is raising questions for a wide range of nonprofits that were affected.
Texas Tech Foundation Reports Involvement in Data Breach (News/Talk 95.1 & 790 KFYO) The service provider for the Texas Tech Foundation called Blackbaud was recently the victim of a data breach that occurred in May 2020.
Ransomware Stole Donor Data of San Diego Charities, Francis Parker School (Times of San Diego) Several major San Diego nonprofits including KPBS and San Diego Zoo Global potentially lost private donor data to cybercriminals as recently as May 20.
Hacker paid off after personal information of NUI Galway alumni breached (The Irish Times) University’s foundation mailing list suffered cyber attack
Otago, Auckland universities caught up in cyber attack (Stuff) Alumni and donor information has been stolen by hackers of US not-for-profit database management software company Blackbaud.
Texas State launches investigation into cyber attack (The University Star) Texas State has launched an investigation into a ransomware attack on a customer relationship management service provider for the university. On July 16, Blackbaud Inc., a computer software company, notified Texas State that it discovered and stopped a security incident involving services it provides to the university. In an email to the university community, Texas...
Dunzo Hacked! Personal Details Of 35 lakh Dunzo Users Leaked! (Trak.in - Indian Business of Tech, Mobile & Startups) Earlier this month, Dunzo reported a data breach, which seems to be more alarming than the earlier expectations since the leaked information now been uploaded on haveibeenpwned.com.
DXC reports ‘minimal impact’ following subsidiary ransomware attack (Channel Asia) DXC has completed an internal investigation following a ransomware attack on insurance subsidiary Xchanging, reporting ‘minimal impact’ as a result.
Athens ISD to pay $50K to recover school data after ransomware attack; start of school delayed (cbs19.tv) As a result, the first day of school will be delayed to Aug. 10
Michigan Health System Investigates Possible Data Breach (Government Technology) Beaumont Health said patient data was potentially exposed after an unauthorized third party accessed the employee email system earlier this year. The data could include sensitive personal information and medical diagnoses.
More than 250 email addresses exposed in Shropshire Council data breach (Shropshire Star) More than 250 email addresses were exposed in a data breach by Shropshire Council, it has emerged.
Cognizant revenue dips 3.4% as cybersecurity attack impacted biz (InfotechLead) Cognizant announced its revenue fell 3.4 percent to $4 billion in the second quarter of 2020 as Covid-19 pandemic and the ransomware attack impacted its business. Cognizant’s operating margin was 11.7 percent vs. 14.9 percent. Net income of Cognizant was $361 million vs. $509 million Cognizant CEO Brian Humphries said: “We delivered a solid second quarter performance whilst […]
Virgin Email Outage Reported; Company Denies Widespread Problems (Media Post) Some UK users are still complaining that their broadband is down. Virgin reportedly confirms a technical issue.
Critical Bugs in Utilities VPNs Could Cause Physical Damage (Threatpost) Gear from Secomea, Moxa and HMS Networks are affected by remote code-execution flaws, researchers warn.
Information Sharing on control system cyber incidents is not working and that can be deadly (Control Global) In the cyber security community, cyber vulnerability information sharing has been considered a critical need.
Cisco fixes severe flaws in data center management solution (BleepingComputer) Cisco today has released several security updates to address three critical authentication bypass, buffer overflow, and authorization bypass vulnerabilities found to affect Cisco Data Center Network Manager (DCNM) and multiple Cisco SD-WAN software products.
Nokia 2.3 and 7 Plus receiving July security patch (Nokiamob) Nokia Mobile continued releasing security updates for its smartphones. Nokia 2.3 and Nokia 7 Plus are the next to receive the July security patch from Google.
The Anatomy of a Phishing Kit: Detect and Remove Threats (ZeroFOX) Phishing kits represent an emerging threat to financial services and other industries, giving less sophisticated actors new methods to conduct attacks.
Dark Web Travel Agencies Revisited: The Impact of Coronavirus on the Shadow Travel Industry (Digital Shadows) Back in February, Digital Shadows published a blog looking at the dark web travel industry. We described how cybercriminals active on dark web forums and marketplaces have, for years, been peddling
2020 Netwrix IT Trends Report: Reshaped Reality (Netwrix) The report summarized feedback from over 900 IT professionals and revealed how the global work-from-home experiment changed their IT priorities.
Survey: IT Skills Shortage Forces 31% of Organizations to Investment (AiThority) The education of IT staff has increased from 19% to 31%, which suggests that organizations key concerns amid the global IT skills shortage.
Covid Crimes: Espionage, Hackers And Why America Is Vulnerable (Forbes) Evidence indicates that Russia, China and others have attempted to hack universities and research institution’s to steal Covid-19-related IP. And days ago, E.U. courts ruled U.S. privacy protections are inadequate, threatening our ability to work with E.U. countries on vaccines and treatments.
Hackers see opportunity in kids going to school online this fall (FOX 13 Tampa Bay) Cybersecurity experts say the pandemic created a ripe environment for hackers, allowing for a surge in cyber attacks.
Cyber Research Study - Multi-Cloud Defense: Redefining the Cyber Playbook V2 (GDIT) We surveyed Federal cyber leaders to explore cybersecurity challenges and opportunities in multi-cloud environments. The report catalogs current efforts and aspirations to offer Federal IT leaders a path to future-proof multi-cloud cybersecurity.
Qualys acquires software assets of Spell Security (Help Net Security) Qualys has acquired the software assets of Spell Security, an endpoint detection and response start-up. This acquisition further strengthens Qualys’
Mimecast Limited (MIME) Acquires MessageControl (StreetInsider.com) Mimecast Limited (NASDAQ: MIME), a leading email and data security company, today announced it has acquired eTorch Inc. (d/b/a MessageControl), a messaging security provider with solutions designed to help stop social engineering and human identity attacks with the use of machine learning technology.
Austin cybersecurity startup Spyderbat raises $4.2 million (Austin Statesman) Austin-based cybersecurity startup Spyderbat said Wednesday that it has raised $4.2 million to accelerate development and launch its product.
Curv Raises $23M to Help Enterprises Prevent Cyberattacks on Digital Assets (AlleyWatch) Distributed ledger trading and new crypto finance products are swiftly being adopted by financial institutions across the globe. Curv unlocks this market for participants and accelerates institutional adoption of its security infrastructure.
Group-IB Receives Funding from CSA to Develop a Cyber Investigation Solution for Singapore (PR Newswire) Group-IB, a global threat hunting and intelligence company headquartered in Singapore, has been awarded a grant under the Cyber Security Agency...
Fairfax company lands $54M cybersecurity contract (Virginia Business) The U.S. Department of the Interior (DOI) has awarded Fairfax-based business and technology consulting company Customer Value Partners Inc. (CVP) a four-year, $54 million contract to provide department-level cybersecurity services. The award has been distributed through the DOI’s Information Management and Assurance Program Support contract. CVP will provide risk management, continuous monitoring, information security officer…
Qualcomm Inks Licensing Deal With Huawei Despite U.S.-China Tensions (Wall Street Journal) U.S. mobile phone chip giant Qualcomm said it resolved a licensing dispute with Huawei Technologies and inked a long-term deal with the smartphone maker despite heightened tensions between the U.S. and China.
TikTok's new CEO says company will reveal how its algorithms work (Axios) The Chinese-owned social media upstart aims to counter criticism and win trust.
Amazon Bought Ring for Market Position Despite Internal Concerns (Yahoo) (Bloomberg) -- Amazon.com Inc. went ahead with its acquisition of video-doorbell maker Ring to grab market share in a promising area of consumer technology despite some security and compliance concerns about the startup, according to documents made public on Wednesday.Four months before Amazon sealed
SecureReview Expands into EU/UK Markets in Time for Change to Privacy Laws (Yahoo) Privacy Shield has been ruled noncompliant with European privacy rights. Non-European companies are now charged with providing privacy controls that comply with European data protection laws for European users.
Game Streamers Suspended on Twitch and Facebook Move to YouTube (Bloomberg) Twitch has raised the bar on streamer behavior amid #MeToo movement.
How to Decipher InfoSec Job Titles' Mysteries (Dark Reading) Figuring out which cybersecurity job you want -- or are qualified for -- can be difficult when words have no consistent meaning in the industry.
Qualys Integrates Ivanti Patch Management into Qualys VMDR Platform to Self-Heal Endpoints with One | Ivanti (Ivanti) Qualys Vulnerability Management Detection Response (VMDR) Platform Streamlines the Detection and Patching of Vulnerabilities, from the Endpoint to the Datacenter
DLT Solutions Expands SLED Reach With OMNIA Partners Software Contract Award (PR Newswire) DLT Solutions, LLC., a wholly owned subsidiary of Tech Data and a premier government technology solutions aggregator, has been awarded a state,...
Yellowbrick and Protegrity Partner on Data Security and Privacy (BusinessWire) Hybrid cloud data warehouse company Yellowbrick Data today announced that data security solutions provider Protegrity has joined the company’s partner
BigID Launches First App Marketplace for Privacy & Data Discovery (BusinessWire) BigID, the leader in data discovery and intelligence for privacy, protection and perspective, today introduced the first App Marketplace for any priva
Pulse Secure Delivers Cloud-Based, Zero Trust Service For Multi-Cloud And Hybrid IT Secure Access (Security Informed) Pulse Secure, the renowned provider of software-defined Secure Access solutions, announced the launch of Pulse Zero Trust Access (PZTA), a cloud-based, multi-tenant secure access service that enables...
Hinduja Group firm, Tech Mahindra partnership to provide advanced cyber security solutions (EasternEye) UK-based advanced cyber security provider and Hinduja Group firm CyQureX-UK and Tech Mahindra have entered into a global strategic partnership to offer cyber security solutions through ‘digital transformation’. With this, both firms aim to become leaders in the emerging ‘Zero Trust’ environment, leveraging CyQureX’s core Software Defined Perimeter technology and solutions, alongside Tech Mahindra’s focus […]
New tool detects shadow admin accounts in AWS and Azure environments (ZDNet) CyberArk releases new SkyArk tool for scanning AWS and Azure infrastructure for misconfigured accounts.
Avast Business Launches Small Office Protection to Deliver Complete Online Security (PR Newswire) Avast (LSE: AVST), a global leader in digital security and privacy products, today announced the launch of Avast Business Small Office...
Boldon James | Boldon James Announces Technology Integration with cryptovision (RealWire) SAFEmail Military Messaging combined with GreenShield encryption delivers a trusted solution to government and military agencies.
Trend Micro Cloud-Powered XDR Drives Monumental Business Value (PR Newswire) Trend Micro Incorporated (TYO: 4704), the leader in cloud security, today shared the significant business value driven by cloud-powered XDR and...
nVisium Advances Full-Stack Software Security Engineering Training with DevSec Mentor (PR Newswire) nVisium, a leader in application security, has today announced the release of DevSec Mentor, a modern training platform that enables developers...
Morgan Stanley Leads Bank Group on Cloud Data Standards (Wall Street Journal) Banks, technology companies and cloud providers are working together to define best practices for how financial institutions move their data to the cloud and keep it safe from hackers.
Leading Canadian Financial Services Firms Moving to Adopt the FDX Technical Standards for Secure Financial Data Sharing (PR Newswire) Financial Data Exchange, LLC (FDX) has officially launched in Canada, with 31 organizations leading the country's financial services ecosystem...
US tax service says, “2FA is a must!” (Naked Security) We know it’s an old drum, but we’re not tired of beating it yet: 2FA is your friend.
Here’s Why Credit Card Fraud is Still a Thing (KrebsOnSecurity) Most of the civilized world years ago shifted to requiring computer chips in payment cards that make it far more expensive and difficult for thieves to clone and use them for fraud. One notable exception is the United States, which is still lurching toward this goal. Here's a look at the havoc that lag has…
Building a serverless tokenization solution to mask sensitive data (idk.dev) This post is courtesy of Anuj Gupta, Senior Solutions Architect, and Steven David, Senior Solutions Architect. Customers tell us that security and compliance are top priorities regardless of industry or location. Government and industry regulations are regularly updated and companies must move quickly to remain compliant. Organizations must balance the need to generate value from data […]
A day after Michigan snafu, software 'complications' force Indiana to hold bar exam by email (Reuters) Indiana's high court said Wednesday that the state will conduct its upcoming bar exam via email, open-book and without live-stream proctors, after "repeated and unforeseen technical complications" with the testing software it planned to use.
Now That’s What I Call ADHD! 4 (Black Hills Information Security) Moth & James Marrs // Introduction After a month of hard work, Python headaches, dependency hell, and a bit of tool necromancy, ADHD4 is here and we’re thrilled to share it with the community! This version features tools upgraded from Python 2 to Python 3, a fancy new applications menu, updated/reorganized documentation, and more. What’s […]
CISA announces second annual President’s Cup Cybersecurity competition (Security Magazine) The Cybersecurity and Infrastructure Security Agency (CISA) announced the opening of individual and team registration for the second annual President’s Cup Cybersecurity Competition, which is open to any Federal Executive branch employee, including the Department of Defense and uniformed service members, with a knack for cybersecurity.
New mentoring program aims to create Israel's next leading cyber experts (The Jerusalem Post) The initiative is meant to encourage young girls who are currently enrolled in technological-oriented classes in school to pursue meaningful positions during and after their military service.
From cybersecurity to job security, MiraCosta College will help get you there (Coast News) With the COVID-19 pandemic leading to record-breaking levels of unemployment throughout the region, MiraCosta College is expanding its already abundant opportunities for no-cost or low-cost education and training programs critical not only to finding jobs that are in demand now, but that will be in demand for years to come.
EPISD CyberPatriot Camp gives students chance to learn more about digital protection - El Paso Herald-Post (El Paso Herald-Post) Today’s virtual world was the perfect backdrop for EPISD’s annual CyberPatriot Camp, giving students
Singapore PM: U.S.-Chinese Relations at ‘Very Dangerous’ Level - USNI News (USNI News) The relationship between Washington and Beijing has sunk to such a “very dangerous” level with no sign of tensions easing after the next U.S. presidential election, the prime minister of Singapore said Tuesday. Lee Hsien Loong said his city-state nation and others in Asia are increasingly worried that America “treating China as an adversary” could …
There’s no Cold War with China — and if there were, we couldn’t win (Washington Post) China dominates current discussions of foreign policy, primarily because it poses the greatest challenges to our national interests.
Turkey Adopts New Law to Police Dissent on the Web (Wall Street Journal) President Recep Tayyip Erdogan’s government’s new powers give it more leverage to press social media companies to remove content it doesn’t like, sending a chill through the country’s human-rights activists and dissidents
Antitrust Hearing Targets Big Tech—Live Analysis (Wall Street Journal) The CEOs of Amazon, Apple, Facebook and Google face questions from members of Congress aiming to rein in what they believe is the companies' excessive power.
Key House tech antitrust hearing under way after delay (updated) (NASDAQ:AMZN) (Seeking Alpha) A benchmark hearing gathering four tech-giant CEOs to testify together for the first time is set to begin.U Amazon.com's (NASDAQ:AMZN) Jeff Bezos, Facebook's (NASDAQ:FB) Mark Zuckerberg, Apple's (NASDAQ:AAPL) Tim Cook and Google's (GOOG, GOOGL) Sundar Pichai will appear at the hearing of the House Judiciary Committee's Antitrust subcommittee, which was rescheduled from Monday.
Big Tech’s Power Comes Under Fire at Congressional Antitrust Hearing (Wall Street Journal) The chief executives of Amazon.com, Facebook, Apple and Google faced relentless criticism at a congressional hearing Wednesday, with Democrats and Republicans alike challenging their business practices.
Tech Antitrust Hearing Puts Big Data on Hot Seat (Wall Street Journal) Congressional lawmakers peppered the chief executives of Alphabet Inc., Facebook Inc., Amazon.com Inc. and Apple Inc. with questions about their respective companies’ footprints and allegations of anticompetitive behavior.
Tech bosses labelled 'cyber barons' in landmark US grilling (The Telegraph) The bosses of America's biggest tech firms were accused of being "emperors" and "cyber barons" in a marathon five-hour Congressional hearing on Wednesday.
A few of the big questions Big Tech CEOs didn’t answer (Protocol) Jeff Bezos, Mark Zuckerberg, Sundar Pichai and Tim Cook all promised they'd "look into" many questions from lawmakers.
What the tech hearing proved about Democrats’ case against Big Tech (Protocol) They came with antitrust receipts.
Democrats just made their case against Big Tech. Here’s what comes next. (Protocol) Lawmakers laid out their arguments and evidence at a hearing with the CEOS of Amazon, Apple, Facebook and Google. Will anything come of it?
'Mr Bezos, you're on mute': Tech bosses escape Washington grilling unharmed (The Telegraph) Bluster and politics overshadowed an unprecedented five-hour hearing with the bosses of Google, Amazon, Facebook and Apple
Lawmakers accuse tech giants of using privacy as a weapon to hurt competition (CNET) Apple and Google have used online privacy and security measures to gain a competitive advantage, Congress members said.
Big Tech bosses told they have ‘too much power’ (Silicon Valley Business Journal) The chief executives of Apple, Google, Facebook and Amazon faced accusations of wielding their companies’ size to unfairly squash competition, as they sat for an unprecedented grilling from lawmakers on Capitol Hill.
"Instagram can hurt us": Mark Zuckerberg emails outline plan to neutralize competitors (The Verge) Antitrust panel says the messages show Zuckerberg trying to buy out his competition.
U.S. Imposes New Sanctions Targeting Assad Family, Syrian Military Unit (Wall Street Journal) The U.S. placed sanctions on a son of Syrian President Bashar al-Assad and a Syrian military unit in the latest move in an effort by the Trump administration to pressure the country’s regime to end a civil war.
Treasury to Make TikTok Recommendations to Trump This Week (Wall Street Journal) Treasury Secretary Steven Mnuchin said a review led by his department into whether the popular Chinese video-sharing app poses national-security threats would present its recommendations to President Trump.
GOP Proposal: $53 Million for COVID-19 Research Security (GovInfo Security) As part of their latest COVID-19 economic relief legislation unveiled this week, Senate Republicans are proposing to allocate about $53 million to the U.S.
Spacecom Enters Partnership With Cybercom, Official Says (Aviation Week) U.S. Space Command (Spacecom) is partnering with U.S. Cyber Command by offering a planning element to implement cyber protection and capabilities or space expertise. The integrated planning team...
Britain Names Turkish Speaker as New Top Spy (SecurityWeek) Britain named former ambassador to Turkey Richard Moore as the new director of the MI6 Secret Intelligence Service.
DOD's cyber chief to exit this month (Defense Systems) The Pentagon’s lead cybersecurity expert, Jack Wilmer, is leaving his post for an industry role at the end of July.
This Billion Dollar Company Considers Privacy Laws a Threat to Its Business (Vice) ZoomInfo scrapes users' emails and feeds that data back into its product. A recent public filing demonstrates how businesses in this space view privacy laws.
House panel votes to give all members access to classified intel on foreign 'disinformation' campaign (CNN) The House Intelligence Committee on Wednesday voted to allow all House members to view classified intelligence that Democratic leaders provided to the FBI warning about a foreign "disinformation" campaign targeting the 2020 presidential election.
China’s New Tool to Chase Down Fugitives: American Courts (Wall Street Journal) Beijing is turning to lawsuits to pressure expatriates to return home and face corruption charges.
‘Brushers’ Come Into Focus as Officials Test Packages of Mysterious Seeds (Wall Street Journal) The technique used by so-called brushers includes faking online sales to enhance the standing of vendors.
Lessons Learned from the NYDFS First Cybersecurity Regulation Enforcement Action | JD Supra (JD Supra) Last week, the New York Department of Financial Services (NYDFS) filed its first enforcement action against a title insurance company (the company)...
U.S. prosecutors seek 27 months imprisonment for former Uber self-driving head (Reuters) U.S. prosecutors are seeking 27 months of imprisonment for the former head of Uber's self-driving technology unit, Anthony Levandowski, who agreed to plead guilty in March for taking sensitive documents from his former employer Google before joining Uber.
Allied Universal Aids in Capture of Major Fugitive (Accesswire) Allied Universal®, a leading security and facility services company in North America, received a letter of appreciation from the U.S. Department of Justice's United States Marshals Service regarding the apprehension of Gerald Hunter, who was #1 on the Most Wanted list of the Drug Enforcement Administration's (DEA) St. Louis Strike Force's West Central Region due to his suspected role in
For a complete running list of events, please visit the Event Tracker.
CISA’s Third Annual National Cybersecurity Summit (Online, Sep 16 - Oct 7, 2020) CISA’s Annual National Cybersecurity Summit will be held virtually as a series of webinars every Wednesday for four weeks beginning September 16 and ending October 7. The 3rd Annual National Cybersecurity Summit will bring together infrastructure stakeholders from around the world and provide a forum for meaningful conversations and collaboration on cybersecurity. Each series will have a different theme that focuses on CISA’s mission to “Defend Today, Secure Tomorrow,” with presentations from targeted leaders across government, academia, and industry. This year’s themes are: Sept 16: Key Cyber Insights; Sept 23: Leading the Digital Transformation; Sept 30: Diversity in Cybersecurity; Oct 7: Defending our Democracy.
WSIS Forum 2020 (Online, Jun 22 - Sep 10, 2020) The World Summit on the Information Society (WSIS) Forum 2020, celebrates 15 years of providing a multi-stakeholder platform to discuss, share experiences, showcase innovation, and foster partnerships in strengthening the impact of ICTs for sustainable development. Online sessions to be held from 22 June, 12:00-13:00 onwards, featuring a weekly program, including a series of thematic/country workshops which are hosted by WSIS Stakeholders, high-level policy sessions, special tracks on various themes, a virtual knowledge café, a Hackathon, WSIS Action Line meeting and a virtual exhibition addressing issues that are critical to WSIS implementation and follow-up in a multi-stakeholder setting.
SINET Innovation Summit 2020 (New York, New York, USA, Jul 30, 2020) Connecting Wall Street, Silicon Valley and the Beltway SINET New York connects the United States’ three most powerful institutions and evangelizes the importance of industry, government and academic collaboration on security initiatives.
Achieving Cyber Resiliency Across Mission-Critical Assets (Online, Jul 30, 2020) Improving resilience has become a critical goal as organizations must adapt to rapidly changing cyber threats, while ensuring that critical systems can withstand attack without disruption. Most traditional cybersecurity solutions have relied on perimeter protection, frequent patching, and auditing security logs. While these remain important, we must assume that the sophisticated attacker is already inside the network and has established access and privilege. For true cyber resiliency, we need deeper protection at the network, hardware, and OS layers, as well as visibility and control over how critical applications execute during runtime. Join experts from Raytheon Intelligence & Space and Virsec for an interactive discussion on the latest approaches to cyber resiliency, and the need for stronger protection at each layer of the system.
Black Hat USA 2020. (Online, Aug 1 - 6, 2020) Now in its 23rd year, Black Hat USA is the world's leading information security event, providing attendees with the very latest in research, development and trends. Black Hat USA 2020 opens with four days of technical Trainings (August 1-4) followed by the two-day main conference (August 5-6) featuring Briefings, Arsenal, Business Hall, and more.
Institute for Security and Technology Launch Event (Online, Aug 4, 2020) Today, there is unprecedented disorder in our world and society. It is critical that we respond, and IST is taking action in this pivotal moment by doubling down on our commitment to mitigate the struggles so many are facing. Our competitive advantage rests in our ability to anticipate security challenges before they impact society through trust and foresight, convene unique leaders from the public and private sectors, and follow through by delivering results, creating markets, connecting with and ultimately informing policy. To kick things off, IST will host a virtual launch event on August 4th from 1030-1200 PT, featuring discussions and Q&A sessions with leading experts on emerging security issues.
