Global median score jumped by ten per cent in two years — and just as well The United Nations International Telecommunication Union (ITU) published its 2020 Global Cyber Security Index on Tuesday, and listed the US first in overall ranking, followed by a tie for second place tie between the …
Admins tend to forget that subdomains don’t inherit security controls, leaving the likes of CNN, Harvard, Cisco, and US health authorities with vulnerabilities Abandoned or ignored subdomains often include overlooked vulnerabilities that leave organisations open to attack, according to a team of infosec researchers from the Vienna University …
Picking street signs from a matrix of images is out, cleverer challenges are OK Poll Analyst firm Gartner has advised in favour of the use of CAPTCHAs — but recommends using the least-annoying CAPTCHAs you can find.... [...]
Think tank says inconsistencies in story were not a cover-up — just a mistake from “working-level staff” South Korean officials have admitted that government nuclear think tank Korea Atomic Energy Research Institute (KAERI) was hacked in May 2021 by North Korea’s Kimsuky group. The Korean news outlet that broke …
Big tech and local authorities are both far from helpful when victims try to delete unauthorised images or prosecute creeps International non-governmental organisation Human Rights Watch (HRW) released a report Wednesday describing digital sex crime in South Korea as rampant and pervasive, with the nation leading the world in …
China lashed for ignoring norms, retorts that Western clique isn't playing fair A communiqué issued at the conclusion of the NATO summit has called for China to observe the laws of cyberspace, and set out new standards by which members of the alliance will consider cyberattacks.... [...]
Fines, fines, everywhere there's fines Microsoft and five other companies have received fines totaling US$75K from South Korea's Personal Information Protection Commission (PIPC), for running afoul of local data protection laws.... [...]
Has the hacktivist group had enough of Musk's manipulative crypto-Tweets, or has someone just donned the mask to protest their crashed Bitcoin balance? Entities using the name and iconography of hacktivist collective Anonymous have deemed Elon Musk's recent crypto-tweeting worthy of a re-emergence.... [...]
US president calls China’s military-industrial complex 'a threat' and condemns surveillance technology for human rights abuse US president Joe Biden has issued an executive order to expand the Trump-era ban preventing Chinese tech and defence companies from receiving American investment, upping it from 31 to 59 named entities …
Microsoft says Nobelium scored access to Constant Contact email marketing tool Nobelium, the Russia-aligned gang identified as the perpetrators of the supply chain attack on SolarWinds' Orion software, has struck again, Microsoft vice president Tom Burt in a blogpost Thursday.... [...]
Special Administrative Region recorded plunge in ransomware attacks Criminals tried to exploit Hong Kong residents' COVID-related anxiety, according to new security data released yesterday by the Special Administrative Region's secretary for innovation and technology Alfred Sit.... [...]
Hounds can sniff out SIM cards that a human might miss Australia's Federal Police (AFP) is getting more help from some very good boys with four paws, wagging tails, and the ability to sniff out tech equipment with their highly sensitive noses.... [...]
Intrusion believed to have entered through email New Zealand's Waikato District Health Board (DHB) has been hit with a strain of ransomware that took down most IT services Tuesday morning and drastically reduced services at six of its affiliate hospitals.... [...]
TraceTogether app becomes primary tracking tool and compulsory in many settings Singapore has made its Bluetooth-powered "TraceTogether" contact-tracing app its preferred means of recording movements in public spaces across the island.... [...]
Someone at West Midlands Trains approved nasty cybersecurity drill UK rail operator West Midlands Trains sent an email to 2,500 employees to thank them for hard work during COVID and promised a one-time bonus as a reward, but that lovely news turned out to be phishing training. Needless …
Another auto-exploit saw rPi push Telegram messages over CAN bus to brick a car Black Hat Asia Researchers have used the Black Hat Asia conference to demonstrate the awesome power of the Raspberry Pi as a car-p0wning platform.... [...]
Asia is already short millions of trainees; expert warns talent pipeline will dry up in response to government snooping Black Hat Asia Asian nations in which governments are keen on citizen surveillance struggle to develop ethical hackers, as prospective workers fear their activities may be misunderstood, according to security …
Majority aren't GDPR compliant and Google Play categorises them badly, leading to lax practices Hundreds of millions of women turn to fertility apps to conceive or prevent pregnancy, and according to a new study those apps may leak very personal information including miscarriages, abortions, sexual history, potential infertility and …
Many banned posts were made by opposition politicians and appear to be criticism of the government As India battles a surging second wave of COVID-19 cases and severe shortages of medical supplies to fight it, the nation's government has told Facebook, Instagram and Twitter to remove social media posts …
Google employees called the meeting to discuss AP's data privacy reveal the 'Oh Shit' meeting Australian federal court sent a message to Big Tech about its willingness to act on privacy violations when it ruled today that Google had "partially" misled consumers about collecting mobile phone personal location data …
Safer than eyeballs or fingerprints, apparently India’s National Health Authority has commenced a pilot of facial recognition software as a means of identifying people as they queue in the nation's COVID-19 vaccine centres.... [...]
Then issuing tens of millions in fake invoices A duo in China has been accused of tricking a government-run identity verification system to create fake invoices.... [...]
Posting pics of 'I got the jab' certs, complete with their QR codes, has authorities worried Indonesian officials have asked its nation's citizens to stop leaking their own personal data on social media by sharing pictures of certificates attesting to their receipt of COVID-19 vaccinations.... [...]
App's owner says users didn't bail Messaging app LINE has removed Chinese affiliate’s access to personal data, after infosec concerns led Japanese government officials to stop using the app. Information stored in South Korea will also be rehomed to Japan by September.... [...]
App has common code base for three versions: one global edition; one for south-east Asian; one for China TikTok is likely no more of a threat to users than Facebook, according to an analysis by academic research group Citizen Lab that analyzed the video-sharing social networking service’s app …