US Cyber Command Takes on North Korean Missile Program

I read an interesting article in the New York Times earlier this month, about how the United States is using cyber-warfare tactics against North Korea to slow the development of an inter-continental ballistic missile that can reach the United States.  The effective range maps were startling.  (see below)

It seems that Trump has inherited a cyber war program from the Obama administration that was started 3 years ago and targeted the North Korean missile development program.  Since that time, there ...

Continue Reading →
28
APR
0

Computers and Internet, News and politics, NSA

US-CERT Warns About Airline Phishing Scams

What if there was a new phishing scam that had an open rate of 90%.  That’s right, this phishing email is so believable, 90 out of 100 recipients open the the attachment or click on the link without a second thought.

These attacks begin with the scammer researching the target victim.  These targets usually work at companies where there is a lot of air ...

Continue Reading →
26
APR
0

Computers and Internet, cybersecurity, malware, passwords, Phishing, Spyware, surveillance, Trojan

SCADA Systems Vulnerable Due to Hard Coded Passwords

We have discussed the dangers to what NIST identifies as Critical Infrastructure that exists because SCADA and other industrial control systems are designed to be run on “air-gapped” networks that are not connected to the public Internet.  Unfortunately, many of these systems are being connected to the Internet, if only in a tangential way.

The German security firm OpenSource Security recently found hard ...

Continue Reading →
24
APR
0

authentication, Computers and Internet, cybersecurity, Internet of Things, passwords, Security

Russian Bot-Herder and Spammer Pinched By FBI

Russian cyber-criminals are hard to arrest, because there is no extradition treaty between the US and Russia.  The Russian government allows them to prosper as long as they do not attack anything in Russia.  The Russian government also contracts with these criminal groups when they need some state sponsored hacking done, a la Grizzly Steppe.   In Russia, these guys are considered to be just very successful business men. They have ...

Continue Reading →
21
APR
1

Computers and Internet, cybersecurity, Identity Theft, law and policy, News and politics

LastPass Quickly Fixes Reported Flaws

I use LastPass to manage all my passwords, and recommend LastPass to my clients and followers.  Often, when I am talking about storing passwords in the cloud, as LastPass does, I get concerned questions about the safety of storing your digital “keys” online.  What happens if LastPass is breached?

Well, the bad news is that they were breached around June 15, 2015.  I remember getting the email alert from them at the ...

Continue Reading →
19
APR
0

authentication, Computers and Internet, cybersecurity, passwords, Security

New Exploit Uses Office Documents

A new exploit is using Microsoft Office documents to deliver malware.  This is different from the reanimated macro exploits.  If this exploit, the target will receive an Office document, such as a Word file, as an email attachment.  Opening the attachment causes a malicious HTML application to be downloaded from the attackers C2 server.  This is executed as an .hta file, disguised as an RTF file.  The result is the ...

Continue Reading →
14
APR
0

Computers and Internet, cybersecurity, malware, Phishing, Security, Software vulnerability

Page 178 of 278 «...150160170176177178179180...»