The National Institute of Standards and Technology (NIST) on Monday released a draft framework for a voluntary, risk-based approach to cyber security for the election infrastructure community. The new draft guidance, Cybersecurity Framework Election Infrastructure…
Already a subscriber or….
By Raphael Satter, Christopher Bing WASHINGTON (Reuters) – A China-linked cyber-espionage group has been remotely plundering email inboxes using freshly discovered flaws in Microsoft mail server software, the company and outside researchers said on Tuesday – an example of how commonly used programs can be exploited to cast a wide net online. In a blog…
“We must never let any internet giant control a super database that has more detailed personal information than the state, let alone giving it the right to use the data at will,” the paper said in the commentary. While it’s not clear how Didi illegally collected personal data, companies should gather the least amount of…
Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Governance & Risk Management But Nation Won’t Pursue Legal Action in the Case Akshaya Asokan (asokan_akshaya) • April 14, 2021 The Russian state-sponsored group Fancy Bear was responsible for breaches from December 2017 to May 2018 at the Swedish Sports Confederation that resulted…
Necro Python Malware Upgrades With New Exploits and Crypto Mining Capabilities | IT Security News 3. June 2021 This article has been indexed from The Hacker News New upgrades have been made to a Python-based “self-replicating, polymorphic bot” called Necro in what’s seen as an attempt to improve its chances of infecting vulnerable systems and…
Check Point Research (CPR) found security flaws in Amazon Kindle, the world’s most popular e-reader. By tricking victims into opening a malicious e-book, a threat actor could have leveraged the flaws to target specific demographics and take full control of a Kindle device, opening a path to stealing information stored. Victims would need to simply…
Malaysia Airlines suffers data security ‘incident’ spanning nine years | IT Security News Latest topics for ZDNet in Security 2. March 2021 Security breach compromises personal data of the airline’s frequent flyer programme Enrich, including members’ contact details and date of birth, and reportedly involved a third-party IT service provider in an “incident” stretching June…
