UN experts demand US inquiry into Jeff Bezos Saudi hacking claims - The Guardian
‘Grave concern’ expressed at evidence of possible ‘effort to silence Washington Post’
hacking
Apple dropped plan for encrypting backups after FBI complained - Reuters
More than two years ago, Apple told the FBI that it planned to offer users end-to-end encryption when storing their phone data on iCloud
Under that plan, primarily designed to thwart hackers, Apple would no longer have a key to unlock the encrypted data, meaning it would not be able to turn material over to authorities in a readable form even under court order.
In private talks with Apple soon after, representatives of the FBI’s cyber crime agents and its operational technology division objected to the plan, arguing it would deny them the most effective means for gaining evidence against iPhone-using suspects, the government sources said.
When Apple spoke privately to the FBI about its work on phone security the following year, the end-to-end encryption plan had been dropped
Hackers steal data for 15 million patients, then sell it back to lab that lost it - Ars Technica
Canada’s biggest provider of specialty laboratory testing services said it paid hackers an undisclosed amount for the return of personal data they stole belonging to as many as 15 million customers.
BMW and Hyundai hacked by Vietnamese hackers, report claims - ZDNet
https://www.zdnet.com/article/bmw-and-hyundai-hacked-by-vietnamese-hackers-report-claims/
Many experts have speculated that the Vietnamese government has taken a page out of China’s book and is using hacking groups to carry out economic espionage on foreign companies, stealing intellectual property, and then using it for its state-funded corporations.
China used this strategy to prop its airplane manufacturing sector, and now experts believe Vietnam is doing the same for its fledgling automotive startup VinFast, which started rolling out its first cars out factory lines this year.
A Twitter cyberattack on the Epilepsy Foundation posted strobing images that could trigger seizures - CNN
LifeLabs pays hackers to recover data of 15 million customers - ZDNet
https://www.zdnet.com/article/lifelabs-pays-hackers-to-recover-data-of-15-million-customers/
Data breach took place in early November, and hackers also gained access to 85,000 laboratory test results.
We Tested Ring’s Security. It’s Awful - VICE
https://www.vice.com/en_us/article/epg4xm/amazon-ring-camera-security
Ring lacks basic security features, making it easy for hackers to turn the company’s cameras against its customers.
Vulnerability in fully patched Android phones under active attack by bank thieves - Ars Technica
The vulnerability allows malicious apps to masquerade as legitimate apps that targets have already installed and come to trust, researchers from security firm Promon reported in a post. Running under the guise of trusted apps already installed, the malicious apps can then request permissions to carry out sensitive tasks, such as recording audio or video, taking photos, reading text messages or phishing login credentials. Targets who click yes to the request are then compromised
Now even the FBI is warning about your smart TV’s security - TechCrunch
https://techcrunch.com/2019/12/01/fbi-smart-tv-security/
Beyond the risk that your TV manufacturer and app developers may be listening and watching you, that television can also be a gateway for hackers to come into your home. A bad cyber actor may not be able to access your locked-down computer directly, but it is possible that your unsecured TV can give him or her an easy way in the backdoor through your router
arguably one of the bigger issues that should cause as much if not greater concerns are how much tracking data is collected on smart TV owners.
collect tons of information about what users are watching in order to help advertisers better target ads against their viewers
The FBI recommends placing black tape over an unused smart TV camera, keeping your smart TV up-to-date with the latest patches and fixes
As convenient as it might be, the most secure smart TV might be one that isn’t connected to the internet at all.
146 New Vulnerabilities All Come Preinstalled on Android Phones - WIRED
https://www.wired.com/story/146-bugs-preinstalled-android-phones/
When you buy an Android smartphone, it’s rarely pure Android. Manufacturers squeeze in their own apps or give it a fresh coat of interface. Carriers do it too. The resulting stew of preinstalled software and vanilla Android sometimes turns out to be rancid, putting flaws and vulnerabilities on the phone before you even take it out of the box. For proof of how bad it is, look no further than the 146 vulnerabilities—across 29 Android smartphone makers—that have just been simultaneously revealed.