Tagg: hacking 255
The app that the Iowa Democratic Party commissioned to tabulate and report results from the caucuses on Monday was not properly tested - The New York Times
https://www.nytimes.com/2020/02/03/us/politics/iowa-caucus-app.html
“The consensus of all experts who have been thinking about this is unequivocal,” Mr. Blaze added. “Internet and mobile voting should not be used at this time in civil elections.” Any technology, he said, should be tested and retested by the broader cybersecurity community before being publicly introduced, to test for anything ranging from a small bug to a major vulnerability. “I think the most important rule of thumb in introducing technology into voting is be extremely conservative,” he said
The cyber attack the UN tried to keep under wraps
https://www.thenewhumanitarian.org/investigation/2020/01/29/united-nations-cyber-attack
The UN did not publicly disclose a major hacking attack into its IT systems in Europe – a decision that potentially put staff, other organisations, and individuals at risk
UN experts demand US inquiry into Jeff Bezos Saudi hacking claims - The Guardian
‘Grave concern’ expressed at evidence of possible ‘effort to silence Washington Post’
Apple dropped plan for encrypting backups after FBI complained - Reuters
More than two years ago, Apple told the FBI that it planned to offer users end-to-end encryption when storing their phone data on iCloud
Under that plan, primarily designed to thwart hackers, Apple would no longer have a key to unlock the encrypted data, meaning it would not be able to turn material over to authorities in a readable form even under court order.
In private talks with Apple soon after, representatives of the FBI’s cyber crime agents and its operational technology division objected to the plan, arguing it would deny them the most effective means for gaining evidence against iPhone-using suspects, the government sources said.
When Apple spoke privately to the FBI about its work on phone security the following year, the end-to-end encryption plan had been dropped
Hackers steal data for 15 million patients, then sell it back to lab that lost it - Ars Technica
Canada’s biggest provider of specialty laboratory testing services said it paid hackers an undisclosed amount for the return of personal data they stole belonging to as many as 15 million customers.
BMW and Hyundai hacked by Vietnamese hackers, report claims - ZDNet
https://www.zdnet.com/article/bmw-and-hyundai-hacked-by-vietnamese-hackers-report-claims/
Many experts have speculated that the Vietnamese government has taken a page out of China’s book and is using hacking groups to carry out economic espionage on foreign companies, stealing intellectual property, and then using it for its state-funded corporations.
China used this strategy to prop its airplane manufacturing sector, and now experts believe Vietnam is doing the same for its fledgling automotive startup VinFast, which started rolling out its first cars out factory lines this year.
A Twitter cyberattack on the Epilepsy Foundation posted strobing images that could trigger seizures - CNN
LifeLabs pays hackers to recover data of 15 million customers - ZDNet
https://www.zdnet.com/article/lifelabs-pays-hackers-to-recover-data-of-15-million-customers/
Data breach took place in early November, and hackers also gained access to 85,000 laboratory test results.
We Tested Ring’s Security. It’s Awful - VICE
https://www.vice.com/en_us/article/epg4xm/amazon-ring-camera-security
Ring lacks basic security features, making it easy for hackers to turn the company’s cameras against its customers.
Vulnerability in fully patched Android phones under active attack by bank thieves - Ars Technica
The vulnerability allows malicious apps to masquerade as legitimate apps that targets have already installed and come to trust, researchers from security firm Promon reported in a post. Running under the guise of trusted apps already installed, the malicious apps can then request permissions to carry out sensitive tasks, such as recording audio or video, taking photos, reading text messages or phishing login credentials. Targets who click yes to the request are then compromised
Now even the FBI is warning about your smart TV’s security - TechCrunch
https://techcrunch.com/2019/12/01/fbi-smart-tv-security/
Beyond the risk that your TV manufacturer and app developers may be listening and watching you, that television can also be a gateway for hackers to come into your home. A bad cyber actor may not be able to access your locked-down computer directly, but it is possible that your unsecured TV can give him or her an easy way in the backdoor through your router
arguably one of the bigger issues that should cause as much if not greater concerns are how much tracking data is collected on smart TV owners.
collect tons of information about what users are watching in order to help advertisers better target ads against their viewers
The FBI recommends placing black tape over an unused smart TV camera, keeping your smart TV up-to-date with the latest patches and fixes
As convenient as it might be, the most secure smart TV might be one that isn’t connected to the internet at all.
146 New Vulnerabilities All Come Preinstalled on Android Phones - WIRED
https://www.wired.com/story/146-bugs-preinstalled-android-phones/
When you buy an Android smartphone, it’s rarely pure Android. Manufacturers squeeze in their own apps or give it a fresh coat of interface. Carriers do it too. The resulting stew of preinstalled software and vanilla Android sometimes turns out to be rancid, putting flaws and vulnerabilities on the phone before you even take it out of the box. For proof of how bad it is, look no further than the 146 vulnerabilities—across 29 Android smartphone makers—that have just been simultaneously revealed.
Indian nuclear power plant’s network was hacked, officials confirm - Ars Technica
After initial denial, company says report of “malware in system” is correct
China Sharpens Hacking to Hound Its Minorities, Far and Wide - The New York Times
https://www.nytimes.com/2019/10/22/technology/china-hackers-ethnic-minorities.html
showing a new determination by Beijing to push its surveillance state beyond its borders.
Japanese hotel chain sorry that hackers may have watched guests through bedside robots • The Register
Japanese hotel chain HIS Group has apologised for ignoring warnings that its in-room robots were hackable to allow pervs to remotely view video footage from the devices.
Australia concluded China was behind hack on parliament, political parties – Reuters
The report, which also included input from the Department of Foreign Affairs, recommended keeping the findings secret in order to avoid disrupting trade relations with Beijing
Don’t Speak — Pixel Envy
https://pxlnv.com/blog/dont-speak/
The more I’ve thought about Apple’s statement regarding the iOS exploit chains discovered last week, the more bizarre it seems
Sources say China used iPhone hacks to target Uyghur Muslims - TechCrunch
Mysterious iOS Attack Changes Everything We Know About iPhone Hacking - WIRED
https://www.wired.com/story/ios-attack-watering-hole-project-zero/
the biggest known iPhone hacking incident of all time.
The hackers still made some strangely amateurish mistakes