Bleeping Computer
The U.S. Department of Justice (DOJ) has announced a revision of its policy on how federal prosecutors should charge violations of the Computer Fraud and Abuse Act (CFAA), carving out "good-fath" security research from being prosecuted.
Bleeping Computer
Today, the US Supreme Court restricted the scope of the federal Computer Fraud and Abuse Act after overturning the conviction of a Georgia police officer who searched a police database for money.
DataBreaches
Eric Goldman writes: Last week, the Supreme Court decided Van Buren v. US. Many hoped the decision would clarify how owners can delimit third-party usage of...
DataBreaches
Aaron Mackey and Kurt Opsahl of EFF write: The Supreme Court’s Van Buren decision today overturned a dangerous precedent and clarified the notoriously...
ZDNet
Good-faith security researchers no longer have to worry about being prosecuted under the Computer Fraud and Abuse Act, the DOJ says.
Infosecurity News
"Good faith" hackers will no longer face prosecution under the CFAA
DataBreaches
Andrew Crocker of EFF responds to the announcement this week by DOJ about its revised policy for enforcement of the Computer Fraud and Abuse Act: The Computer...
DataBreaches
The Department of Justice today announced the revision of its policy regarding charging violations of the Computer Fraud and Abuse Act (CFAA). The policy for...
DataBreaches
Liisa Thomas and Snehal Desai of Sheppard Mullin write: The Georgia Supreme Court recently concluded that Georgia’s equivalent of the CFAA should be viewed...
DataBreaches
Brian Krebs writes: The U.S. Department of Justice (DOJ) recently revised its policy on charging violations of the Computer Fraud and Abuse Act (CFAA), a...
CSO
Security researchers gained greater federal legal protections over the past two years, but US state laws and China’s recently adopted vulnerability disclosure law pose threats.
DataBreaches
Ronald Mann writes: The Supreme Court’s decision on Thursday in Van Buren v. United States provides the court’s first serious look at one of the most...
DataBreaches
In June 2021, DataBreaches reported that Vikas Singla had been indicted on charges relating to a 2018 cyberattack on Gwinnett Medical Center. At the time of...
DataBreaches
The following announcement is from the U.S. Department of State today: The U.S. Department of State’s Rewards for Justice (RFJ) program, which is...
The Record
The change is intended to protect "researchers who root out vulnerabilities for the common good," Deputy Attorney General Lisa Monaco said.
DataBreaches
Kieran McCarthy writes: Those interested in web scraping legal issues had high hopes that the Supreme Court’s opinion in Van Buren v. United States last...
DataBreaches
In the wake of the arrest of “Pompompurin,” BreachForums’ self-proclaimed owner and moderator, DataBreaches has been contacted by a number of...
CyberNews
Good-faith security researchers who probe or hack systems to point out vulnerabilities and help organizations patch them will no longer face charges.
DataBreaches
Mike Masnick writes: If you accidentally leave your Google Drive accessible to anyone with the URL, and someone goes there and deletes stuff, is that...
SecurityWeek
Chris Wysopal (AKA Weld Pond) founder and CTO of Veracode and member of the hacker collective L0pht Heavy Industries.
The Record
A federal judge has denied a motion from spyware maker NSO Group to dismiss an Apple lawsuit alleging the company’s powerful Pegasus tool has violated computer fraud laws and unfairly profited off of Apple and its customers, according to a court ruling filed Tuesday.
ZDNet
LinkedIn has lost its latest attempt to block companies from scraping information from its public pages, including member pages.
ZDNet
LinkedIn has lost its latest attempt to block companies from scraping information from its public pages, including member pages.
Security Affairs
The U.S. State Department increased rewards for information on any North Korea-linked threat actors to $10 million. In April 2020, the U.S. Departments of State, the Treasury, and Homeland Security, and the Federal Bureau of Investigation released a joint advisory that is warning organizations worldwide about the ‘significant cyber threat’ posed by the North Korean nation-state actors […]
CyberNews
If you know anything about the malicious hackers Target, Reshaev, Professor, Tramp, and Dandis, come forward.
SecurityWeek
The United States is offering $10 million in rewards for help in prosecuting six Russian military intelligence officers blamed for the devastating NotPetya cyberattacks in 2017
SecurityWeek
Should a third party be allowed to visit a website and use automated tools to gather and store information at scale from that website? What if that information includes personal data? What does the law say? Can web scraping be prevented?
SecurityWeek
Salvadoran digital newspaper El Faro's employees filed a lawsuit in a US federal court against NSO Group, alleging the Israeli firm's controversial Pegasus software was used to spy on them.
Bleeping Computer
Conor LaHiff, a former IT manager for a New Jersey public high school, has admitted to committing a cyberattack against his former employer following the termination of his employment in June 2023.
SecurityWeek
Hacktivists should be treated as malicious hackers because the distance between hacking/activism, malevolence, and damage is too small and too vague.
SecurityWeek
SecurityWeek Hacker Conversations interview with HD Moore, best known as the founder and original developer of Metasploit.
SecurityWeek
Google has won its lawsuit against operators of the Glupteba botnet, which the internet giant disrupted last year.
SecurityWeek
The US is offering a reward of up to $10 million for information on BlackCat ransomware affiliates that targeted US critical infrastructure.
SecurityWeek
Hacker Conversations Interview: SecurityWeek talks to hacker Rob Dyke to discuss corporate legal bullying of good faith researchers
Computerworld
This week's lawsuit against the NSO Group could help end government spying on journalists, dissidents, and political activists. But digital rights activists fear it might be used to shut down researchers who investigate tech companies for improprieties.
Security Affairs
The U.S. government offers up to $10 million for info that allows to identify or locate six Russian GRU hackers who are members of the Sandworm APT group. The US Department of State is offering up to $10 million for info that allows to identify or locate six Russian GRU hackers who are members of […]
ZDNet
Be careful what you are downloading - these files deliver the Vidar infostealer.
Bleeping Computer
The Ransomware Task Force, a public-party coalition of more than 50 experts, has shared a framework of actions to disrupt the ransomware business model.
The Record
The State Department's announcement is based on charges filed in 2020 by the Justice Department against the six GRU members.
DataBreaches
In 2014, Nuance Communications discovered that anyone could access protected health information on one of its platforms. After the situation persisted for...
SecurityWeek
OpenSSF and OpenJS incidents similar to XZ backdoor, Moldovan botnet operator charged, US automotive company targeted by FIN7.
Naked Security
Wanted – Reward Offered – Five unknown individuals (plus a man with a weird hat)
Naked Security
Technically, it’s “up to $10 million”, but it’s potentially a LOT of money, nevertheless…
SecurityWeek
SecurityWeek interviews Casey Ellis, founder, chairman and CTO at Bugcrowd, best known for operating bug bounty programs for organizations.
SecurityWeek
CISO churn is a threat, as security initiatives can take longer than the residency of a CISO, and constant churn can leave gaps in security.
The Cyber Wire
The Five Eyes jointly expose (and condemn) a long-running FSB cyberespionage and influence campaign.
Bleeping Computer
A YouTube influencer with hundreds of thousands of subscribers is encouraging everyone to conduct cyber warfare against Russia. How risky is it and can you get in trouble?
Bleeping Computer
A YouTube influencer with hundreds of thousands of subscribers is encouraging everyone to conduct cyber warfare against Russia. How risky is it and can you get in trouble?
The Cyber Wire
The Five Eyes jointly expose (and condemn) a long-running FSB cyberespionage and influence campaign.
SecurityWeek
Ron Reiter was a childhood hacker in Israel and recruited into the IDF’s Unit 8200. Now he is CTO and co-founder of cybersecurity firm Sentra.