CyberSecurity Dive
Legislators slammed Andrew Witty over the company’s lack of cybersecurity practices and the impact of the breach, which may have compromised the data of a third of Americans.
SecurityWeek
The Change Healthcare cyberattack started when hackers entered a server that lacked a basic form of security: multi-factor authentication.
DarkReading
The breach used stolen Citrix credentials for an account with no MFA. Attackers went undetected for days, and Change's backup strategy failed.
The Record
CEO Andrew Witty blamed Change Healthcare's legacy technologies and lack of multifactor authentication for the cyberattack, which disrupted the medical industry nationwide.
SC Magazine
Andrew Witty stuck with the familiar corporate line of providing consumers with two years of credit monitoring.
CyberSecurity Dive
Critics say negligence, misguided investments and hubris have left the enterprise giant on its back foot.
The Cyber Express
The Federal Communications Commission has fined the largest phone carriers in the country - AT&T, Sprint, T-Mobile and Verizon -
The Hacker News
The U.K. is the first country to ban default passwords on smart devices starting April 29, 2024. Manufacturers must provide unique passwords and secur
The Record
Only five of 14 queried auto manufacturers require a warrant or court order before giving law enforcement connected car owners’ location data, an investigation found.
Krebs on Security
The U.S. Federal Communications Commission (FCC) today levied fines totaling nearly $200 million against the four major carriers -- including AT&T, Sprint, T-Mobile and Verizon -- for illegally sharing access to customers' location information without consent.
The Record
T-Mobile, Verizon, AT&T and Sprint were caught peddling customers’ location data to so-called aggregators who then resold the information to third-party data brokers, the FCC said.
CyberNews
TikTok CEO Shou Zi Chew expects to win a legal challenge to block divest-or-ban legislation signed into law by President Joe Biden and Congress.
CyberNews
The US Senate voted in favor of legislation that would ban TikTok in the United States.
The Record
The White House says President Joe Biden will sign the bill to reauthorize Section 702 of FISA.
The Record
The vote comes as the Biden administration and Section 702's congressional supporters engage in a new fight with privacy hawks over a provision that would alter the definition of “electronic communication service providers,” or ECSPs.
The Record
The House was expected to consider the bipartisan Fourth Amendment is Not for Sale Act, which has a companion bill in the Senate. Biden administration officials have denounced the legislation on national security grounds.
Ars Technica
Microsoft continues to get a free pass after series of cybersecurity failures.
The Record
“Republicans need to work with us in a bipartisan way to ensure this program with important implications for our national security does not lapse,” says Senate Majority Leader Chuck Schumer.
SecurityWeek
The House voted to reauthorize and reform a key U.S. government surveillance tool following debate over whether the FBI should be restricted from using the program to search for Americans’ data.
SecurityWeek
House Republicans will try again to advance FISA Section 702 that would reauthorize a crucial national security surveillance program.
SecurityWeek
Officials say Section 702 of the Foreign Intelligence Surveillance Act is crucial in disrupting terror attacks, cyber intrusions and espionage.
The Record
As U.S. hospitals struggle to pay their employees amid a cyberattack that knocked out a major payment vendor, a powerful Democratic senator is seizing the moment to push for better security in the sorely vulnerable healthcare sector.
SecurityWeek
Section 702 permits the U.S. government to collect without a warrant the communications of non-Americans located outside the country.
The Cyber Express
The Federal Communications Commission (FCC) has begun addressing the long-standing vulnerabilities in American telephone networks. These SS7 vulnerabilities, particularly associated
Cyber Security News
The FCC (Federal Communications Commission) seeks public input regarding measures by communications providers to address vulnerabilities in SS7 and Diameter protocols that enable tracking consumers' mobile device locations without consent.
The Record
In a move praised by privacy and security experts, the agency says it is looking hard at the safety of protocols known as SS7 and Diameter.
The Record
One of the goals will be to ensure that passenger data is “not improperly monetized or shared with third parties,” the Department of Transportation said.
Cyber Security News
Hackers target and backdoor the digital locks to gain unauthorized access to sensitive information and resources.
SecurityWeek
CISA hacked via Ivanti vulnerabilities, Chinese electronic lock backdoors, 12 million secrets exposed on GitHub.
CyberNews
The US Senate will pause its vote on a fast-track bill that would force Chinese-owned TikTok's parent company, ByteDance, to divest or face a ban in the US.
The Record
With the surging growth of intelligence available exclusively from publicly or commercially available information, intelligence agencies have been grappling with how to get a better handle on collecting and processing the data.
The Hacker News
President Biden signs Executive Order to prevent mass data transfers to 'countries of concern'. A bold move to protect Americans' genomic, biometric,
SC Magazine
The move was promised last year after a Chinese hacking group stole U.S. government emails. It “will take time” to make the logs freely available to other organizations.
Bleeping Computer
Microsoft has expanded free logging capabilities for all Purview Audit standard customers, including U.S. federal agencies, six months after disclosing that Chinese hackers stole U.S. government emails undetected in an Exchange Online breach between May and June 2023.
Bleeping Computer
Microsoft has expanded free Purview Audit logging capabilities for all U.S. federal agencies six months after disclosing that Chinese hackers stole U.S. government emails undetected in an Exchange Online breach between May and June 2023.
PCMag
Senator Ron Wyden wants US regulators to force the data broker, Near Intelligence, to delete all the information it collected on Americans.
The Record
The Veritas Society obtained visitor data for 600 clinics nationwide from the data broker Near Intelligence and used it for a targeted advertising campaign, Sen. Ron Wyden (D-OR) said.
Security Affairs
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs are free for you.
HACKRead
The US National Security Agency (NSA) has confirmed purchasing American users' internet browsing records without warrants.
Infosecurity News
The call follows an FTC order saying data brokers must secure consent before selling user data
Security Affairs
The U.S. National Security Agency (NSA) admitted to buying internet browsing records from data brokers to monitor Americans' activity online without a court order.
Computerworld
This time, hackers attacked corporate execs, not customers. That might finally push the US government to focus on long-ignored security concerns.
The Hacker News
NSA admits purchasing Americans' internet data from shadowy brokers, bypassing court orders.
PCMag
A declassified letter confirms that the NSA buys commercially available data on electronic devices used in the US. But the government agency is defending the practice.
The Record
Sen. Ron Wyden (D-Ore.) on Thursday asserted that National Security Agency’s (NSA) purchase of Americans’ internet records from data brokers is illegal based on a recent Federal Trade Commission ruling,
Infosecurity News
US senators have accused the SEC of failing to properly secure its social media accounts after hackers comprised its X account and posted a fake Bitcoin announcement
DataBreaches
On December 28, DataBreaches published snippets from a chat with a threat actor (TA) who claimed to have involvement with both the Fred Hutch cyberattack and...
DarkReading
Senators from both parties call breach of SEC X account, lack of MFA "inexcusable" and demand investigation into the regulator's cybersecurity lapse.
CyberNews
Outlogic, formerly known as X-Mode Social, just became the first US-based data broker banned from selling precise location data of American citizens by the FTC.
The Hacker News
FTC bans Outlogic from selling sensitive location data! A landmark move for digital privacy.
The Record
Data broker Outlogic, previously known as X-Mode Social, will no longer be able to share sensitive and precise location data, will have to destroy data already gathered, and will have to establish programs to prevent further abuses.
The Record
Air Force Lt. Gen. Timothy Haugh was unanimously confirmed to take the "dual hat" leadership over the military's top cyber force and spy agency.
PCMag
Apple quietly updates its legal guidelines to say US government agencies need a court order before they request someone's push notification data.
CyberNews
A plan to vote on two House bills that would reauthorize a powerful spying program was scrapped after Republicans started arguing among themselves.
The Record
Sen. Ron Wyden and two House members led an investigation into how major U.S. pharmacy chains handle requests from law enforcement agencies.
SecurityWeek
FBI Director Christopher Wray makes fresh pitch for spy program renewal and says it’d be ‘devastating’ if it lapsed
The Hacker News
Governments are demanding mobile push notification records from Apple and Google users to track individuals of interest.
Infosecurity News
Secret government requests for Android and iOS push notification data should be made public, argues Ron Wyden
Bleeping Computer
A U.S. senator revealed today that government agencies worldwide demand mobile push notification records from Apple and Google users to spy on their customers.
PCMag
Both the US and foreign governments have allegedly asked for push notification data from Apple and Google, according to Senator Ron Wyden.
The Record
Sen. Ron Wyden (D-Ore.) warned in a letter to the Department of Justice on Wednesday that governments are spying on Apple and Google smartphone users through mobile push notifications.
The Record
The Republican senator is allowing hundreds of routine military nominations to proceed. President Biden's picks for combatant commands — including Air Force Lt. Gen. Timothy Haugh — will remain in limbo.
DarkReading
The agency, known as JAXA, has shut down parts of its network as it conducts an investigation to discover the scope and impact of the breach.
PCMag
Senator Ron Wyden is vowing to block the nomination of a new NSA leader until the intelligence agency comes clean on the matter.
The Record
Air Force Lt. Gen. Timothy Haugh was already subject to a long-running blockade of nominations in the Senate. Now Sen. Ron Wyden is holding it up as leverage to get more information about the NSA's potential connections with the data broker industry.
PCMag
Senator Ron Wyden says he has 'serious concerns about the legality' of a US surveillance program that's been used to search domestic phone records, often without a warrant.
SecurityWeek
A Key GOP lawmaker has called for the renewal of surveillance tool as he proposes changes to protect privacy
The Record
LexisNexis Risk Solutions provided CBP with capabilities such as collecting geolocation data, monitoring social media accounts and tracking cell phone call histories for non-U.S. and U.S. residents alike, according to documents obtained by an advocacy group.
CyberNews
More than 30 civil liberties and privacy groups wrote to US Senate majority leader Chuck Schumer, urging him to rethink reauthorizing a contentious surveillance program.
The Record
Vast amounts of highly sensitive data on American military service members are up for sale by data brokers — with possible national security implications.
CyberScoop
Policymakers and researchers have sharply criticized Microsoft’s security practices after an illicitly obtained key enabled a wide-ranging espionage operation.
The Record
The new policies require staff at the Commerce Department's International Trade Administration to consider human rights concerns when providing export assistance to foreign governments.
The Record
Section 702 of the Foreign Intelligence Surveillance Act (FISA) will sunset on January 1 without congressional action. Several committee chairman are pushing ahead with bills to renew the controversial law.
CyberSecurity Dive
The Cybersecurity and Infrastructure Security Agency is in the final stages of work on the reporting requirements included in a March 2022 law.
SecurityWeek
Microsoft reveals how a crash dump from 2021 inadvertently exposed a key that Chinese cyberspies later leveraged to hack US government emails.
SecurityWeek
plants its feet firmly in the enterprise browser space, sending major ripples through Silicon Valley's venture-backed startup ecosystem.
Ars Technica
US and its allies struggle to copy Kyiv’s collaborative efforts.
Computerworld
Microsoft could soon be in the hot seat in the wake of a Chinese hack aimed at the US government.
SecurityWeek
US government's CSRB will conduct a review of cloud security to provide recommendations on improving identity management and authentication.
CyberScoop
The decision comes in the wake of a high-profile Chinese breach of U.S. officials' Microsoft email accounts.
The Record
After the CEO of cybersecurity firm Tenable bashed Microsoft for its handling of a vulnerability in Azure AD, the company has patched the vulnerability.
CyberSecurity Dive
Microsoft has been dragging its feet to fully resolve the issue more than four months after it was discovered, CEO Amit Yoran said.
Ars Technica
Azure looks like a house of cards collapsing due to exploits and vulnerabilities.
CyberScoop
Cybersecurity veteran Amit Yoran says Microsoft has a culture of toxic obfuscation when it comes to addressing security threats.
Security Affairs
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Now Abyss Locker also targets VMware ESXi servers Russian APT BlueBravo targets diplomatic entities with GraphicalProton […]
Infosecurity News
In an open letter, Senator Ron Wyden urged federal agencies to investigate Microsoft following a Chinese campaign that compromised US government emails
Ars Technica
Rebuke follows recent breach that exposed email accounts of US federal officials.
SecurityWeek
Redmond is accused of “negligent cybersecurity practices” that enabled a successful Chinese hack of the United States government.
The Record
A leading U.S. senator asked the Justice Department and several other agencies to investigate a recent hack of Microsoft-provided email accounts used by top government officials.
CyberSecurity Dive
Federal officials and rivals blasted the company for charging customers for additional security features.
The Record
The Judiciary Committee approved the so-called Fourth Amendment is Not for Sale Act, which has unusual momentum in the politically divided House.
The Record
Legislators wrote to the Department of Health and Human Services to demand that regulations for protect health information (PHI) treat it the same way the law covers a person's location data, texts and phone calls.
The Hacker News
Microsoft admits a validation issue in its code that enabled China-based hackers to forge authentication tokens, granting unauthorized access.
CyberScoop
Security deficiencies and business practices have researchers and officials furious at Microsoft for enabling an espionage operation.
SecurityWeek
Lawmakers urged federal agencies to investigate the wealth of information that H&R Block, TaxAct and TaxSlayer shared with the Meta.
CyberSecurity Dive
The Office of the Comptroller of the Currency 10 months earlier freed the bank from a separate consent order tied to a former AWS employee’s hack that exposed the data of 106 million customers.
The Record
The Biden administration’s nominee to lead U.S. Cyber Command and the NSA offered his first public insights on controversial surveillance programs, encryption and other hot button cybersecurity issues.
Computerworld
The US government, worried about the increasing role of rival nations in cyberattacks and cybercrime, looks poised to force tech companies to do more about security.
Infosecurity News
A cyber-attack on the US justice system has compromised a public document management system, lawmakers revealed this week
The Record
Both companies use unique tracking identifiers in their popular Android and iOS mobile operating systems for advertising purposes.
Loading more articles....