September 15

News/Trends

• Protect your Digital Presence with Secure Accounts
• Leak of >1,700 valid passwords could make the IoT mess much worse
• Secret chips in replacement parts can completely hijack your phone’s security
• We Need to Know More About Government Searches of Traveler’s Electronic Devices

• Hackers attacking US and European energy firms could sabotage power grids

• NY: Sheriffs warn of hackers after brute force attack

• Phishers Spread Malicious Links Via Hacked LinkedIn Accounts
• ExpensiveWall Android Malware Slips Past Google Play Filters

Law/Policy

• Dems propose data security bill after Equifax hack

• FTC launches investigation into Equifax breach

• ‘We Only Spy on Foreigners’: The Myth of a Universal Right to Privacy and the Practice of Foreign Mass Surveillance
• Internet Surveillance, Regulation, and Chilling Effects Online: A Comparative Case Study

Technical

• Enemy At the Gateways: A Game Theoretic Approach to Proxy Distribution

• HitFraud: A Broad Learning Approach for Collective Fraud Detection in Heterogeneous Information Networks

• Models and Framework for Adversarial Attacks on Complex Adaptive Systems

• On labeling Android malware signatures using minhashing and further classification with Structural Equation Models

Reports, Blogs, Etc.

• Hacking Robots

• Hacking Voice Assistant Systems with Inaudible Voice Commands

• The Equifax Breach: What You Should Know

• The Hunt for IoT: The Rise of Thingbots

• Experts Weigh Pros, Cons of FaceID Authentication in iPhone X

• Your Social Security Number Isn’t a Secret

• The Terrifying Power of Internet Censors

• Azure Confidential Computing will keep data secret, even from Microsoft
• iPhone X & Face ID: Everything you need to know

Advertisements

September 8

News/Trends

• Equifax Says Cyberattack May Have Affected 143 Million Customers

• Threat Intelligence Collaboration on the Rise
• Leak of >1,700 valid passwords could make the IoT mess much worse

• Is Public Sector Cybersecurity Adequate?

• SANS: Ransomware is Biggest Threat to Data Security
• MobileIron adds Apple security along with support for iOS 11
• Ultrasonic “DolphinAttack” Could Hack Voice Assistants
• Mexican VAT Refund Giant Exposes Half-Million Passports, Credit Cards Online

Law/Policy

• How Much Should We Spend to Protect Privacy?: Data Breaches and the Need for Information We Do Not Have

• Google: No evidence of Russian propaganda ads on our platforms

• House panel advances measure to guard U.S. ports from cyberattacks

• Industrial Cyber Vulnerabilities: Lessons from Stuxnet and the Internet of Things

Technical

• A Non-commutative Cryptosystem Based on Quaternion Algebras

• Secure Full-Duplex Device-to-Device Communication

• Device-independent Randomness Amplification and Privatization

• Use Privacy in Data-Driven Systems: Theory and Experiments with Machine Learnt Programs

Reports, Blogs, Etc.

• How to Protect Your Information Online

• Hackers Can Use Ultrasounds to Take Control of Alexa, Siri, Cortana, Others

• Security Vulnerabilities in AT&T Routers

• Twitter Bots Use Likes, RTs for Intimidation

• Another victim of TheDarkOverlord comes forward

• Workplace IoT Puts Companies on Notice for Smarter Security

• New Techniques in Fake Reviews

• Attacking Data Integrity & Hacking Radiation Monitoring Devices

September 1

News/Trends

• Email to Essential smartphone users causes alarm
• Android 8.0 in-depth: Oreo’s not-so-obvious security enhancements

• Online file conversion services – why trust them?

• Leak of >1,700 valid passwords could make the IoT mess much worse
• A Year Later: FDA approves Software Fix for Security Flaws in Pacemakers
• Recent Cases on E-Mail “Spoofing” Coverage Highlight the Impact of Specific Crime Policy Wordings
• Crypto-Ransomware Targets 20 Million Inboxes
• Ransomware Infections on Course to Top 2016 Figures

Law/Policy

• Senators press agency heads for Trump-mandated cyber reports

• Privacy, the Hacker Way
• Technological Savvy and the Attorney’s Ethical Duty of Competency
• Internet Surveillance, Regulation, and Chilling Effects Online: A Comparative Case Study

Technical

• Coppersmith’s lattices and “focus groups”: an attack on small-exponent RSA

• DolphinAtack: Inaudible Voice Commands

• Implicit Smartphone User Authentication with Sensors and Contextual Machine Learning

• Be Selfish and Avoid Dilemmas: Fork After Withholding (FAW) Attacks on Bitcoin

Reports, Blogs, Etc.

• Journalists Generally Do Not Use Secure Communication

• A Framework for Cyber Security Insurance

• Beware of Hurricane Harvey Relief Scams

•  Using Market Pressures to Improve Cybersecurity

• New Facebook, Instagram Bugs Demonstrate Social Media Risk

• Hacking a Phone Through a Replacement Touchscreen

• Your Personal Bodycam

• Phishing for Your Information: How Phishers Bait Their Hooks

August 25

News/Trends

• The paranoid Windows traveler’s data-protection checklist
• Secret chips in replacement parts can completely hijack your phone’s security

• Identity theft at ‘epidemic’ levels, warn experts

• Facebook Typosquatting Campaign Harvests User Info
• Touchscreens ‘at risk from chip in the middle attack’, warn researchers
• Android Ransomware Jumps Over 100% in 2017

• Could hackers be behind the U.S. Navy collisions?

• IT staffers may have compromised sensitive data to foreign intelligence

Law/Policy

• Tallinn, Hacking, and Customary International Law
• Eject the Floppy Disk: How to Modernize the Computer Fraud and Abuse Act to Meet Cybersecurity Needs
• Exploring the ‘Shared Responsibility’ of Cyber Peace: Should Cybersecurity Be a Human Right?

• Verizon reports spike in government requests for cell ‘tower dumps’

Technical

• Threshold-based Obfuscated Keys with Quantifiable Security against Invasive Readout

• Modern Intrusion Detection Systems

• Community Targeted Spam: A Middle Ground Between General Spam and Spear Phishing

• Cyber-Physical War Gaming

Reports, Blogs, Etc.

• Why It’s Still A Bad Idea to Post or Trash Your Airline Boarding Pass

• Dumping Data from Deep-Insert Skimmers

• Your Personal Bodycam

• Mac’s Biggest Threats Lurk in the Apple App Store

• How Quantum Computing Will Change Browser Encryption

• Identity Thieves Hijack Cellphone Accounts to Go After Virtual Currency

• Turning To VPNs For Online Privacy? You Might Be Putting Your Data At Risk

• Insecure IoT Devices Pose Physical Threat to General Public

August 18

News/Trends

• Turning To VPNs For Online Privacy? You Might Be Putting Your Data At Risk

• Woman targeted with 120 images on public transport via AirDrop

• Got an iPhone? Here’s what we think about the security of iOS11

• Web Application Attacks Much More Common Than Ransomware

• Hackers Briefly Take Over HBO Twitter Accounts

• Ex-Secret Service Man Admits Laundering More Stolen Bitcoin
• Secret chips in replacement parts can completely hijack your phone’s security
• Find My Device: How Android’s security service can manage your missing phone

Law/Policy

• Dems want independent probe into FCC cyberattack

• Under the Lens: Electronic Workplace Surveillance
• FTC Regulation of Cybersecurity and Surveillance
• Democracy in the Age of Information Abundance: The Impact of New Technologies on Our Democratic Political System

Technical

• Spying on the Smart Home: Privacy Attacks and Defenses on Encrypted IoT Traffic

• AntibIoTic: Protecting IoT Devices Against DDoS Attacks

• Privacy-Enabled Biometric Search

• When the cookie meets the blockchain: Privacy risks of web payments via cryptocurrencies

Reports, Blogs, Etc.

• Unfixable Automobile Computer Security Vulnerability

• Do the Police Need a Search Warrant to Access Cell Phone Location Data?

• Confusing Self-Driving Cars by Altering Road Signs

• ‘Pulse Wave’ DDoS Attacks Emerge As New Threat

• Forget Tough Passwords: New Guidelines Make It Simple

• Phone location privacy – for armed robber – headed to Supreme Court

• Drone firm says it’s stepping up security after US army ban

• Our Homes May Get Smarter, But Have We Thought It Through?

   

August 11

News/Trends

• Ships fooled in GPS spoofing attack suggest Russian cyberweapon

• New in Windows security: Automatically log off suspicious users

• Car lease companies’ poor cyber security exposed over 180,000 drivers

• The case against Windows Automatic Update

• Malware-Laden DNA Could Attack Lab Machines

• Protect your digital presence with secure accounts
• Cyber-Attacks Soar by a Quarter as Phishing Dominates

• State juror pool data breach exposed Social Security numbers

Law/Policy

• Interpretation Catalysts in Cyberspace
• ‘We Only Spy on Foreigners’: The Myth of a Universal Right to Privacy and the Practice of Foreign Mass Surveillance
• The Law of the Zebra
• The Corporate Governance of National Security

Technical

• The Game of Phishing

• Protecting Genomic Privacy by a Sequence-Similarity Based Obfuscation Method

• Privacy Preserving Face Retrieval in the Cloud for Mobile Users

• A Framework and Comparative Analysis of Control Plane Security of SDN and Conventional Networks

Reports, Blogs, Etc.

• Turning an Amazon Echo into an Eavesdropping Device

• More on the Vulnerabilities Equities Process

• Uber Drivers Hacking the System to Cause Surge Pricing

• Taking Down the Internet Has Never Been Easier

• Uptick in Malware Targets the Banking Community

• Behind China’s VPN Crackdown, A ‘Game Of Cat And Mouse’ Continues

• Breaches Are Coming: What Game of Thrones Teaches about Cybersecurity

• Beware of Security by Press Release

August 4

News/Trends

• To Protect Voting, Use Open-Source Software

• Stealthy Google Play apps recorded calls and stole e-mails and texts
• FCC Imposes $82M Fine for Spoofed Pernicious Robocalls

• Chrome’s built-in adblocker arrives for early adopters

• WannaCry Attackers Empty Bitcoin Ransom Wallets and Disappear
• Do developers care about security?

• What do the words ‘Tor’ and ‘Dark Web’ mean to you? [VIDEO]

• Amazon reaches out to users with bad security before the crooks do

Law/Policy

• Privacy, the Hacker Way

• Despite progress, OPM information systems still at risk, audit says

• The Supreme Court moves toward digital with online court filings

• Technological Savvy and the Attorney’s Ethical Duty of Competency

Technical

• Aligned and Non-Aligned Double JPEG Detection Using Convolutional Neural Networks

• Modeling the Propagation of Trojan Malware in Online Social Networks

• Using Hover to Compromise the Confidentiality of User Input on Android

• Trust Implications of DDoS Protection in Online ElectionsBetrayal, Distrust, and Rationality: Smart Counter-Collusion Contracts for Verifiable Cloud Computing

Reports, Blogs, Etc.

• Splitting the NSA and US Cyber Command

• Why Cybersecurity Needs a Human in the Loop

• Robot Safecracking

• Should You be Worried about Cloud Security?

• New Bill Seeks Basic IoT Security Standards

• Flash Player is Dead, Long Live Flash Player!

• Google wants to track shoppers IRL – privacy group says, ‘No way!’

• Three Steps to Strong Enterprise Security