April 20

News/Trends

• 9 Android settings that’ll strengthen your security
• Two vendors now sell iPhone cracking technology – and police are buying
• How to use a strong passcode to better secure your iPhone

• Researchers Discover Second rTorrent Vulnerability Campaign

• Chrome anti-phishing protection… from Microsoft!

• Google in hot water over privacy of Android apps for kids

• NSA reveals how it beats 0-days

• New iOS Vulnerability Lets Attackers Hack iPhone, iPad

Law/Policy

• Trump sends cyber warfare strategy to Congress

• Staff changes upend White House cyber team

• Republican lawmaker introduces new cyber deterrence bill

• House panel advances bills to guard energy grid from cyberattacks

Technical

• A Verifiable Fully Homomorphic Encryption Scheme for Cloud Computing Security

• A spark is enough in a straw world: a study of websites password management in the wild

• Homomorphisms and Minimality for Enrich-by-Need Security Analysis

• Identifying Compromised Accounts on Social Media Using Statistical Text Analysis

Reports, Blogs, Etc.

• Is Facebook’s Anti-Abuse System Broken?

• Lifting a Fingerprint from a Photo

• When Identity Thieves Hack Your Accountant

• Microsoft claims to make Chrome safer with new extension

• Europe’s New Online Privacy Rules Could Protect U.S. Users Too

• Securing Elections

• Intel, Microsoft to use GPU to scan memory for malware

• A Sobering Look at Fake Online Reviews

Advertisements

April 13

News/Trends

• Personal information of 1 million potential college applicants ‘exposed inadvertently’

• Nation-State Attacks Take 500% Longer to Find
• As Views Of Tech Turn Negative, Remorse Comes To Silicon Valley
• Google bans cryptomining Chrome extensions because they refuse to play by the rules

• Developers Failing to Use Secure Open Source Components

• Practical passwordless authentication comes a step closer with WebAuthn
• Two vendors now sell iPhone cracking technology – and police are buying
• Everything you need to know about Apple’s GDPR privacy upgrade

Law/Policy

• Defense contractors face more aggressive ransomware attacks

• Pompeo pressed on plans for cybersecurity at State

• Twitter backs digital ad regulation

• New push to break deadlock over encrypted phones

Technical

• Machine Learning DDoS Detection for Consumer Internet of Things Devices

• Detecting Malicious PowerShell Commands using Deep Neural Networks

• Detecting Malicious PowerShell Commands using Deep Neural Networks

• Towards Practical Privacy-Preserving Analytics for IoT and Cloud Based Healthcare Systems

Reports, Blogs, Etc.

• When Identity Thieves Hack Your Accountant

• COPPA Compliance

• Federal Agency Data Under Siege

• Cybersecurity Insurance

• The Digital Security Exchange Is Live

• New Email Campaign Employs Malicious URLs

• Don’t Give Away Historic Details About Yourself

• Failed by Facebook, We’ll Return to the Scene of the Crime. We Always Do.

April 6

News/Trends

• Cyberattack Shows Vulnerability of Gas Pipeline Network

• Facebook’s data debacle is a wake-up call for Android users

• Protect Yourself from Online Fraud This Tax Season

• Supply Chain Attacks Could Pose Biggest Threat to Healthcare

• WhatsApp phishing – how it works, and what to do [VIDEO]

• Is It Even Possible To Protect Your Privacy On Facebook?
• Google bans cryptomining Chrome extensions because they refuse to play by the rules

• Stripping the Attacker Naked

Law/Policy

• Dems sound alarm to FCC about ‘incredible’ eavesdropping threat

• Several White House domains lack anti-phishing tool: research

• US acknowledges potential unauthorized spying devices in DC

• Agencies have one-year deadline to identify cyber workforce shortages

Technical

• Fingerprint template protection using minutia-pair spectral representations

• Achieving Differential Privacy against Non-Intrusive Load Monitoring in Smart Grid: a Fog Computing approach

• A Large-scale Concurrent Data Anonymous Batch Verification Scheme for Mobile Healthcare Crowd Sensing

• On the Economic Significance of Ransomware Campaigns: A Bitcoin Transactions Perspective

Reports, Blogs, Etc.

• Secret Service Warns of Chip Card Scheme

• Dot-cm Typosquatting Sites Visited 12M Times So Far in 2018

• Subverting Backdoored Encryption

• Public Hearing on IoT Risks

• Unlocking iPhones with Dead People’s Fingerprints

• Echoes of Mirai: New IoT Botnet Targets Financial Firms
• Hospitals Exposed by Connected Devices

• Best Buy hit by [24]7.ai data breach, too

March 16

News/Trends

• DHS, FBI Warn on Russian State Actors Targeting Critical Infrastructure
• Massive March Patch Tuesday relaxes antivirus restrictions, but there are problems
• Turn Automatic Update off, temporarily, in anticipation of another round of pernicious patches
• WhatsApp Agrees to Stop Sharing User Data with Facebook
• Rush to the Cloud Risks Security Breaches
• The Containerization of Artificial Intelligence
• Article: Risk and Anxiety: A Theory of Data-Breach Harms
• Cryptojacking Threat Continues to Rise

Law/Policy

• Lawmakers press for $237 million to fully fund cybersecurity program

• Tech companies push back against internet watchdog’s new privacy rules

• Top officials: U.S. must shift to more aggressive cyber approach

• Surveillance, Privacy and Cyber Law

Technical

• An algorithm for hiding and recovering data using matrices

• Securing the Internet of Things: New Perspectives and Research Challenges

• Android Inter-App Communication Threats, Solutions, and Challenges

• On the Security of Some Compact Keys for McEliece Scheme

Reports, Blogs, Etc.

• Artificial Intelligence and the Attack/Defense Balance

• The 600+ Companies PayPal Shares Your Data With

• Checked Your Credit Since the Equifax Hack?

• E-Mailing Private HTTPS Keys

• Flash, Windows Users: It’s Time to Patch

• The One Thing That Protects a Laptop After It’s Been Stolen

• A Cyberattack in Saudi Arabia Had a Deadly Goal. Experts Fear Another Try

• Who Is Afraid of More Spams and Scams?

   

March 8

News/Trends

• S.E.C.’s New Cybersecurity Guidance Won’t Spur More Disclosures

• Android P in depth: An up-close look at what’s new with security

• Spyware maker shuts down surveillance services after hacks

• Apple Employee Threatens to Leak User’s iCloud Data

• US DHS Slammed for Infosecurity Deficiencies
• An Anarchist Explains How Hackers Could Cause Global Chaos
• EFF: FBI Paid Geek Squad Employees as Informants

• Smart traffic lights cause jams when fed spoofed data

• Criminals pay just $15 for Apple iCloud account IDs, report claims

Law/Policy

• Preventing ‘Going Dark’: A Sober Analysis and Reasonable Solution to Preserve Security in the Encryption Debate
• Privacy, the Hacker Way

• Push to bolster election security stalls in Senate

• Senate committee approves bill reorganizing Homeland Security’s cyber office

Technical

• PySEAL: A Python wrapper implementation of the SEAL homomorphic encryption library

• Practical cryptographic strategies in the post-quantum era

• On Security Research Towards Future Mobile Network Generations

• Differentially Private Distributed Learning for Language Modeling Tasks

Reports, Blogs, Etc.

• Powerful New DDoS Method Adds Extortion

• How to Fight Mobile Number Port-out Scams

• What Is Your Bank’s Security Banking On?

• Extracting Secrets from Machine Learning Systems

• Connected Cars Pose New Security Challenges

• Intel SGX Can Be Used to Hide, Execute Malware

• New DDoS Reflection-Attack Variant

• History of the US Army Security Agency

February 23

News/Trends

• Malvertising Wanes in Q4

• Takeaways from the Russia-Linked US Senate Phishing Attacks

• Anatomy of an Attack on the Industrial IoT

• Cisco warns of Internet of Things, Supply Chain Risk

• Phishing schemes net hackers millions of dollars from Fortune 500

• Hacker Strikes ‘Stalkerware’ Companies, Stealing Alleged Texts and GPS Locations of Customers

• US Federal Contractors Lag in Cyber Best Practices

Law/Policy

• Bitcoin exchange founder charged with covering up hack

• Homeland Security chief touts effort on election cybersecurity

• US suspicious of Mexico’s request for help in spyware investigation: report

• SEC updates guidance on disclosing cyber breaches

Technical

• XYZ Privacy

• Problems in group theory motivated by cryptography

• How to Subvert Backdoored Encryption: Security Against Adversaries that Decrypt All Ciphertexts

• Blockchain: Data Malls, Coin Economies and Keyless Payments

Reports, Blogs, Etc.

• The Myth of the Hacker-Proof Voting Machine

• Election Security

• New Spectre/Meltdown Variants

• Chase ‘Glitch’ Exposed Customer Accounts

• Money Laundering Via Author Impersonation on Amazon?

• Another baby monitor is allowing strangers to spy on children

• 5 signs you may be talking to a bot

• Tesla cryptojacked by currency miners

• Criminals Obtain Code-Signing Certificates Using Stolen Corporate IDs

   

   

February 16

News/Trends

• Malware Spikes Coincided with 2017 Geopolitical Incidents
• FedEx S3 Bucket Exposes Private Details on Thousands Worldwide
• Windows Defender Advanced Threat Protection coming to Windows 7 and 8.1
• Malicious Chrome extension is next to impossible to manually remove

• A Hacker Has Wiped a Spyware Company’s Servers—Again

• Microsoft is distributing security patches through insecure HTTP links
• February patches bring ominous Outlook fixes and a rebirth of KB 2952664

• Cyberattack Caused Olympic Opening Ceremony Disruption

Law/Policy

• Ethical hackers discover 100 vulnerabilities in U.S. Air Force systems

• Trump to nominate Army cyber chief to lead NSA, official says

• Snowden trolls White House over security clearances

• Democrats propose $1.7 billion in grants for election security

Technical

• Optimizing Precision for Open-World Website Fingerprinting

• Adversarial Risk and the Dangers of Evaluating Against Weak Attacks

• Zero-Knowledge Password Policy Check from Lattices

• A Blockchain Based Liability Attribution Framework for Autonomous Vehicles

Reports, Blogs, Etc.

• Can Consumers’ Online Data Be Protected?

• Jumping Air Gaps

• Living in a Smart Home

• Rise of the ‘Hivenet’: Botnets That Think for Themselves

• Cybercrime Gang Ramps up Ransomware Campaign

• IRS Reports Steep Decline in Tax-Related ID Theft

• Google’s big plans for email will give it even more power

• Why Chrome’s ad filter isn’t an adblocker