August 11

News/Trends

• Ships fooled in GPS spoofing attack suggest Russian cyberweapon

• New in Windows security: Automatically log off suspicious users

• Car lease companies’ poor cyber security exposed over 180,000 drivers

• The case against Windows Automatic Update

• Malware-Laden DNA Could Attack Lab Machines

• Protect your digital presence with secure accounts
• Cyber-Attacks Soar by a Quarter as Phishing Dominates

• State juror pool data breach exposed Social Security numbers

Law/Policy

• Interpretation Catalysts in Cyberspace
• ‘We Only Spy on Foreigners’: The Myth of a Universal Right to Privacy and the Practice of Foreign Mass Surveillance
• The Law of the Zebra
• The Corporate Governance of National Security

Technical

• The Game of Phishing

• Protecting Genomic Privacy by a Sequence-Similarity Based Obfuscation Method

• Privacy Preserving Face Retrieval in the Cloud for Mobile Users

• A Framework and Comparative Analysis of Control Plane Security of SDN and Conventional Networks

Reports, Blogs, Etc.

• Turning an Amazon Echo into an Eavesdropping Device

• More on the Vulnerabilities Equities Process

• Uber Drivers Hacking the System to Cause Surge Pricing

• Taking Down the Internet Has Never Been Easier

• Uptick in Malware Targets the Banking Community

• Behind China’s VPN Crackdown, A ‘Game Of Cat And Mouse’ Continues

• Breaches Are Coming: What Game of Thrones Teaches about Cybersecurity

• Beware of Security by Press Release

August 4

News/Trends

• To Protect Voting, Use Open-Source Software

• Stealthy Google Play apps recorded calls and stole e-mails and texts
• FCC Imposes $82M Fine for Spoofed Pernicious Robocalls

• Chrome’s built-in adblocker arrives for early adopters

• WannaCry Attackers Empty Bitcoin Ransom Wallets and Disappear
• Do developers care about security?

• What do the words ‘Tor’ and ‘Dark Web’ mean to you? [VIDEO]

• Amazon reaches out to users with bad security before the crooks do

Law/Policy

• Privacy, the Hacker Way

• Despite progress, OPM information systems still at risk, audit says

• The Supreme Court moves toward digital with online court filings

• Technological Savvy and the Attorney’s Ethical Duty of Competency

Technical

• Aligned and Non-Aligned Double JPEG Detection Using Convolutional Neural Networks

• Modeling the Propagation of Trojan Malware in Online Social Networks

• Using Hover to Compromise the Confidentiality of User Input on Android

• Trust Implications of DDoS Protection in Online ElectionsBetrayal, Distrust, and Rationality: Smart Counter-Collusion Contracts for Verifiable Cloud Computing

Reports, Blogs, Etc.

• Splitting the NSA and US Cyber Command

• Why Cybersecurity Needs a Human in the Loop

• Robot Safecracking

• Should You be Worried about Cloud Security?

• New Bill Seeks Basic IoT Security Standards

• Flash Player is Dead, Long Live Flash Player!

• Google wants to track shoppers IRL – privacy group says, ‘No way!’

• Three Steps to Strong Enterprise Security

July 28

News/Trends

• Going on holiday? Here are our tips for a security-minded trip

• North Korea Tries to Make Hacking a Profit Center

• Hackers Selling Access to Critical Infrastructure on Darknet

• Black code available for streaming
• Jon Penney on the chilling effects of online surveillance
• Stealthy Google Play apps recorded calls and stole e-mails and texts

• Rogue insiders can go undetected for a long time….

•  “Perverse” malware infecting hundreds of Macs remained undetected for years

Law/Policy

• Hacking group ShadowBrokers raises prices for leaks

• IRS fails to resolve dozens of information security deficiencies, GAO says

• Interpretation Catalysts in Cyberspace
• ‘We Only Spy on Foreigners’: The Myth of a Universal Right to Privacy and the Practice of Foreign Mass Surveillance

Technical

• Digital Forensic Approaches for Amazon Alexa Ecosystem

• A Knowledge-Based Analysis of the Blockchain Protocol

• Robust Physical-World Attacks on Machine Learning Models

• De-anonymization of Social Networks with Communities: When Quantifications Meet Algorithms

Reports, Blogs, Etc.

• Zero-Day Vulnerabilities against Windows in the NSA Tools Released by the Shadow Brokers

• Roombas will Spy on You

• Don’t want your SMSs stolen? Don’t download these Android apps

• Downtime from Ransomware More Lethal to Small Businesses Than the Ransom

• The Lazy Habits of Phishing Attackers

• The Right to Be Forgotten & the New Era of Personal Data Rights

• Password Masking

• Gas Pump Skimmer Sends Card Data Via Text

• Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’

July 13

News/Trends

• Will ‘Right to Repair’ imperil IoT Security?

• The Big Dark: Motive, not Means, is what holds back a Crippling Grid Hack

• New SQL Injection Tool Makes Attacks Possible from a Smartphone

• Dark Web Hosting Service Hacked, Some Data Was Stolen

• Spyware in Mexico Targeted Investigators Seeking Students

• Unclear on the concept, plastic edition

• The Growing Danger of IP Theft and Cyber Extortion

• Hackers Are Targeting Nuclear Facilities, Homeland Security Dept. and F.B.I. Say

Law/Policy

• Russia: Joint cybersecurity group with US unlikely to be formed soon

• Internet companies launch offensive against FCC’s net neutrality rollback

• Dems introduce bill to block cybersecurity team up with Russia

• Is it Time to Can the CAN-SPAM Act?

Technical

• Malware in the Future? Forecasting Analyst Detection of Cyber Events

• Estimation Efficiency Under Privacy Constraints

• Maximizing the effectiveness of an advanced persistent threat

• A Composite-Metric Based Path Selection Technique for the Tor Anonymity Network

Reports, Blogs, Etc.

• More on the NSA’s Use of Traffic Shaping

• How I learned to stop worrying (mostly) and love my threat model
• Black Code Available for Streaming

• IoT Devices Plagued by Lesser-Known Security Hole

• How Code Vulnerabilities Can Lead to Bad Accidents

• Now It’s Easier than Ever to Steal Someone’s Keys

• Researchers find chinks in the armour of satellite phone calls

• Two-factor via your mobile phone – should you stop using it?

July 7

News/Trends

• HTTPS Certificate Revocation is broken, and it’s time for some new tools

• Update your Android now – many holes fixed including ‘BroadPwn’ Wi-Fi bug

• Facebook fights gag prohibiting it from alerting users to search warrants

• Why doctors using SnapChat to send scans is not the problem

• Exit Scam Fears as Darknet Giant AlphaBay Goes Offline
• SLocker Variant Nabs WannaCry Tactic for Mobile

• Hackers Find ‘Ideal Testing Ground’ for Attacks: Developing Countries

• Confidence in Security Tools Hits a Low

Law/Policy

• Russians suspected to be behind hacks of nuclear plant

• Lawmakers sound alarm about Russian cybersecurity firm

• Latest malware attack exposes cybersecurity weaknesses

• Reno at 20: The Packingham Decision and the Supreme Court on Online Speech

Technical

• Three-Pass Protocol Implementation in Vigenere Cipher Classic Cryptography Algorithm with Keystream Generator Modification

• Achieving Secure and Differentially Private Computations in Multiparty Settings

• Internet of Things: Survey on Security and Privacy

• Analysis of the Rising Threat of Subverting Privacy Technologies

Reports, Blogs, Etc.

• Daily Report: The Ugly Aftermath of a Cyberattack

• The ancient Microsoft networking protocol at the core of the latest global malware attack

• IRS to Launch Educational Phishing Series

• IoT Physical Attack Exploit to be Revealed at Black Hat

• A Man-in-the-Middle Attack against a Password Reset System

• Now It’s Easier than Ever to Steal Someone’s Keys

• The paranoid Mac traveler’s 10-point data protection checklist

• Is it Time to Can the CAN-SPAM Act?

June 30

News/Trends

• Facial Recognition May Boost Airport Security But Raises Privacy Worries
• Tuesday’s massive ransomware outbreak was, in fact, something much worse

• Hacks Raise Fear Over N.S.A.’s Hold on Cyberweapons

• More Android apps from dangerous Ztorg family sneak into Google Play

• Hacker Steals Millions of Accounts from Internet Radio Service 8tracks

• Computer Scientists: Passwords Can be Acquired from Brain Waves

• KR: Financial firms on guard for cyberattack threats

• This Windows Defender bug was so gaping its PoC exploit had to be encrypted

Law/Policy

• Senators introduce ‘cyber hygiene’ bill

• Mexican politicians targeted with spyware, research shows

• Creator of original Petya ransomware offers help against global cyberattack

• Massive ransomware attack not actually ransomware: report

Technical

• Practical Differential Privacy for SQL Queries Using Elastic Sensitivity

• Improvement Of Email Threats Detection By User Training

• Stealthy Deception Attacks Against SCADA Systems

• Loophole: Timing Attacks on Shared Event Loops in Chrome

Reports, Blogs, Etc.

• How Facebook Uses Technology To Block Terrorist-Related Content
• The paranoid Mac traveler’s 10-point data protection checklist
• The price of security: surprisingly affordable

• Petya’ Ransomware Outbreak Goes Global

• Got Robocalled? Don’t Get Mad; Get Busy

• The Women of Bletchley Park

• CIA Exploits Against Wireless Routers

• Hacking Factory Robot Arms for Sabotage, Fun & Profit

June 23

News/Trends

• ‘Our Phones Are Being Monitored’: How a Hacking Story Unfurled

• Electronic Setups of Driverless Cars Vulnerable to Hackers

• How Facebook Uses Technology To Block Terrorist-Related Content
• Cyber Essentials ‘Breach’ Exposes Firms to Phishers

• NSA failed to implement security measures, says damning report

• Hungry for Cyber Warriors, Military Weighs Image, Lifestyle Changes

• Google Play is fighting an uphill battle against Android adware

• A Cyberattack ‘the World Isn’t Ready For’

Law/Policy

• Dems push for more action on power grid cybersecurity

• Bipartisan push to prioritize cyber advice for small businesses

• GOP rep fears Russian interference turning cybersecurity partisan

• Lawmakers told of growing cyber threat to election systems

Technical

• Geo-Encryption Protocol For Mobile Networks

• The Capacity of Cache Aided Private Information Retrieval

• All Your Bulbs Are Belong to Us: Investigating the Current State of Security in Connected Lighting Systems

• The Evaluation of Circuit Selection Methods on Tor

Reports, Blogs, Etc.

• Amazon Patents Measures to Prevent In-Store Comparison Shopping

• NSA Insider Security Post-Snowden

• New Technique to Hijack Social Media Accounts

• Following the Money Hobbled vDOS Attack-for-Hire Service

• Skype Suffers Outage Amid Claims of Cyber-Attack

• Google Will Now Remove Private Medical Records From Search Results

• 8 reasons why you should strengthen your iOS passcode today
• The price of security is eternal phone calls