January 29

News

• People Keep Going to this Home Looking for Their Lost Phones — And Nobody Knows Why

• Watchdog Pushes IRS on Identity Theft Detection

• The New Way Police are Surveilling You: Calculating your Threat ‘Score’

• Storage of Records of Background Checks Shifted After Last Year’s Security Breach

• The Android Malware Monster Will Never Die
• Why Won’t We Help Users Create Good Passwords?
• PayPal is the Latest Victim of Java Deserialization Bugs in Web Apps

• LG Closes Data-Theft Hole Affecting Millions of G3 Smartphones

• How Amazon Customer Service was the Weak Link that Spilled my Data

• “Internet of Things” Security is Hilariously Broken and Getting Worse

Law/Policy

• Top Senator: Encryption Bill may ‘Do More Harm than Good‘

• Self-Driving Cars Will Be Ready Before Our Laws Are – IEEE Spectrum

• I Spy Something Useful: The Short Life and Senseless Death of Louisiana Senate Bill 250

Technical

• Blind Interference Alignment for Private Information Retrieval

• QRKE: Resistance to Attacks using the Inverse of the Cosine Representation of Chebyshev Polynomials

• Empirical Evaluation of Ambient Sensors as Proximity Detection Mechanism for Mobile Payments

• Security and Privacy Issues of Big Data

Reports / Blogs / Etc.

• Integrity and Availability Threats

• FTC: Tax Fraud Behind 47% Spike in ID Theft

• Oracle Pushes Java Fix: Patch It or Pitch It

• Skype Now Hides Your Internet Address

• Nine of Ten Breaches Easily Avoidable, Study Finds

• Cloud Security: It’s Become A People Problem

• Large-Scale Hacks Cause 98% of Leaked Healthcare Records
• Surprise: CrashSafari.com…Crashes Safari
• Panda Security Spotted Over 80 Million New Malware Samples in 2015

January 22

News

• Israeli Official: Iran Deal will Unleash Cyberattacks

• Apps to Manage Passwords So They Are Harder to Crack Than ‘Password’

• Fight for Privacy of Students, Cellphone Users Moves to States

• Linux Kernel Flaw Reaches Into Internet of Things

• Employee Data More Exposed Than Customer Data: Study

• iOS Cookie Theft Bug Allowed Hackers to Impersonate Users

• Phone Crypto Scheme “Facilitates Undetectable Mass Surveillance”

• Targeted Mobile Implants in the Age of Cyber-Espionage

• FIDO Alliance Passes 100 Post-Password Certified Solutions
• Nuclear Facilities in 20 Countries May Be Easy Targets for Cyberattacks

Law/Policy

• ACLU Takes Privacy Fight to the States

• Yet Another Bill Seeks to Weaken Encryption-by-Default on Smartphones

• From Anonymity to Identification

• Hard to Believe: The High Cost of a Biometric Identity Card

Technical

• Implementation of Association Rule Mining for Network Intrusion Detection

• Proving Differential Privacy via Probabilistic Couplings

• Secure Information Sharing in an Industrial Internet of Things

• Investigating the Performances and Vulnerabilities of Two New Protocols Based on R-RAPSE

Reports / Blogs / Etc.

• Should We Allow Bulk Searching of Cloud Archives?

• Reverse-Engineering a Zero-Day Exploit from the Hacking Team Data Dump

• Update Your iPhone to Stop Free Wi-Fi Networks Stealing Your Logins!

• Media Devices Sold to Feds have Hidden Backdoor with Sniffing Functions

• The Apple App Store Incident: Trouble in Paradise?

• Fake Facebook Emails Deliver Malware Masquerading as Audio Message
• Why We Need a Reality Check on Passwords
• How Will Billions of Devices Impact the Privacy of Things?
• How Email in Transit can be Intercepted Using DNS Hijacking
• FIDO Alliance Passes 100 Post-Password Certified Solutions

January 15

News

• No Business Too Small to Be Hacked

• Picking a Windows 10 Security Package

• Firms that Sell Spy Tech to Iran Remain Elusive

• Critical Infrastructure Cyberattacks Rising, Says US Official

• New York Tries to Force Phone Makers to Put in Crypto Backdoors

• How Malware Developers Could Bypass Mac’s Gatekeeper Without Really Trying

• Google Takes Another Stab at Killing Passwords

• Could Your Smartwatch be Giving Away Your ATM Pin?

• Can Silicon Valley Help Fight Terrorism and still Protect Privacy?

• Hyatt Hackers Hit Payment Processing Systems, Scooped Cards Used at 250 Locations

Law/Policy

• Bill Aims to Thwart Strong Crypto, Demands Smartphone Makers be able to Decrypt

• Robots, the Internet of Things, and the Future of Trade
• Surveillance as Loss of Obscurity
• After Google Spain and Charlie Hebdo: The Continuing Evolution of European Union Data Privacy Law in a Time of Change

Technical

• The Austrian eID Ecosystem in the Public Cloud: How to Obtain Privacy While Preserving Practicality

• Website Fingerprinting at Scale

• Preventing Your Faults From Telling Your Secrets: Defenses Against Pigeonhole Attacks

• LAPPS: Location Aware Password Protection System

Reports / Blogs / Etc.

• Malvertising – Why Fighting Adblockers Gets Users’ Backs Up

• Ransomware a Threat to Cloud Services, Too

• Account Takeovers Fueling ‘Warranty Fraud’

• Spamming Someone from PayPal

• The Internet of Things that Talk About You Behind Your Back

• Mac OS X, iOS, and Flash Had the Most Discovered Vulnerabilities in 2015

• IT Security and the Normalization of Deviance

• Android Banking Malware SlemBunk is Part of Well-Organized Campaign

• The State Of Mobile Insecurity

January 8

News

• Time Warner Cable Warns 320,000 Customers of Hack
• FTC Chair says US ‘Well on Our Way’ to New Data Pact with Europe
• Bug in Silent Circle’s Blackphone Let Attackers Remotely Control Device
• Hocus-Pocus! The Stupidity of Cybersecurity Predictions
• BBC Websites Said to Be Target of Online Attack
• Comcast Security Flaw Could Help Burglars Break into Homes Undetected
• First Known Hacker-Caused Power Outage Signals Troubling Escalation
• Microsoft May Have Your Encryption Key; Here’s How to Take It Back
• Uber to Pay $20,000 in Settlement Over Data Breach
• WhatsApp Phishing Campaign Unleashes Malware Storm

Law/Policy

• US Surveillance Law, Safe Harbor, and Reforms Since 2013
• The Cyber Civil War
• Surveillance as Loss of Obscurity
• Is Cyberthreat the Next Pearl Harbor?

Technical

• Towards the Integration between IoT and Cloud Computing: An Approach for the Secure Self-Configuration of Embedded Devices
• A Note on “Confidentiality-Preserving Image Search: A Comparative Study Between Homomorphic Encryption and Distance-Preserving Randomization”
• BYOD Security: A New Business Challenge
• Security and Privacy in Future Internet Architectures – Benefits and Challenges of Content Centric Networks
• Assessing Mission Impact of Cyberattacks: Report of the NATO IST-128 Workshop

Reports / Blogs / Etc.

• How the US Is Playing Both Ends on Data Privacy
• NSA Spies on Israeli Prime Minister
• Account Takeovers Fueling ‘Warranty Fraud’
• 2016 Reality: Lazy Authentication Still the Norm
• Top Gender and Security Moments of 2015
• EZCast TV Streaming Dongle Leaves Home Networks Wide Open to Hackers
• More Internet of Things Irony: A Security Alarm with Alarming Security
• 7 Tips For Mitigating Phishing And Business Email Hacks
• Blackphone Hackable Via Newly Found Bug
• Boldest Cybersecurity Predictions For 2016
• Ten Security Trends To Follow in 2016