October 27

News/Trend

• How one rent-a-botnet army of cameras, DVRs caused Internet chaos
• Protection is dead. Long live detection.
• DDoS attack on Dyn came from 100,000 infected devices
• Half of Americans Scared to Buy Connected Devices

• Cyber-crooks menacing hospitals are put under the microscope

• US Lawmakers Slam Opt-in Car Cybersecurity Guidance
• Russia-linked phishing campaign behind the DNC breach also hit Podesta, Powell

• The FCC just passed sweeping new rules to protect your online privacy

Law/Policy

• Nuclear power, defense workers leaking data through unsecure pagers

• Dem asks FCC to review internet security rules after massive cyberattack

• AT&T used broad data-gathering system for federal government

• Feds issue cybersecurity guidelines for automakers

Technical

• A survey of symbolic methods for establishing equivalence-based properties in cryptographic protocols

• Curbing cyber-crime and Enhancing e-commerce security with Digital Forensics

• Cryptanalysis of a Classical chaos-based cryptosystem with some quantum cryptography features

• Revocable Hierarchical Identity-Based Encryption from Multilinear Maps

Reports, Blogs, Etc.

• Android phones rooted by “most serious” Linux escalation bug ever
• Webcams, Video Conferencing, Smart Security: All Hackable in Less Than 3 Minutes

• Malicious AI

• How Different Stakeholders Frame Security

• As Artificial Intelligence Evolves, So Does Its Criminal Potential

• Senator Prods Federal Agencies on IoT Mess

• Fake Blue Screen of Death faux-freezes your system like the real McCoy

• Facebook hoax: “Live” videos of space walk? Not quite!

October 21

News/Trend

• Whoever Wins the White House, This Year’s Big Loser Is Email

•  Apple iOS Devices: Leakier Than Android

• Snoops can tell what you type while you Skype, researchers find

• New Regulations in China Regulate Internet Privacy of Minors

• How Hackers Broke Into John Podesta and Colin Powell’s Gmail Accounts

• Massive DDoS Attack Knocks Out Twitter, Box, Spotify

• Anonymous’ Most Notorious Hacker Is Back, and He’s Gone Legit

• Trump’s Turn to Face Questions Over Poor Email Security

Law/Policy

• Politics keeps the U.S. from securing private-sector networks, says former CIA chief Robert Gates

• The U.S. Government Wants to Read Travelers’ Tweets Before Letting Them In

• Web attack takes down major websites on East Coast

• Facial recognition technology is taking over US, says privacy group

Technical

• (Universal) Unconditional Verifiability in E-Voting without Trusted Parties

• Cryptography with right-angled Artin groups

• Decision Tree Classification on Outsourced Data

• Membership Inference Attacks against Machine Learning Models

Reports, Blogs, Etc.

• Why you should be cautious of emails from friends or colleagues

• “Anonymous” Yik Yak users can be tracked down, say researchers

• Hackers Hit U.S. Senate GOP Committee

• Self-Checkout Skimmers Go Bluetooth

• IoT Devices as Proxies for Cybercrime

• President Obama Talks About AI Risk, Cybersecurity, and More

• Virtual Kidnapping

• Trump Organization uses really, really insecure e-mail servers. Sad!

• 3 things you might not realize are cybercrimes

October 14

News/Trends

• John Podesta Says Russian Spies Hacked His Emails to Sway Election

• Almost 6,000 online shops hit by hackers

• Connecticut Hacker Created Darknet Phishing Sites To Steal Bitcoins

• 12 hardware and software vulnerabilities you should address now
• Encrypted communications could have an undetectable backdoor
• NSA could put undetectable “trapdoors” in millions of crypto keys
• Facebook, Twitter cut access to monitoring tool used by police
• Hackers abusing a 12-year-old flaw to attack the internet of insecure things

Law/Policy

• Ron Wyden Discusses Encryption, Data Privacy and Security

• Google: More than 44K government requests for data

• Facebook, Twitter block surveillance tool

• Administration vows ‘proportional’ response to Russian hack

Technical

• POPE: Partial Order Preserving Encoding

• An Efficient and Robust Social Network De-anonymization Attack

• Cryptanalyzing image encryption using chaotic logistic map

• Rigorous Analysis of Software Countermeasures against Cache Attacks

Reports, Blogs, Etc.

• A user’s foolproof guide to choosing terrible passwords

• Popular Bitcoin site hit by DNS attack, loses control of own website

• Phisher arrested for stealing Bitcoins from dark web users

• IoT Devices as Proxies for Cybercrime

• Cybersecurity Issues for the Next Administration

• The Psychological Impact of Doing Classified Intelligence Work

• Indiana’s Voter Registration Data Is Frighteningly Insecure

• Breach exposes at least 58 million accounts, includes names, jobs, and more

• Amazon Denies Data Breach Rumors but Resets User Passwords Just in Case

October 6

News/Trends

• Hacked Voter Registration Systems: A Recipe for Election Chaos
• NSA Contractor Charged with Stealing Top Secret Data

• EDPS-BEUC Joint Conference on Big Data Promotes Closer Dialogue

• From Russia with Grudge: Hackers Accused of Trying to Sway US Election

• Did Yahoo Spy on its Users’ Emails for the NSA?

• Contracting in the Cloud: Who Pays for a Data Breach?

• Mirai “Internet of Things” Malware from Krebs DDoS Attack Goes Open Source

• FBI Arrests an NSA Contractor Suspected of Stealing Documents, Hacking Tools

Law/Policy

• FCC to Vote on Strict Privacy Rules for ISPs in Late October
• Public-Private Cybersecurity

• NSA Head Denies ‘Blanket’ Email Searches

• The Privacy Principle

Technical

• Parameters Differentiating the Characteristics and Security of Military Information Systems

• Cardea: Context-Aware Visual Privacy Protection from Pervasive Cameras

• Battling the Digital Forensic Backlog through Data Deduplication

• Wireless Authentication System for Barcode Scanning Using Infrared Communication Technique

Reports, Blogs, Etc.

• US and China in Cyberspace

• The Culture of Cybersecurity

• How Hard is it to Hack the Average DVR? Sadly, not Hard at All
• Spotify Free is Serving Up Malware
• Insulin Pump Flaw Allows Hackers to Trigger Overdose
• Two-thirds of IT Bosses Fear Ransomware Attack
• #IPEXPO: Phishing Attacks & How to Defend Against Them

• Money Mule’ Gangs Turn to Bitcoin ATMs

• Who Makes the IoT Things Under Attack?