Latest

Cloud Computing

U.S. Supreme Court to Hear Microsoft Data Warrant Case

Jeremy Kirk  •  October 17, 2017

Can U.S. law enforcement use a warrant to seize emails stored outside the U.S. by a cloud services provider? That's the question the Supreme Court has agreed to consider next year. Microsoft continues to fight an order to turn over emails stored in an Irish data center.

Anti-Malware

Profiling DHS Secretary-Designate Kirstjen Nielsen

Eric Chabrow  •  October 17, 2017

A look at President Donald Trump's pick for the Department of Homeland Security secretary, Kirstjen Nielsen, leads the latest edition of the ISMG Security Report. Also featured: Equifax's and TransUnion's problem with dubious code.

Cybersecurity

The Digital Payments Revolution: Educating Users on Risks

Varun Haran  •  October 17, 2017

With the volume of digital payment transactions in Asia growing at an unprecedented rate, educating consumers about digital hygiene is more important than using the right security technologies, says Mohan Veloo, CTO for APAC at F5 Networks.

Encryption

WiFi Security Shredded via KRACK Attack

Mathew J. Schwartz  •  October 16, 2017

A Belgian security researcher has discovered a "serious weakness" in the WPA2 security protocols used to encrypt many WiFi communications. Attackers can exploit the flaws to eavesdrop as well as potentially inject code such as malware or ransomware into WiFi-connected systems. Prepare for patches.

Anti-Malware

RSA Conference Abu Dhabi: A Preview

Tom Field  •  October 16, 2017

The RSA Conference returns to Abu Dhabi in November, and event organizers Linda Gray Martin and Britta Glade say this year's agenda is packed with new speakers and topics unique to this growing annual event.

Breach Notification

Hyatt Hotels Suffers International Payment Card Data Breach

Mathew J. Schwartz  •  October 13, 2017

For the second time in two years, Hyatt Hotels suffered a payment card data breach after attackers infected payment card processing systems with malware. The latest breach lasted for over three months and affected 41 Hyatt hotels across 11 countries.

Breach Response

A Conversation With the Cyber Gang 'The Dark Overlord'

Eric Chabrow  •  October 13, 2017

A discussion with ISMG Security and Technology Editor Jeremy Kirk about his chat with the cyber gang "The Dark Overlord," which threatened some U.S. school districts with extortion, leads the latest edition of the ISMG Security Report. Also, an update on surging IT security employment.

Anti-Malware

Will Kaspersky Lab Survive the Russia Hacking Scandal?

Jeremy Kirk  •  October 12, 2017

It's a tale that reads stranger than fiction, a true Tom Clancy-ish yarn: Israeli spies hacked Kaspersky Lab, discovering that Russia has been using the company's pervasive anti-virus software to spy on U.S. spies. Will Kaspersky Lab survive?

Breach Notification

Hacker Steals Joint Strike Fighter Plans in Australia

Mathew J. Schwartz  •  October 12, 2017

A hacker exploited an unpatched, 12-month-old flaw in a small Australian defense contractor's IT help desk and stole data for the country's F-35 Joint Strike Fighter program, among other secrets, the Australian government has warned.

Data Breach

Report: North Korean Hackers Stole War Plans

Mathew J. Schwartz  •  October 11, 2017

North Korea's leaders apparently blew a gasket over "The Interview," a comedy film that centered on an assassination plot against North Korea's leader. So how might the country have reacted to U.S.-South Korean "decapitation strike" plans reportedly stole last year by Pyongyang-affiliated hackers?

Breach Notification

Equifax: 15.2 Million UK Records Exposed

Jeremy Kirk  •  October 11, 2017

Credit-reporting agency Equifax now says records exposed in the massive data breach it revealed last month included information relating to 15.2 million U.K. residents - a much higher figure than the business first suggested.

Cybersecurity

Cyber Ransom Group Hits Soft Targets: US Schools

Jeremy Kirk  •  October 10, 2017

The Dark Overlord, a hacking group that hijacks data from businesses and holds it for ransom, is now threatening school districts. The apparent intent isn't to get ransoms from schools per se, but to create a fear campaign designed to scare big businesses into paying the group's ransoms.