Seniors: How to Keep Your Retirement Safe from Online Scams
The growing number of internet crimes targeting senior adults is mind-blowing. In 2021, more than 92,000 people over the age of 60 reported losses of $1.7 billion, according to IC3, the FBI’s Internet Crime division. That number reflects a 74 percent increase in losses from 2020. These numbers tell us a few things. They tell […] more…Sunburst: connecting the dots in the DNS requests
On December 13, 2020 FireEye published important details of a newly discovered supply chain attack. An unknown attacker, referred to as UNC2452 or DarkHalo planted a backdoor in the SolarWinds Orion IT software. This backdoor, which comes in the form of a .NET module, has some really interesting and rather unique features. We spent the […] more…Operators of Counter Antivirus Service Scan4You Sentenced
In May 2017, one of the biggest facilitators of cybercrime, Scan4You, went offline after the two main suspects, Ruslans Bondars and Jurijs Martisevs, were arrested in Latvia and extradited to the U.S. by the Federal Bureau of Investigation (FBI). In May 2018, the case against the Scan4You’s operators concluded in a Virginia federal courtroom. The […] more…Operators of Counter Antivirus Service Scan4You Convicted
In May 2017, one of the biggest facilitators of cybercrime, Scan4You, went offline after the two main suspects, Ruslans Bondars and Jurijs Martisevs, were arrested in Latvia and extradited to the U.S. by the Federal Bureau of Investigation (FBI). In May 2018, the case against the Scan4You’s operators concluded in a Virginia federal courtroom. The […] more…Challenges in Securing Connected Hospitals
By Mayra Rosario Fuentes and Numaan Huq (Senior Threat Researchers) In our latest research paper on healthcare cybersecurity, Securing Connected Hospitals, which was produced in partnership with HITRUST, we examined internet-connected medical-related devices and systems such as databases, hospital admin consoles, and medical devices. We also looked into the supply chain, which has been an […] more…Pentagon Looks to Counter Ever-stealthier Warfare
The US military has for years enjoyed a broad technological edge over its adversaries, dominating foes with superior communications and cyber capabilities. Now, thanks to rapid advances by Russia and China, the gap has shrunk, and the Pentagon is looking at how a future conflict with a “near-peer” competitor might play out. Air Force Secretary […] more…Detecting Attacks that Exploit Meltdown and Spectre with Performance Counters
by David Fiser and William Gamazo Sanchez Exploits for the notorious Meltdown and Spectre vulnerabilities may still just be working proofs of concept (PoC) or reportedly experimented on for now, but it’s only a matter of time before threat actors fully weaponize them. Meltdown and Spectre are pervasive, affecting machines built as early as 1995. […] more…Campaign Possibly Connected to “MuddyWater” Surfaces in the Middle East and Central Asia
We discovered a new campaign targeting organizations in Turkey, Pakistan and Tajikistan that has some similarities with an earlier campaign named MuddyWater, which hit various industries in several countries, primarily in the Middle East and Central Asia. Third party security researchers named the MuddyWater campaign as such because of the difficulties in attributing the attacks. […] more…McAfee Helps You Commit to the Cloud with Confidence
Hybrid environments—whether they are private clouds bridging to public clouds or traditional data centers bridging to public clouds—have become the de facto service architecture for most enterprises. We all want the agility, cost benefits, and competitive advantages associated with the hybrid cloud, but we often hit a wall when it comes to key aspects of […] more…McAfee Security Innovation Alliance 2017 DevCon Awards
Innovation and enthusiasm fuel the McAfee Security Innovation Alliance program, and we are excited to see that our partners are actively pursuing opportunities to integrate their products with our technologies to extend our open, connected ecosystem. Every year at the McAfee Security Innovation Alliance Developers Conference (SIA DEVCON)—which, this year is taking takes place in […] more…iXintpwn/YJSNPI Abuses iOS’s Config Profile, can Crash Devices
by Hara Hiroaki, Higashi Yuka, Ju Zhu, and Moony Li While iOS devices generally see relatively fewer threats because of the platform’s walled garden approach in terms of how apps are installed, it’s not entirely unbreachable. We saw a number of threats that successfully scaled the walls in 2016, from those that abused enterprise certificates to […] more…The Crisis of Connected Cars: When Vulnerabilities Affect the CAN Standard
In many instances, researchers and engineers have found ways to hack into modern, internet-capable cars, as has been documented and reported several times. One famous example is the Chrysler Jeep hack that researchers Charlie Miller and Chris Valasek discovered. This hack and those that have come before it have mostly been reliant on specific vulnerabilities […] more…Exploring the Online Economy that Fuels Fake News
By Lion Gu, Vladimir Kropotov, and Fyodor Yarochkin (Senior Threat Researchers) “Fake news” was relatively unheard of last year—until the U.S. election campaign period started, during which an explosion of misinformation campaigns trended. But despite its seemingly rampant spread, fake news is just one facet of public opinion manipulation and cyber propaganda that we see […] more…Mobile apps and stealing a connected car
The concept of a connected car, or a car equipped with Internet access, has been gaining popularity for the last several years. The case in point is not only multimedia systems (music, maps, and films are available on-board in modern luxury cars) but also car key systems in both literal and figurative senses. By using […] more…How Intel Security Made a Manufacturing Company’s Interconnected Security Dream a Reality
Thomas Langer, Head of IT security for the German-based industrial packaging group MAUSER, needed a comprehensive security solution to protect his company’s intricate infrastructure. His one requirement: the solution must help them to share threat intelligence among all endpoints and networks, across 80 locations worldwide. That same threat intelligence would then be automatically analyzed and […] more…Intel Security Innovation Alliance 2016 DEVCON Awards
Innovation and enthusiasm fuel the Intel Security Innovation Alliance program, and we are excited to see that our partners are actively pursuing opportunities to integrate their products with our technologies to extend our open, connected ecosystem. Every year at the Intel Security Innovation Alliance Developers Conference (SIA DEVCON)—which takes place in conjunction with the Intel […] more…More information
- Plex streaming is now available on PS3 and PS4
- Double the Security, Double the Fun: Protect Your Social Passwords with Two-Step Verification
- TSA Requires Rail and Airports to Strengthen Cybersecurity
- News in brief: Update Flash now; Heartbleed fine; the $1.9m email
- Yet another massive Bitcoin exchange has been hacked
- Microsoft Windows Kernel ‘Win32k.sys’ CVE-2018-8282 Local Privilege Escalation Vulnerability
- Microsoft DCOM RPC CVE-2015-2370 Local Privilege Escalation Vulnerability
- Netsec Goggle Customizes Brave Search Results to Show Only Cybersecurity Websites
- Microsoft Windows ‘Win32k.sys’ CVE-2013-1261 Local Privilege Escalation Vulnerability
- Quantum cryptography theory has a demonstrated security defect