Subterms
Image: Joshua Hoehne A team of academics has described this week a method that can help identify when Facebook app developers surreptitiously share user data with third-parties. Named CanaryTrap, the technique was detailed by academics from the University of Iowa in a whitepaper published on Monday, titled “CanaryTrap: Detecting Data Misuse by Third-Party Apps on […] More
Fitness brand V Shred exposed the personally identifiable information (PII) of over 99,000 customers and trainers — and has yet to fully resolve the leaking database responsible. Las Vegas-based V Shred is a company that offers fitness plans for women and men, with a focus on fast workouts, nutrition plans, and supplements. The firm says […] More
New samples of the EKANS ransomware have revealed how today’s cyberattackers are using a variety of methods to compromise key industrial companies. In a research report published on Wednesday, FortiGuard Labs researchers Ben Hunter and Fred Gutierrez said that malware designed to attack industrial control systems (ICS) continues to be lucrative for threat actors. While […] More
Security researchers have revealed the anatomy of a ransomware attack, showing how cyber criminals gained access to a network and deployed ransomware — all in the space of just two weeks. Researchers from tech security company SentinelOne examined a server that was used by criminals in October last year to turn a small security breach […] More
The UK’s House of Lords Gambling Committee has called for in-game loot boxes and purchases to be regulated under gambling laws. According to the committee, the gambling restrictions imposed by the Gambling Act 2005 — which may not now be relevant in today’s technology-driven world — smartphone adoption, and mobile apps have created a “perfect storm […] More
In an attempt to find the direct lines of accountability within Australian government entities where cybersecurity is concerned, the Joint Committee of Public Accounts and Audit (JCPAA) on Thursday was sent running in circles like a dog chasing its tail. Australian government entities are required to comply with the Australian Signals Directorate’s (ASD) Top Four […] More
Image: Kon Karampelas Social media giant Facebook disclosed on Wednesday a new user privacy incident. The company said that it continued sharing user data with approximately 5,000 developers even after their application’s access expired. The incident is related to a security control that Facebook added to its systems following the Cambridge Analytica scandal of early […] More
In a report published today, cyber-security firm Lookout said it found evidence connecting Android malware that was used to spy on minorities in China to a large government defense contractor from the city of Xi’an. Lookout’s 52-page report [PDF] details a years-long hacking campaign that has primarily targeted the Uyghur ethnic minority, living in western […] More
