Data Breach Today

NOVEMBER 15, 2023

ETSI Will Publicize Its Encrypted Protocol TETRA Used in Radio Systems The European telecom standards body behind a widely used radio encryption system will soon open-source its encryption protocols.

Encryption 281

Encryption Communications IT 281

Data Breach Today

NOVEMBER 1, 2023

Extortionist Crypto-Locking Hackers Keep Hitting Healthcare Sector, Experts Report Once ransomware hackers get inside a healthcare sector organization's systems, three out of four attackers will also maliciously encrypt data, says security firm Sophos.

Encryption 257

Encryption Ransomware Security 257

Data Breach Today

FEBRUARY 14, 2024

The court found that end-to-end encryption is essential to preserving the right to privacy in digital communication systems.

Encryption 246

Encryption Privacy Data collection Communications 246

Data Breach Today

NOVEMBER 14, 2022

From Russia with Love Group Boasted of Removing Decryptor from Somnia Ransomware Russian hackers are on a campaign to maliciously encrypt the files of Ukrainian victims - but unlike other ransomware groups, doing so without the possibility of offering a decryptor.

Encryption 241

Encryption Ransomware 241

The Last Watchdog

OCTOBER 18, 2023

Enter attribute-based encryption ( ABE ) an advanced type of cryptography that’s now ready for prime time. ABE makes it much more difficult to fraudulently decrypt an asset in its entirety; it does this by pulling user and data attributes into the encryption picture — in a way that allows decryption to be flexible.

Encryption 264

Encryption Privacy Cloud Access 264

Data Breach Today

OCTOBER 25, 2024

Rust-Based Ransomware Employs Aggressive Anti-Detection Tactics Operators of a Russian-speaking ransomware group launched a new encryptor with enhanced measures for defeating cyber defenders including wiping logs, disrupting backup systems and stopping decryption without insiders knowledge.

Ransomware 279

Ransomware Encryption 279

Data Breach Today

AUGUST 30, 2024

Telegram Messages Hard to Encrypt But CEO Faces Charges for Noncompliant Cryptology The arrest and indictment of Telegram CEO Pavel Durov is sparking concerns about the viability of encrypted communications in France.

Encryption 173

Encryption Communications 173

Data Breach Today

SEPTEMBER 6, 2023

Online Safety Bill Close to Passage With 'Accredited Technology' Clause Intact The U.K. government may have sidestepped a fight with American tech companies by appearing to soften a legislative mandate for chat apps to actively scan for terrorist and child sexual abuse content.

Government 288

Government Encryption 288

Data Breach Today

DECEMBER 17, 2024

Regulators Say NIST's 2035 Deadline for Insecure Encryption Could Be Too Late Australia has rolled out an ambitious roadmap to prepare for future quantum-enabled cyberattacks.

Encryption 130

Encryption 130

Data Breach Today

DECEMBER 19, 2024

CISA Says 2035 Quantum Deadline Remains Achievable Despite Recent Breakthroughs The federal governments 2035 mandate to adopt quantum-resistant encryption remains feasible despite technological advancements in quantum computing, a top official for the U.S.

Encryption 130

Encryption Government 130

Data Breach Today

APRIL 18, 2023

UK's Online Safety Bill Criticized for Infringing on Private Communications Major internet chat platforms are urging the United Kingdom government to reconsider a bill intended to decrease exposure to online harms but which opponents say would open the door to massive government surveillance.

Encryption 275

Encryption Communications Government 275

Security Affairs

NOVEMBER 15, 2024

The Glove Stealer malware exploits a new technique to bypass Chrome’s App-Bound encryption and steal browser cookies. The malware bypasses Chrome’s App-Bound Encryption by utilizing the IElevator service, a method that was disclosed in October 2024. Gen Digital observed phishing campaigns distributing the Glove Stealer.

Encryption 123

Encryption File names Phishing Passwords 123

Data Breach Today

JULY 26, 2023

TETRA Algorithms Can Be Decrypted, Says Cybersecurity Firm Midnight Blue Security researchers uncovered multiple vulnerabilities in a widely used radio communication system used by law enforcement and in critical infrastructure for data transmission that could allow remote decryption of cryptographically protected communications.

Encryption 233

Encryption Communications Cybersecurity Security 233

Schneier on Security

SEPTEMBER 9, 2024

In 2018, Australia passed the Assistance and Access Act, which—among other things—gave the government the power to force companies to break their own encryption. Examples include certain source code, encryption, cryptography, and electronic hardware. We in the encryption space call that last one “ nerd harder.”

Encryption 125

Encryption Computer and Electronics Access Government 125

Data Breach Today

NOVEMBER 10, 2020

Investigators Find Encryption, Monitoring, Logging and Whitelisting Failures Inadequate database and privileged account monitoring, incomplete multi-factor authentication and insufficient use of encryption: Britain's privacy regulator has cited a raft of failures that contributed to the four-year breach of the Starwood guest reservation system discovered (..)

Cybersecurity 363

Cybersecurity Encryption Authentication Privacy 363

Data Breach Today

JUNE 18, 2024

Company Publishes Information on Double Key Encryption Under Regulatory Pressure Following a legal intervention made by the German federal cybersecurity agency, Microsoft has disclosed additional information on encryption measures it adopted to secure its customer data.

Encryption 303

Encryption Security Paper Cybersecurity 303

Data Breach Today

SEPTEMBER 30, 2024

Attackers Embrace Dating Sites and Encrypted Messaging Apps for Social Engineering Russian military and intelligence hacking teams continue to refine their Ukrainian targeting, lately shifting to online attacks designed to support and help Moscow's military operations succeed, including social engineering schemes launched via dating portals and encrypted (..)

Military 309

Military Encryption 309

Data Breach Today

APRIL 15, 2020

Video-Sharing Service Does Not Always Use TLS/SSL Encryption TikTok, a video-sharing service, has been delivering video and other media without TLS/SSL encryption, which means it may be possible for someone to tamper with content, researchers say.

Encryption 334

Encryption IT 334

Data Breach Today

FEBRUARY 8, 2024

Authorities Hacked the End-to-End Encryption Platform in 2020 The Dominican Republic earlier this month extradited to France a suspected administrator of now-defunct encrypted messaging service EncroChat.

Encryption 297

Encryption IT 297

Data Breach Today

OCTOBER 3, 2024

Kawin Boonyapredee on Why Organizations Should Take Post-Quantum Threats Seriously Quantum computing has been evolving for decades and holds immense promise. Companies have invested billions of dollars in this technology, which will eventually solve complex business problems.

Encryption 173

Encryption 173

Data Breach Today

MARCH 13, 2024

Repeat Crackdowns Drive Criminals to Embrace Foreign-Made Encrypted Messaging Apps Criminals in China increasingly keep a low profile on public-facing forums and rely on Telegram and other encrypted foreign messaging apps to discreetly coordinate their activities or sell wares, according to a new report charting how the Chinese cybercrime ecosystem (..)

Encryption 289

Encryption 289

Data Breach Today

JULY 16, 2021

If Backups Unavailable, Victims Should Retain Encrypted Files in Case Decryptor Released Now that the REvil ransomware gang has apparently shut down, victims are in a precarious situation. They must either rely on backups to restore data access or wait for the release of a decryptor, making sure they retain all encrypted files.

Ransomware 317

Ransomware Encryption Access 317

Data Breach Today

MARCH 1, 2021

Flaw Could Enable Access to Secret Encryption Key A critical authentication bypass vulnerability could enable hackers to remotely compromise programmable logic controllers made by industrial automation giant Rockwell Automation, according to the cybersecurity company Claroty. Rockwell has issued mitigation recommendations.

Encryption 362

Encryption Authentication Cybersecurity Access 362

Data Breach Today

OCTOBER 15, 2021

But Name-and-Shame Attackers Likely Retooling After Spotting Encryption Problems A free decryptor for BlackByte ransomware has been released by security researchers at Trustwave who cracked the crypto-locking malware's encryption.

Ransomware 289

Ransomware Encryption Security 289

Data Breach Today

NOVEMBER 15, 2023

Committee Amends Bill to State It Doesn't Prohibit or Weaken End-to-End Encryption A key European parliamentary committee on Tuesday voted to carve off encrypted communications from a legislative proposal directing online providers to diminish the risk of child sexual abuse material.

Encryption 281

Encryption Communications Risk IT 281

Data Breach Today

JANUARY 8, 2024

Large Mortgage Lender's Customers Say the Online Payment Portable Is Inaccessible Non-bank mortgage lending giant LoanDepot is warning customers and investors that hackers have infiltrated its network, gained unauthorized access to information and encrypted data, leading to it taking numerous systems offline while it probes the attack.

Ransomware 321

Ransomware Encryption Access IT 321

Data Breach Today

OCTOBER 4, 2021

DSCI: Ransomware Alkhal Likely Spread Via Phishing, Malicious URLs The Data Security Council of India has issued an advisory about newly discovered ransomware Alkhal, which uses a strong encryption tool and has no known decryptor to recover lost data. The ransomware was likely discovered on Oct.

Ransomware 355

Ransomware Encryption Phishing Security 355

Data Breach Today

JANUARY 13, 2021

Capitol by a violent mob, members of which allegedly accessed lawmakers' systems and stole devices, offers cybersecurity professional lessons to learn on authentication, encryption and more, says cybersecurity expert Brian Honan. Brian Honan: Security Professionals Can Take Action to Minimize Risks The physical breach of the U.S.

Cybersecurity 348

Cybersecurity Encryption Authentication Risk 348

Data Breach Today

MAY 24, 2024

Malicious Script Targets Users in Mexico, Indonesia, Jordan Why bother building a crypto-locker when Microsoft has perfectly acceptable encryption software preloaded on desktops? Many ransomware hackers agree with that statement - and they're learning to make such attacks even harder to recover from.

Ransomware 312

Ransomware Encryption 312

Data Breach Today

OCTOBER 7, 2024

Gang Hits Victims with 'Sophisticated' Exfiltration, Encryption Extortion Attacks Health sector entities have yet another ransomware group to worry about, warn U.S. federal authorities.

Ransomware 314

Ransomware Encryption 314

Data Breach Today

MAY 14, 2020

Ransomware gangs are increasingly going beyond encrypting data, stealing information to put more pressure on victims to pay ransoms. Another Example of How Cybercriminals' Tactics Are Changing Magellan Health, a U.S.

Ransomware 348

Ransomware Encryption IT 348

Data Breach Today

SEPTEMBER 1, 2023

Bill 'Poses a serious threat' to end-to-end encryption, Apple Says U.S. tech companies are stepping up warnings to British lawmakers over a government proposal they say will fatally weaken security and privacy protections for users.

Encryption 351

Encryption Privacy Government Security 351

Data Breach Today

SEPTEMBER 15, 2023

Data Minimization and Encryption Mitigate Fallout, Says FS-ISAC's Teresa Walsh The Clop ransomware group's zero-day attack on MOVEit software was its fourth data theft campaign targeting secure file transfer users.

Encryption 290

Encryption Ransomware Security IT 290

Data Breach Today

MARCH 24, 2021

MalwareHunter Team Finds Updated Capabilities The REvil ransomware gang has added a new malware capability that enables the attackers to reboot an infected device after encryption, security researchers at MalwareHunter Team report.

Ransomware 325

Ransomware Encryption Security 325

Krebs on Security

NOVEMBER 17, 2022

He’d been on the job less than six months, and because of the way his predecessor architected things, the company’s data backups also were encrypted by Zeppelin. “We’ve found someone who can crack the encryption.” Then came the unlikely call from an FBI agent. “Don’t pay,” the agent said.

Ransomware 334

Ransomware Encryption Manufacturing Phishing 334

Data Breach Today

AUGUST 9, 2022

Victims Often Attacked Simultaneously by Multiple Ransomware Groups Cybercriminals monitor leak sites for newly listed ransomware victims in a bid to try their own hand at dropping encryption malware, says Sophos.

Ransomware 338

Ransomware Encryption Cybersecurity IT 338