Infosecurity News
#BHUSA: Windows Hello Passwordless Bypass Revealed
Using a pic of the cartoon character SpongeBob SquarePants, a researcher figures out an approach to bypass Windows Hello facial-recognition security
#BHUSA: CISA Director Advocates for New Partnership to Improve Cybersecurity
CISA head wants to encourage public–private operational collaboration and information sharing with new initiatives
#BHUSA: Looking for Vulnerabilities in Hospital Pneumatic Tubes
While the internet itself might not actually be a series of tubes, hospitals that connect to the internet do use pneumatic tubes that could potentially be at risk
US Teams Up with Companies to Defend Critical Infrastructure
Joint Cyber Defense Collaborative will see US government working with tech’s key players
Aussie Rapper Shares Cyber-Stalking Ordeal
Illy speaks out after enduring almost two years of “malicious abuse” from cyber-stalker
FTC Warns of Phishing Text Scam
Cyber-criminals target Americans in receipt of unemployment insurance benefits
#BHUSA: The Serious Disinformation Threat Posed by GPT-3
Research by CSET reveals worrying potential for GPT-3 to spread disinformation
Cybercrime Ransomware 'Ban' is No Match for Threat Actors
Users of popular underground forums are finding ways to bend the rules
Decade-Old Router Bug Could Affect Millions of Devices
Tenable discovery highlights continued software supply chain risk
Web Shells and Digital Extortion Drive Triple-Digit Growth in Cyber-Intrusions
US bears the brunt of most malicious activity in H1 2021, says Accenture
#BHUSA: The 9 Lives of the Charming Kitten Nation-State Attacker
IBM X-Force researchers claim that Iranian nation-state attacker continues to be successful using the same tactics, year after year
#BHUSA: What is the Future of Security Advisories?
With the volume of security advisories set to grow, it's important to know what assets are not at risk from vulnerability
#BHUSA: Researchers Criticize Apple Bug Bounty Program
While Apple pays well, researchers at Black Hat argue there is a clear lack of transparency on when, or even if, reported vulnerabilities will be fixed
#BHUSA: Hacking a Capsule Hotel to Silence a Noisy Neighbor
With lights and beds controlled by Wi-Fi, what could go wrong? Apparently, a lot.
Son Charged in Murder of Cybersecurity ‘Genius’
Cops arrest son of fatally stabbed Cyberwolf co-founder after his DNA is found on alleged murder weapon
#BHUSA: How Supply-Chain Attacks Change the Economics of Mass Exploitation
Black Hat keynoter warns that supply-chain attackers can do much more damage and advocates for platform vendors to do more
Zoom Pays $85m to Settle Privacy Suit
Video-conferencing company drops millions to settle class action claiming it violated users’ privacy rights
US Seeks Espionage Retrial for Chinese Researcher
Efforts to retry academic under China Initiative branded “racial profiling” by groups representing Asians in the US
Personal Data Breach Reports Fall Despite Rising Attacks
There was a surprising decline in personal data breach reports to the ICO in FY 20/21 despite rising attacks and breaches.
Over 60 Million Americans Exposed Through Misconfigured Database
Researchers trace mega-leak to little known marketing company
