Author: HackWatchit
The internet is a product of a global group effort to build an interoperable network connecting billions of devices, regardless of country, region, or manufacturer. That effort yielded hundreds of protocols defining standards for how devices communicate. The Internet Protocol (IP) is the most widely known, but myths and conspiracies have plagued it since its inception. The myths might be widespread but are easy to dispute. Several organizations, including IEEE, IETF, and ISO, have published standards or Requests for Comments (RFCs) online. These documents can be dense with technical jargon but are a goldmine of information. The current Internet Protocol…
Let’s be honest, talking to your kids about identity theft isn’t probably top of your list. There’s a long list of topics to cover off when you are a parent. But if you take a minute to picture someone stealing your child’s identity or using their personal information to take out a loan for a shiny new car then you’ll probably want to move it closer to the top of your parenting to-do list! What Is Identity Theft? Identity theft occurs when a person’s personal identifying information is used without their permission, usually to commit fraud by making unauthorised purchases…
At Aembit, security and compliance serve as the foundation for everything we do. As a leader in workload identity and access management (IAM), we recognize that our customers depend on us to protect their sensitive data and ensure secure access for their workloads. That’s why we are proud to announce that Aembit has successfully renewed our SOC 2 Type 2 certification, reinforcing our ongoing dedication to the highest standards of security, availability, and confidentiality. What SOC 2 Type 2 Compliance Means SOC 2 Type 2 is a rigorous certification that validates an organization’s ability to maintain effective controls over an…
CrowdStrike is thrilled to announce a collaboration with Oracle that will bring the unified, AI-powered protection of CrowdStrike Falcon® Cloud Security support to Oracle Cloud Infrastructure (OCI). As OCI has become a strategic choice for organizations seeking enterprise-grade performance and security, this expansion improves the visibility and protection to defend against cloud-focused threats. Organizations are accelerating their adoption of cloud infrastructure and services — and adversaries are evolving their techniques to exploit them. They require technology that removes silos to provide a full view of misconfigurations and security risks across the cloud environment. With this expansion, OCI customers can gain…
Gotbit founder Aleksei Andriunin has been extradited to the US to face charges related to market manipulation and wire fraud conspiracy, according to a Feb. 26 statement by the US Attorney’s Office District of Massachusetts.Andriunin was arrested on Oct. 8, 2024, by authorities in Portugal, where he was living. Following his extradition, he appeared in federal court in Boston on Feb. 25 and was ordered to be detained pending a future hearing. On Oct. 31, 2024, a federal grand jury in Boston indicted Andriunin and Gotbit directors Fedor Kedrov and Qawi Jalili on charges of wire fraud and conspiracy to commit…
A malicious PyPi package named ‘automslc’ has been downloaded over 100,000 times from the Python Package Index since 2019, abusing hard-coded credentials to pirate music from the Deezer streaming service. Deezer is a music streaming service available in 180 countries that offers access to over 90 million tracks, playlists, and podcasts. It is offered via an ad-supported free tier or paid subscriptions that support higher audio quality and offline listening. Security firm Socket discovered the malicious package and found that it pirates music by hardcoding Deezer credentials to download media and scrape metadata from the platform. Even though piracy tools aren’t…
While cybersecurity pros spend much of their time immersed in technical reports, risk assessments, and policy documents, fiction offers a refreshing perspective on security and hacking. Great cyber-themed novels can teach lessons on human psychology, cyber warfare, and the ethics of technology while also entertaining and thought-provoking. Here are eight fiction books that every cybersecurity leader should consider adding to their reading list. Daemon – Daniel Suarez Why read it? → Explores the potential dangers of automation, AI, and cyber warfare. In this techno-thriller, a genius game developer creates an autonomous program (daemon) that activates upon his death, unleashing a…
Tom Hanks, one of the most recognizable faces in the world, warns that scammers have swiped his likeness in malicious AI deepfakes. As reported by NBC News, Actor Tom Hanks issued an announcement to his followers saying his name, likeness, and voice have shown up in deepfaked ads that promote “miracle cures” without his consent. The actor posted on Instagram: In the ever-evolving landscape of digital advertising, a new challenge has emerged that blurs the lines between reality and artificial fabrication: AI-generated content using celebrity likenesses. Tom Hanks isn’t the only victim. Earlier in 2024, we saw a malicious AI deepfake…
The post Talkin’ About Infosec News – 11/13/2023 appeared first on Black Hills Information Security.