ProtonMail names one of the attackers behind a major DDoS this summer

End-to-end encrypted email service ProtonMail has named one of the attackers behind a sustained distributed denial of service attack (DDoS) it suffered earlier this summer. The attack took its email service offline for up to several minute long stretches at a time, even with mitigation measures in place. It says the UK’s National Crime Agency […]

View More ProtonMail names one of the attackers behind a major DDoS this summer

Tesla’s new bug bounty protects hackers — and your warranty

Good news if you’re into hacking your car, you probably won’t void your warranty. The electric car giant confirmed the move in a tweet this week. Tesla’s product security policy now says that if, through “good-faith security research” you brick your car, the company will reflash the software over-the-air or at a service center. It’s […]

View More Tesla’s new bug bounty protects hackers — and your warranty

Watchdog says 2020 Census systems are riddled with security flaws

With a census just two years away, the Census Bureau has a cybersecurity problem. That’s a key takeaway from the congressional watchdog, the Government Accountability Office, which oversees the government’s spending. In a new report published Thursday, the non-partisan agency said that the government’s Census Bureau has only a few months to fix thousands of […]

View More Watchdog says 2020 Census systems are riddled with security flaws

Weak passwords let a hacker access internal Sprint staff portal

It’s not been a great week for cell carriers. EE was hit with two security bugs and T-Mobile admitted a data breach. Now, Sprint is the latest phone giant to admit a security lapse, TechCrunch has learned. Using two sets of weak, easy-to-guess usernames and passwords, a security researcher accessed an internal Sprint staff portal. Because […]

View More Weak passwords let a hacker access internal Sprint staff portal

Outgoing Facebook CSO Alex Stamos will join Disrupt SF to talk cybersecurity

At Disrupt SF 2018, Facebook’s soon-to-be-former chief security officer Alex Stamos will join us to chat about his tenure in the top security role for the world’s biggest social network, how it feels to have weathered some of the biggest security and privacy scandals to ever hit the tech industry and securing U.S. elections in […]

View More Outgoing Facebook CSO Alex Stamos will join Disrupt SF to talk cybersecurity

RiskRecon’s security assessment services for third party vendors raises $25 million

In June of this year, Chinese hackers managed to install software into the networks of a contractor for the U.S. Navy and steal information on a roughly $300 million top secret submarine program. Two years ago, hackers infiltrated the networks of a vendor servicing the Australian military and made off with files containing a trove […]

View More RiskRecon’s security assessment services for third party vendors raises $25 million

What can we learn from the Dixons data breach that blew up after disclosure

European consumer electronics retailer Dixons Carphone’s apologetic admission yesterday that a 2017 data breach was in fact considerably worse than it first reported suggests disclosures of major breaches could get a bit more messy — at least under the early reign of the region’s tough new data protection framework, GDPR — as organizations scramble to comply with […]

View More What can we learn from the Dixons data breach that blew up after disclosure

Dixons Carphone now says ~8.8M more customers affected by 2017 breach

A Dixons Carphone data breach that was disclosed earlier this summer was worse than initially reported. The company is now saying that personal data of 10 million customers could also have been accessed when its systems were hacked. The European electronics and telecoms retailer believes its systems were accessed by unknown and unauthorized person/s in 2017, although […]

View More Dixons Carphone now says ~8.8M more customers affected by 2017 breach

Chinese “hackers” are sending malware via snail mail

In what amounts to one of the simplest but most baffling forms of social engineering, hackers from China have taken to sending CDs full of malware to state officials, leading the Multi-State Information Sharing and Analysis Center, a government security outfit, to release a warning detailing the scam. The trick is simple: a package arrives […]

View More Chinese “hackers” are sending malware via snail mail

Google makes it easier for G Suite admins to investigate security breaches

Google is announcing a fair number of updates to G Suite at its Next conference today, most of which focus on the user experience. In addition to those, though, the company also launched a new security investigation tool for admins that augments the existing tools for preventing and detecting potential security issues. The new tool […]

View More Google makes it easier for G Suite admins to investigate security breaches

Social SafeGuard scores $11M to sell alerts for brand-damaging fakes

Social SafeGuard, a 2014-founded U.S. startup which sells security services to enterprises aimed at mitigating a range of digital risks that lie outside the corporate firewall, has closed an $11 million Series B funding round, from AllegisCyber and NightDragon Security. It’s hoping to ride the surge in awareness around social media fakery — putting the […]

View More Social SafeGuard scores $11M to sell alerts for brand-damaging fakes

Pondering an IPO, cyber security company CrowdStrike raises $200 million at over $3 billion valuation

CrowdStrike, the developer of a security technology that looks at changes in user behavior on networked devices and uses that information to identify potential cyber threats, has reached a $3 billion valuation on the back of a new $200 million round of funding. The company’s hosted endpoint security technology has seen tremendous adoption worldwide and […]

View More Pondering an IPO, cyber security company CrowdStrike raises $200 million at over $3 billion valuation