Equifax data leak exposes 143 million driver’s licenses, SSN, credit card numbers

"The information came mostly from US residents, but a percentage also involved UK and Canadian citizens and the company is working with authorities from these countries. Equifax reports that it discovered the leak on July 29th and took steps to stop the intrusion. It then hired a cybersecurity firm to determine the extent of the intrusion and what damage was done. The company reports that it has involved law enforcement, but it’s not clear at this point how the intruders entered the system or exactly what they took."

Continue ReadingEquifax data leak exposes 143 million driver’s licenses, SSN, credit card numbers

Documents burn as Trump escalates Russia conflict, ordering SF consulate vacated

"The order to leave the consulate and an official diplomatic residence in San Francisco — home to a longstanding community of Russian emigres and technology workers — escalated an already tense diplomatic standoff between Washington and Moscow, even for those who have long monitored activities inside the closely monitored building."

Continue ReadingDocuments burn as Trump escalates Russia conflict, ordering SF consulate vacated

465,000 patients have implanted pacemakers with critical security vulnerability

"Pacemakers from Abbott Laboratories contain critical flaws that allow hijackers within radio range to seize control while the pacemakers are running. The update will require patients to visit a clinic where doctors will put the pacemakers in backup mode while the firmware is being patched. The Abbott letter said that, for certain patients, the update should be performed 'in a facility where temporary pacing and pacemaker generator change are readily available, due to the very small estimated risk of firmware update malfunction.'"

Continue Reading465,000 patients have implanted pacemakers with critical security vulnerability

U.S. May Bomb ISIS in the Philippines

"While President Trump has praised Duterte’s approach to combating drug addiction — namely, encouraging vigilantes to extrajudicially murder drug users by the thousands — Tillerson suggested that this policy was not good, but also irrelevant to the question of whether the U.S. should intervene against ISIS on Duterte’s behalf."

Continue ReadingU.S. May Bomb ISIS in the Philippines

How Donald Trump’s travel ban has hit Iran’s tourism renaissance

"For visitors the lure is the culture and history of a sophisticated civilisation, with no fewer than 19 Unesco heritage sites, which had been inaccessible for decades when Iran was shunned as a pariah state. Now the country is also viewed as safe in comparison with other states offering similar attractions in the region – Syria, Egypt, Turkey, Tunisia, Libya – places which have become no-go areas due to the varying degrees of threats from terrorism or civil war. Mr Trump’s repeated threat to withdraw the US from the nuclear agreement, achieved through years of painstaking negotiations, is creating concern that Iran will be pushed back towards isolation."

Continue ReadingHow Donald Trump’s travel ban has hit Iran’s tourism renaissance

Broadcom chip bug opened 1 billion phones to a Wi-Fi-hopping worm attack

"It fills the airwaves with probes that request connections to nearby computing devices. When the specially devised requests reach a device using the BCM43xx family of Wi-Fi chipsets, the attack rewrites the firmware that controls the chip. The compromised chip then sends the same malicious packets to other vulnerable devices, setting off a potential chain reaction." Continue reading

Continue ReadingBroadcom chip bug opened 1 billion phones to a Wi-Fi-hopping worm attack

Medical Devices Are the Next Security Nightmare

"There's a need to protect patients, so that attackers can't hack an insulin pump to administer a fatal dose. And vulnerable medical devices also connect to a huge array of sensors and monitors, making them potential entry points to larger hospital networks. That in turn could mean the theft of sensitive medical records, or a devastating ransomware attack that holds vital systems hostage until administrators pay up." Continue reading

Continue ReadingMedical Devices Are the Next Security Nightmare