Cyber-Security

[GordMay]

Here’s how much your personal information is worth to cybercriminals – and what they do with it

“Data breaches have become common, and billions of records are stolen worldwide every year. Most of the media coverage of data breaches tends to focus on how the breach happened, how many records were stolen and the financial and legal impact of the incident for organizations and individuals affected by the breach. But what happens to the data that is stolen during these incidents? ...”

Much More ➥ https://theconversation.com/heres-ho...with-it-158934

“Dark Web Price Index 2021" ➥ https://www.privacyaffairs.com/dark-...ce-index-2021/

“Verizon Data Breach Investigations Report” ➥ https://enterprise.verizon.com/resou...-and-analysis/

[flightlead404]

Its how I paid for my boat lol (advising customers how to fix their issues, that is)

[GordMay]

“Zero-trust security: Assume that everyone and everything on the internet is out to get you – and maybe already has”
For cybersecurity, your best bet is to assume that the enemy has already slipped inside.
More ➥ https://theconversation.com/zero-tru...ady-has-160969

[GordMay]

U.S. says majority of multimillion-dollar ransom payment to hackers recovered

The U.S. Justice Department has recovered the majority of a multimillion-dollar [75 bitcoin] ransom payment to hackers after a cyberattack that caused the operator of the nation's largest fuel pipeline [Colonial Pipeline] to halt its operations last month, officials said Monday.

The operation to recover the cryptocurrency from the Russia-based hacker group, DarkSide, is the first undertaken by a specialized ransomware task force created by the Biden administration's Justice Department. It reflects what U.S. officials say is an increasingly aggressive approach to deal with a ransomware threat that in the last month has targeted critical industries around the world.

More ➥ https://www.cbc.ca/news/business/pip...ered-1.6056673

[GordMay]

Major media websites go down worldwide

Financial Times, New York Times, Bloomberg News, and Guardian websites have crashed for reasons unknown.

➥ https://www.aljazeera.com/economy/20...down-worldwide

This news may, or may not, belong in this thread.

[GordMay]

Apple to withhold a new privacy feature in China

Apple Inc says a new “private relay” feature designed to obscure a user’s web browsing behaviour from internet service providers and advertisers will not be available in China for regulatory reasons.

The feature was one of a number of privacy protections Apple announced at its annual software developer conference on Monday, the latest in a years-long effort by the company to cut down on the tracking of its users by advertisers and other third parties.

Apple said it also will not offer “private relay” in Belarus, Colombia, Egypt, Kazakhstan, Saudi Arabia, South Africa, Turkmenistan, Uganda and the Philippines.

More ➥ https://www.aljazeera.com/economy/20...ature-in-china


Related:

What do Apple’s new privacy settings mean for you?
➥ https://www.aljazeera.com/economy/20...s-mean-for-you

Facebook is pushing back on Apple’s new privacy rules
➥ https://www.aljazeera.com/economy/20...-privacy-rules

[GordMay]

"Cloud Security: A Primer for Policymakers” ~ by Tim Maurer & Garrett Hinck [Carnegie Endowment org]
The shift to cloud computing has helped improve cybersecurity, but it isn't without risk.
Mapping out those risks and their impacts is vital to ensuring the cloud remains safe and secure.

Here ➥ https://carnegieendowment.org/2020/0...kers-pub-82597
or
PDF ➥ https://carnegieendowment.org/files/...ecurity-V3.pdf

[GordMay]

Criminal gangs thought their messages were encrypted — but messaging system came from the FBI

... The operation known as Trojan Shield led to police raids in 16 nations. More than 800 suspects were arrested and more than 32 tons of drugs — including cocaine, cannabis, amphetamines and methamphetamines — were seized along with 250 firearms, 55 luxury cars and more than $148 million US in cash and cryptocurrencies.

The seeds of the sting were sown in 2018 when law enforcement agencies took down a company called Phantom Secure that provided customized end-to-end encrypted devices to criminals, according to court papers. Unlike typical cell phones, the devices don't make phone calls or browse the internet — but allow for secure messaging. As an outgrowth of the operation, the FBI also recruited a collaborator who was developing a next-generation secure-messaging platform for the criminal underworld called ANOM. The collaborator engineered the system to give the agency access to any messages being sent...

More ➥ https://www.cbc.ca/news/world/fbi-en...ting-1.6057831

[GordMay]

Meat company JBS confirms it paid $11M US ransom in cyberattack
Brazil-based JBS SA, the world's largest meat processing company, says it paid the equivalent of $11 US million [a little more than $13 million Cdn] to hackers, who broke into its computer system, late last month.
The FBI has attributed the attack to REvil, a Russian-speaking gang, that has made some of the largest ransomware demands on record, in recent months.
Investigations are ongoing.

[GordMay]

Time to change your password, again
Changing your password can be annoying. But with the rise of online scams, perhaps it’s time to swap “password1234” for something less obvious.
A compilation of 8.4 billion words, phrases, and previous password leaks, was shared on a hacker forum in what Cyber News, a website specializing in cybersecurity, is calling “RockYou2021”.

“RockYou2021"
Largest password compilation of all time leaked online with 8.4 billion entries.
➥ https://cybernews.com/security/rocky...lation-leaked/

[Seymore]

Are you ready? Here is all the data Facebook and Google have on you

https://www.theguardian.com/commenti...on-you-privacy

[GordMay]

Fastly global internet outage: why did so many sites go down — and what is a CDN, anyway?
“... While it’s too early to provide a comprehensive diagnosis of the incident, the internet (once it was accessible again) quickly pointed to the culprit: Fastly ...”
More ➥ https://theconversation.com/fastly-g...-anyway-162371

[GordMay]

China, Russia exploiting high-tech in ‘hybrid warfare’ costs up to $100B per year in Canada: report

"Hostile military and intelligence forces are targeting Canada in a new “sophisticated, multifaceted” type of warfare using a range of tools from criminal gangs to cyber-hackers to high-tech companies such as Huawei and China Telecom, the author of a newly released national security report alleges.
The report, by Clairvoyance Cyber Corp., which provides consulting services for CSIS and the RCMP, was completed in 2019 for Public Safety Canada, and warns that state-sponsored cybercrime could be costing Canada an estimated $100 billion per year. According to the report, nations including China and Russia are conducting cyber and human espionage that targets individuals, institutions and corporations in Canada ..."

More ➥ https://globalnews.ca/news/7975330/c...llions-canada/

[GordMay]

Ransomware, data breach, cyberattack:
What do they have to do with your personal information, and how worried should you be?

“The headlines are filled with news about ransomware attacks tying up organizations large and small, data breaches at major brand-name companies and cyberattacks by shadowy hackers associated with Russia, China and North Korea. Are these threats to your personal information?

If it’s a ransomware attack on a pipeline company, probably not. If it’s a hack by foreign agents of a government agency, maybe, particularly if you’re a government employee. If it’s a data breach at a credit bureau, social media company or major retailer, very likely.

The bottom line is that your online data is not safe ...”

More ➥ https://theconversation.com/ransomwa...-you-be-162404

[GordMay]

“Major ransomware attack aimed at tech provider leaves other companies scrambling”
“... Cybersecurity experts say the REvil gang, a major Russian-speaking ransomware syndicate, appears to be behind the attack that targeted Kaseya, using its network-management package as a conduit to spread the ransomware through cloud-service providers.

"The number of victims here is already over a thousand and will likely reach into the tens of thousands," said cybersecurity expert Dmitri Alperovitch of the Silverado Policy Accelerator think tank. "No other ransomware campaign comes even close in terms of impact." ...”
More ➥ https://www.cbc.ca/news/world/cybera...seya-1.6089578

Important Notice ~ Kaseya
➥ https://helpdesk.kaseya.com/hc/en-gb...-July-4th-2021

CISA-FBI Guidance for MSPs and their Customers Affected by the Kaseya VSA Supply-Chain Ransomware Attack
➥ https://us-cert.cisa.gov/ncas/curren...ted-kaseya-vsa