Vulnerability puts users of privacy-focused Blackphone at risk
Blackphone is marketed as the most secure Android phone available so it's bad news that researchers at endpoint protection specialist SentinelOne have uncovered a vulnerability in the Blackphone One that would allow some of the phone’s protection features to be bypassed.
The vulnerability means that apps could be installed without asking for permissions, so they could access features and information on the phone without the user’s knowledge.
No backdoors thanks, we're Dutch
Unlike other countries, notably the UK and China, that have been busy passing laws to allow them to snoop on encrypted communication, the Dutch government has decided that strong encryption is vital to the health of its digital economy and the privacy of its citizens.
The country's minister of security and justice Ard van der Steur writes in an official statement that the Dutch executive cabinet endorses, "...the importance of strong encryption for Internet security to support the protection of privacy for citizens, companies, the government, and the entire Dutch economy. Therefore, the government believes that it is currently not desirable to take legal measures against the development, availability and use of encryption within the Netherlands".
Google Nexus 5X: An Android Marshmallow smartphone worthy of your attention [Review]
Phones have been gradually getting bigger in the past few years. That makes for better displays for watching videos and viewing documents and web pages, but there’s a downside too.
For many people it makes them more awkward to carry around and can mean they’re harder to use as a phone because you need two hands to operate them.
A home alarm system that could make you less safe
These days almost everything is online thanks to the internet of things. That can, of course, be good since it allows you to control and monitor devices from wherever you are. It can also be a problem as we've seen. Sometimes the security of these devices is a bit lacking. I fully expect that one day one of my colleagues here will turn off my lights just because he can.
A bigger problem arises when the security weakness is actually your home security system. That seems to be the case with Texecom as UK-based security researcher Luca Lo Castro found out when he purchased the system.
Global eDiscovery market passes $10 billion
The eDiscovery process of extracting data for regulatory or legal purposes is generally seen as a bit of a niche in the IT field.
However, a new study by research specialists IDC forecasts that the market for worldwide eDiscovery services reached $8.2 billion at the end of 2015. This combined with an eDiscovery software market of just over $2 billion means the global eDiscovery market has passed the $10 billion threshold.
Ransom32 is JavaScript-powered ransomware affecting Windows, Mac and Linux
Cross-platform viruses and malware are something of a rarity, but now there's a first-in-its-class JavaScript-based ransomware that can infect Mac, Windows and Linux. Ransom32 uses the Node.js runtime environment running on the NW.js platform to burrow into the target operating system and hold files to ransom.
While on the face of it, this is just another example of ransomware that encrypts files and seeks Bitcoin payments to decrypt them, it is more than that. The NW.js framework not only allows for cross-platform infections, but also means it is harder to detect. Ransom32 bears some resemblance to CryptoLocker and has been dubbed Ransomware-as-a-Service.
New World Hackers take Trump offline -- but when does hacking vigilantism infringe on free speech?
My colleague Brian Fagioli has referred to the web being rather like the Wild West. I'm inclined to agree, but that's not to say that we have reached the same conclusion for the same reasons. For me, the web -- like the Wild West -- is not a world filled with danger, but one occupied by vigilantes. As a proponent of free speech, I find this concerning. One of the most highly-lauded of vigilantes is the disparate group marching under the ragged banner of Anonymous.
One of its taglines is 'We Are Anonymous', a phrase that can be uttered by anyone as there is no membership process -- if you say you are part of Anonymous, you are part of Anonymous. The group is not, for the most part, organized. Individuals and factions can fight for or against whatever cause they want, just like real-world vigilante groups. But Anonymous is not alone. There are hacking collectives and other online crusaders who see fit to take the law into their own hands. This might sound wonderful, but it's not necessarily a good thing. As New World Hackers demonstrate, attacks can target the wrong people and restrict free speech.
Windows doesn't top the vulnerability list for 2015, but Microsoft as a whole does
Software vulnerabilities are a daily event it seems, but some systems just have more of them. When we think of this a couple of names usually spring to mind -- Flash and Java. However, according to the new list being published by CVE Details, they aren't quite at the top, nor is Microsoft's oft-maligned operating system.
Basing its numbers on "distinct" vulnerabilities, the security firm has released its top 50 naughty list of 2015. Leading the way was, in fact, Apple, which claimed the top two spots -- Mac OS X with a number of 384 vulnerabilities, closely followed by iPhone OS (or iOS as most people like to call it) with 375.
American hacking group killed the BBC's online presence to test anti-ISIS attack powers
A huge DDoS attack took the BBC's websites offline on Thursday, as well as the broadcaster's iPlayer streaming service. The disruption lasted for several hours, and now a US-based group of 'cyber hackers' that usually targets ISIS has claimed responsibility.
The New World Hacking group is a self-proclaimed hacktivist group that supports Anonymous. It says that despite effectively knocking the BBC from the face of the web, it was only meant to be a test of server power rather than a targeted attack on the corporation.
Microsoft's promise of spying warnings is an empty gesture
Yesterday we reported that Microsoft will warn users of 'state-sponsored' attacks on their accounts. Sounds great, but does it actually mean anything? Is it a useful service by the tech giant, or just PR bluster?
Considering the covert nature of spying and digital attacks, coupled with legislation around the world, it seems likely that the announcement is little more than meaningless hot air. In the UK, for instance, the planned snooper's charter would make it illegal for companies to alert users to hacking and surveillance by British agencies.
US is spying on its allies for 'national security' purposes
Even though US president Barack Obama promised to end the eavesdropping on highly-positioned officials among US allies, which was revealed during the Edward Snowden events, it seems that some officials are still under close watch by the NSA.
Among those is the prime minister of one of US' biggest allies -- Israel. According to a Wall Street Journal report, the White House decided to keep certain high-ranking officials under close watch, including Netanyahu and Recep Tayyip Erdogan, president of Turkey.
Adobe Flash gets the final security patch of 2015
There’s nothing quite like kicking a dead corpse, and that’s basically what Adobe is doing with its once powerful product Flash.
Adobe has issued a security update for Flash, one which, according to it, addresses "critical vulnerabilities that could potentially allow an attacker to take control of the affected system".
The bad security habits enterprise IT needs to leave behind in 2016
2015 has played host to some significant cyber breaches. Experian, TalkTalk and Ashley Madison all fell foul of malicious attacks, and they weren’t the only ones. In 2016, businesses need to resolve to do better -- but the question is, how?
What bad security habits need to be given up to ensure a safer, more secure experience next year? What lengths could, and indeed should have businesses gone to this year in order to prevent some of the data breaches that occurred?
Clueless UK government wants you to help define its digital strategy
The UK government has been heavily criticized for the way it is attempting to control the way in which people use the internet -- blocking porn, unfettered surveillance and so on. The snooper's carter in particular has been the subject of much disapproval, and in an apparent bid to avoid further complaints, the government is now crowdsourcing ideas for internet policies.
In an article entitled UK Digital Strategy - the next frontier in our digital revolution (a document replete with language and references akin to an elderly parent talking about some aspect of modern culture they don't quite understand), Digital Economy Minister Ed Vaizey explains that he is looking for "ideas from public and industry on the UK's digital strategy".
Samsung adds SmartThings and security to IoT TVs
The Internet of Things is the hot buzz-phrase right now and Samsung has an iron in the fire with SmartThings. Its line of products is also compatible with those made by other manufacturers -- that's the biggest catch with all of this, as not everything is compatible with all competing products.
Now Samsung is bringing its SmartThings platform to its own line of TVs and all 2016 models will offer built-in compatibility. This allows for control of your home right from the screen in your living room, or wherever you may have the product.
© 1998-2026 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.