article thumbnail

China-linked Budworm APT returns to target a US entity

Security Affairs

The Budworm cyber espionage group (aka APT27 , Bronze Union , Emissary Panda , Lucky Mouse , TG-3390 , and Red Phoenix) is behind a series attacks conducted over the past six months against a number of high-profile targets, including the government of a Middle Eastern country, a multinational electronics manufacturer, and a U.S.

article thumbnail

Key aerospace player Safran Group leaks sensitive data

Security Affairs

It collaborates with Airbus, the second-largest aerospace company globally after Boeing, to manufacture aerospace equipment. Also, the company manufactures surface-to-air defense systems and missiles. It is crucial to ensure that leaked keys are in longer bit-lengths and encoded using secure encryption/hashing algorithms.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

China-Linked APT15 group is using a previously undocumented backdoor

Security Affairs

APT15 has been active since at least 2010, it conducted cyber espionage campaigns against targets worldwide in several industries, including the defense, high tech, energy, government, aerospace, and manufacturing. Once executed the command the backdoor returns output through DNS.

article thumbnail

The Hacker Mind Podcast: Hacking Teslas

ForAllSecure

Even so, the car manufacturers carved out large groups of codes. Since then, car manufacturers have improved on this. Certainly no one uses 40 bit encryption anymore. So the thing was that one major German car manufacturer had the standard pin of 1234. It wasn't very robust. It was a mere 40 bit key length.

article thumbnail

Addition to Washington Breach Law Imposes Retailer Liability in Payment Card Breaches

Hunton Privacy

Under a Washington law effective July 1, 2010, certain entities involved in payment card transactions may be liable to financial institutions for costs associated with reissuing payment cards after security breaches. For example, there is no liability if the account information was encrypted at the time of the breach.

Retail 40
article thumbnail

Is India's Aadhaar System Really "Hack-Proof"? Assessing a Publicly Observable Security Posture

Troy Hunt

We are rapidly approaching a "secure by default" web and the green padlock is becoming the norm ( about two thirds of all browser traffic is now encrypted ). A great resource for getting a quick snapshot of how a site implements their SSL / TLS / HTTPS ("encryption of traffic", for the masses) is SSL Labs.

Security 111
article thumbnail

MY TAKE: How state-backed cyber ops have placed the world in a constant-state ‘Cyber Pearl Harbor’

The Last Watchdog

The Obama sanctions helped security analysts and the FBI piece together how Bogachev, around 2010, began running unusual searches on well-placed PCs he controlled, via Gameover Zeus infections. Then somewhere along the way, Bogachev commenced moonlighting as a cyber spy for the Russian government. That was a glitch. What’s coming next?

IoT 171