Mon.Oct 21, 2019

article thumbnail

Russian Hackers Coopted Iranian APT Group's Infrastructure

Data Breach Today

UK and US Intelligence Agencies Report That Turla Group Seized OilRig APT Assets Turla, an advanced persistent threat group with apparent ties to Russia, seized attack infrastructure and tools used by OilRig, an Iranian APT group, U.K. and U.S. intelligence agencies have jointly reported. They say Turla used the coopted infrastructure to conduct its own reconnaissance and attacks.

IT 162
article thumbnail

A Brief History of Russian Hackers' Evolving False Flags

WIRED Threat Level

Most hackers know how to cover their tracks. But Russia’s elite groups are working at a whole other level.

Security 100
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Clinton Email Probe Cites 38 for Violations

Data Breach Today

State Dept. Report: No 'Persuasive Evidence' of Deliberate Mishandling of Classified Info The State Department's years-long review of former Secretary Hillary Clinton's use of a private email server found that although 38 current or former department officials violated government security policies, there was no "persuasive evidence of systemic, deliberate mishandling of classified information.

article thumbnail

UK/US investigation revealed that Russian Turla APT masqueraded as Iranian hackers

Security Affairs

A joint UK and US investigation has revealed that the Russian cyber espionage group Turla carried out cyber attacks masqueraded as Iranian hackers. According to the Financial Times, a joint UK and US investigation revealed that Russia-linked cyberespionage group Turla conducted several cyber attacks in more than 35 countries masqueraded as Iranian hackers.

article thumbnail

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

article thumbnail

Zappos' Offer to Breach Victims: A 10 Percent Discount

Data Breach Today

Proposed Data Breach Settlement Follows Supreme Court's Refusal to Hear Appeal Zappos is close to settling a long-running class action lawsuit filed by consumers over a 2012 data breach. The online shoe and clothing retailer's proposed compensation would be a 10 percent discount on a future online purchase. A federal judge has granted preliminary approval to the deal.

Retail 140

More Trending

article thumbnail

Assange Denied Delay for US Extradition Hearing

Data Breach Today

British Judge Says Five-Day Hearing for WikiLeaks Founder Will Begin in February A British judge has denied WikiLeaks founder Julian Assange's request to delay a five-day hearing, slated to begin Feb. 25, on whether he should be extradited to the United States to face espionage charges.

113
113
article thumbnail

Jamf Nation is an Apple community, not just a Jamf community

Jamf

From an email list to nearly 100,000 members, see why Jamf Nation has become a one-stop-shop for those charged with managing Apple devices.

72
article thumbnail

EU Council Presidency Releases Revised Draft of ePrivacy Regulation

Hunton Privacy

On October 4, 2019, the Presidency of the European Council published its revised text (the “Revised Draft”) of the Proposal for a Regulation Concerning the Respect for Private Life and the Protection of Personal Data in Electronic Communications (the “Draft ePrivacy Regulation”). The Revised Draft was released in preparation for the Working Party on Telecommunications and Information Society’s meeting, which took place on October 11, 2019 (the “WP Tele”) and introduces limited amendments compare

GDPR 58
article thumbnail

Avast internal network breached for the second time by sophisticated hackers

Security Affairs

The popular security firm Avast disclosed today a security breach that impacted its internal network accessed via a compromised VPN profile. The security firm Avast disclosed today a security breach that impacted its internal network, according to a statement published by the company, the intent of the hackers was to carry out a supply chain attack.

Access 52
article thumbnail

How and Why Should You Be Tracking Geopolitical Risk?

Geopolitical risk is now at the top of the agenda for CEOs. But tracking it can be difficult. The world is more interconnected than ever, whether in terms of economics and supply chains or technology and communication. Geopolitically, however, it is becoming increasingly fragmented – threatening the operations, financial well-being, and security of globally connected companies.

article thumbnail

IBM Cloud Pak for Data 2.5: Bringing open source to the core

IBM Big Data Hub

IBM is announcing the latest update to the IBM Cloud Pak for Data platform, Version 2.5. We are extremely excited for this release, as it brings to a head three key areas we’ve been building towards over the last year and a half: Red Hat integration, new key built-in capabilities and last but not the least, a heavy focus on open source.

Cloud 51
article thumbnail

Czech Police and Intelligence agency dismantled Russian Spy ring on its soil

Security Affairs

Czech police and intelligence services have identified a Russian espionage network operating having a nerve center in its Prague embassy. Czech police and intelligence services have dismantled a Russian espionage network operating that was operating via its Prague embassy. The officials were helped by peers at the National Organised Crime Centre (NCOZ).

IT 51
article thumbnail

Researchers Turn Alexa and Google Home Into Credential Thieves

Dark Reading

Eight Amazon Alexa and Google Home apps were approved for official app stores even though their actual purposes were eavesdropping and phishing.

article thumbnail

Winnti APT group uses skip-2.0 malware to control Microsoft SQL Servers

Security Affairs

Security experts have a new malware, dubbed skip-2.0 used by the China-linked APT group to establish a backdoor in Microsoft SQL Server systems. Security experts at ESET have discovered a new malware, dubbed skip-2.0, used by the Chinese Winnti cyberespionage group to gain persistence on Microsoft SQL Server systems. The Winnti group was first spotted by Kaspersky in 2013, according to the researchers the gang has been active since 2007.

article thumbnail

7 Pitfalls for Apache Cassandra in Production

Apache Cassandra is an open-source distributed database that boasts an architecture that delivers high scalability, near 100% availability, and powerful read-and-write performance required for many data-heavy use cases. However, many developers and administrators who are new to this NoSQL database often encounter several challenges that can impact its performance.

article thumbnail

U.S. Government, Military Personnel Data Leaked By Autoclerk

Threatpost

The travel reservation data, along with personal details, of hundreds of thousands was discovered in a database exposed online for all to see.

article thumbnail

Details of the Olympic Destroyer APT

Schneier on Security

Interesting details on Olympic Destroyer, the nation-state cyberattack against the 2018 Winter Olympic Games in South Korea. Wired's Andy Greenberg presents evidence that the perpetrator was Russia, and not North Korea or China.

44
article thumbnail

In the Workplace, Safety Is Sexy. And It All Starts With Your HR Department

Adam Levin

Maintaining workplace safety can seem like a rare form of torture–videos and quizzes and talks and such. For most of us, it’s a necessary chore. But despite the looks among employees with each new H.R. training session, the work that happens in those conference rooms at least in theory translates to profits. The inoculation process of onboarding a new hire is profoundly important to the proper functioning of any organization.

IT 43
article thumbnail

Microsoft Aims to Block Firmware Attacks with New Secured-Core PCs

Dark Reading

Partnerships with Intel, Qualcomm, and AMD will bring a new layer of device security that alters the boot process to detect firmware compromise.

article thumbnail

Reimagined: Building Products with Generative AI

“Reimagined: Building Products with Generative AI” is an extensive guide for integrating generative AI into product strategy and careers featuring over 150 real-world examples, 30 case studies, and 20+ frameworks, and endorsed by over 20 leading AI and product executives, inventors, entrepreneurs, and researchers.

article thumbnail

OCR Provides Insight into Enforcement Priorities and Breach Trends

HL Chronicle of Data Protection

Regulators, industry experts, and researchers provided insight into health privacy and security enforcement trends, emerging threats, and new tools at a recent conference focused on the Health Insurance Portability and Accountability (HIPAA) regulatory framework. Moving into 2020, organizations with health data should be aware of: Shifting OCR enforcement priorities; Regulators’ continued attention to key HIPAA compliance activities; The changing threat landscape for health data; and.

Risk 40
article thumbnail

Turning Vision to Reality: A New Road Map for Security Leadership

Dark Reading

Among the takeaways from a Gartner Symposium/Xpo session: who should be accountable for data security, why security groups should stop thinking of themselves as protectors, and the consequence of locking down 'dumb' users.

article thumbnail

This is your gateway to Data Intelligence

Collibra

Standing still is never an option. That’s what makes our field so exciting. There’s a constant flow of new devices, new apps, new channels, new infrastructures, new capabilities, new markets, new data (of course) and new expectations for that data. Everything is dynamic, everything keeps changing, and just trying to keep up is exhausting but exhilarating. .

article thumbnail

CILIP?s first Thai accreditation at Chulalongkorn University, Bangkok

CILIP

CILIP?s first Thai accreditation at Chulalongkorn University, Bangkok. CILIP is delighted to announce that two courses at Chulalongkorn (Chula) University have been awarded CILIP accreditation, recognising that they provide solid preparation for professional practice and a suitable base for anybody entering the library, information and knowledge management professions.

article thumbnail

How to Migrate From DataStax Enterprise to Instaclustr Managed Apache Cassandra

If you’re considering migrating from DataStax Enterprise (DSE) to open source Apache Cassandra®, our comprehensive guide is tailored for architects, engineers, and IT directors. Whether you’re motivated by cost savings, avoiding vendor lock-in, or embracing the vibrant open-source community, Apache Cassandra offers robust value. Transition seamlessly to Instaclustr Managed Cassandra with our expert insights, ensuring zero downtime during migration.

article thumbnail

This is your gateway to Data Intelligence

Collibra

Standing still is never an option. That’s what makes our field so exciting. There’s a constant flow of new devices, new apps, new channels, new infrastructures, new capabilities, new markets, new data (of course) and new expectations for that data. Everything is dynamic, everything keeps changing, and just trying to keep up is exhausting but exhilarating. .

article thumbnail

The Benefits of a Records Management App

Archive Document Data Storage

As Brexit looms, the ADDS team has seen a rise in the number of clients reviewing their processes around three management topics: time, money and people. This blog details the key features of ActiveFile, a records management app used to manage onsite file rooms, and explains how it can make businesses more efficient and productive. Track every file.

article thumbnail

Free Webinar— Information Governance Plans Stalling? 5 Things You Need this Wednesday

IG Guru

Join us for this informative webinar on Wednesday, October 23, 2019 2:00-2:45 pm EDT (GMT-4) 1 pm CDT; 12 pm MDT; 11 am PDT 7 pm British Time (GMT+1); 8 pm Central Europe Time (GMT +2) *If you’re unable to attend the live event, register and we will send you the replay shortly after the […]. The post Free Webinar— Information Governance Plans Stalling?

article thumbnail

New Way Found to Use Alexa, Google to ‘Voice Phish’ and Eavesdrop on Users

Threatpost

Developer interfaces used by Security Research Labs researchers to turn digital home assistants into ‘Smart Spies’.

article thumbnail

Entity Resolution Checklist: What to Consider When Evaluating Options

Are you trying to decide which entity resolution capabilities you need? It can be confusing to determine which features are most important for your project. And sometimes key features are overlooked. Get the Entity Resolution Evaluation Checklist to make sure you’ve thought of everything to make your project a success! The list was created by Senzing’s team of leading entity resolution experts, based on their real-world experience.

article thumbnail

Tuesday’s Relativity Fest 2019 Sessions: eDiscovery Trends

eDiscovery Daily

As we noted yesterday , the 2019 Relativity Fest conference is going on this week, CloudNine is once again here as a Sponsor and Exhibitor and I will be covering the show for eDiscovery Daily. Let’s check out some of the sessions lined up for today (including the one I’m speaking at!). This year, Relativity Fest is October 20 through October 23 in Chicago at The Hilton Chicago (a full three weeks later than last year).

article thumbnail

Avast Foils Another CCleaner Attack

Dark Reading

'Abiss' attackers used an older VPN profile to get into Avast's network and targeted its CCleaner utility.

IT 51
article thumbnail

Avast Network Breached As Hackers Target CCleaner Again

Threatpost

Avast said it believes that threat actors are again looking to target CCleaner in a supply chain attack.

IT 51