Hacking News

Jaguar Land Rover has enlisted a cartoon musician to help it fill what it says are 5,000 electronics and software vacancies across the firm. Noodle, “guitarist” of virtual band Gorillaz, is fronting the JLR advertising campaign. The band is actually the work of Blur frontman Damon Albarn and his cartoonist mate Jamie Hewlett, with the […]

With the Doubleswitch attack, a hijacker takes control of a victim’s account through one of several attack vectors. People who have not enabled an app-based form of multifactor authentication for their accounts are especially vulnerable. For instance, an attacker could trick you into revealing your password through phishing. If you don’t have multifactor authentication, you

Computer systems have now been restored at two universities which were forced offline following ransomware attacks. On Wednesday 14 June, both University College London and Ulster University were infected with ransomware in separate incidents. Both universities have referred to the ransomware potentially exploiting a zero-day vulnerability, but it is currently unclear if there is a

Security researchers at the Ben-Gurion University of the Negev (BGU) found that attackers can secretly obtain data (such as encryption keys, passwords and files) from extremely secure or air-gapped networks via the row of status LEDs that exists in networking devices such as LAN routers and switches. Read more

Checkmarx is an Application Security software company, whose mission is to provide enterprise organizations with application security testing products and services that empower developers to deliver secure applications. Amongst the company’s 1,000 customers are 5 of the world’s top 10 software vendors and many Fortune 500 and government organizations. Read more  

It is too late for a reasonable person to think the proliferation of end-to-end encryption can be stopped, and yet it appears a collection of Western governments are determined to see how much blood they can get from this particular stone. For anyone interested in protecting their communications, a quick Google search will reveal a

As artificial intelligence proliferates, companies and governments are aggregating enormous data sets to feed their AI initiatives. Although privacy is not a new concept in computing, the growth of aggregated data magnifies privacy challenges and leads to extreme ethical risks such as unintentionally building biased AI systems, among many others. Read more

Uncover the major findings from Rapid7’s latest research “Under the Hoodie: Actionable Research from Penetration Testing Engagements.” We shed light on the “dark art” by revealing the process, techniques, and tools that go into pen testing. Read more

Democrats are uniting behind a simple message about Russian hacking during the 2016 election: Donald Trump doesn’t care. Even as the president lashes out at the series of Russia-related probes besieging his administration, Democrats say Trump has yet to express public concern about the underlying issue with striking implications for America’s democracy — the digital

  Two months before the U.S. presidential election, international hackers slipped into the computer systems of at least four Florida school district networks in the hopes of stealing the personal data of hundreds of thousands of students. They infected the systems with malware — malicious software — that turned off the logs recording who accessed