Symmetrical Cryptography Pioneer Targets the Post-Quantum Era

December 11, 2024 at 04:47PM Cavero Quantum has developed a cryptographic system using symmetric keys to counter future threats from quantum computing and harvest now, decrypt later attacks. Their unique method ensures mutual key generation without sharing information publicly, aiming to enhance privacy and security across various industries, including finance and telecommunications. ### Meeting Takeaways: … Read more

Sneaky Skimmer Malware Targets Magento Sites Ahead of Black Friday

November 27, 2024 at 12:52PM Attackers are exploiting Magento e-commerce sites with new card-skimming malware, identified by Sucuri. The malware dynamically steals payment information via JavaScript injections. Researchers recommend regular security audits, deploying Web application firewalls, maintaining updated software, using strong passwords, and implementing file integrity monitoring to safeguard against such attacks, especially during high-traffic … Read more

Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity

November 20, 2024 at 07:34AM Microsoft has announced a Windows Resiliency Initiative to enhance security and reliability, introducing features like Quick Machine Recovery and user-mode security tools. Updates include a hardware-backed security baseline, administrator protection, personal data encryption, and a bug bounty expansion. These developments align with the Secure Future Initiative launched in November 2023. … Read more

Microsoft shares more details on Windows 11 admin protection

November 19, 2024 at 08:42AM Microsoft detailed a new Windows 11 admin protection feature in preview, utilizing Windows Hello for authentication to secure critical system resources. It restricts admin rights, requiring users to verify actions via PIN or biometrics. This aims to mitigate malware risks by limiting unauthorized access while ensuring legitimate user control over … Read more

iPhones now auto-restart to block access to encrypted data after long idle times

November 11, 2024 at 07:19PM Apple’s iOS 18.1 update introduces a security feature that automatically reboots iPhones after extended idle times. This process re-encrypts data, enhancing protection against unauthorized access and making it more challenging to extract sensitive information. **Meeting Notes Takeaways:** 1. **New Security Feature**: Apple has introduced a new security feature with the … Read more

Akira ransomware is encrypting victims again following pure extortion fling

October 22, 2024 at 11:36AM Akira ransomware is returning to traditional encryption tactics after a hiatus from double extortion. Researchers note a shift towards operational efficiency and tactical adaptability, suspecting the development of a new encryptor. Akira targets vulnerabilities, particularly on ESXi and Linux systems, leveraging compromised credentials and phishing techniques to exploit networks. ### … Read more

Microsoft: Windows Recall now can be removed, is more secure

September 27, 2024 at 02:01PM Microsoft has upgraded its AI-powered Windows Recall feature to enhance security and privacy. The feature, always opt-in, encrypts and filters sensitive content. It now offers stronger default protection for user data, isolation of services, and intentional use, assuring users complete control over their data. Recall will be available for preview … Read more

Controversial Windows Recall AI Search Tool Returns With Proof-of-Presence Encryption, Data Isolation

September 27, 2024 at 01:46PM Microsoft has revamped the controversial Windows Recall feature with enhanced security measures, including proof-of-presence encryption and anti-tampering checks. The AI-powered technology, which creates a searchable digital memory of user activity, will now be turned off by default and comes with tools for permanent deletion. The redesign aims to address privacy … Read more

China’s quantum* crypto tech may be unhackable, but it’s hardly a secret

September 16, 2024 at 04:33AM China is making significant strides in quantum networking leadership and infrastructure using quantum key distribution (QKD). While this seems secure, it doubles bandwidth and has minimal practical applications due to its inefficiency and reliance on short distances. In contrast, public key cryptography is faster, more practical, and immune to quantum … Read more

Oil Giant Halliburton Confirms Cyber Incident, Details Scarce

August 22, 2024 at 02:21PM US oil giant Halliburton confirmed a cyberattack on its Houston offices, engaging external experts to investigate and mitigate the threat. The breach, with ransomware hallmarks, impacted the north Houston campus and global networks. The oil industry remains a lucrative target for ransomware, as seen with Colonial Pipeline’s $4.4 million ransom … Read more