Facebook, FBI Face Brewing Conflict Over Data Collection

Facebook, which has been under scrutiny for its privacy policies, just settled with the U.S. government for a record $5 billion fine. But the FBI has now complicated that picture by more aggressively monitoring potential threats on all social media platforms. Last month, the FBI asked for third party vendors to submit proposals by August 27 for examining public data to “proactively identify and reactively monitor threats to the United States and its interests” on Facebook, Twitter and other social media platforms. Continue reading Facebook, FBI Face Brewing Conflict Over Data Collection

Privacy Concerns Grow Over Facial Recognition Data Sets

Social networks, dating services, photo websites and surveillance cameras are just some of the sources of a growing number of databases compiling people’s faces. According to privacy advocates, Microsoft and Stanford University are among the many groups gathering images, with one such repository holding two million images. All these photos will be used to allow neural networks to build pattern recognition, in the quest to create cutting edge facial recognition platforms. Some companies have collected images for 10+ years. Continue reading Privacy Concerns Grow Over Facial Recognition Data Sets

Apple’s 2020 iPhones to Introduce 5G and Design Updates

Industry insider Ming-Chi Kuo reported that Apple plans to introduce some significant changes in its 2020 iPhones, including 5G connectivity and design upgrades. But owners of iPhones and other iOS devices are likely concerned about the recent news that every one of the world’s current 1.4 billion iPhones and iPads can be hacked. Israel-based Cellebrite demonstrated that it can perform a “full file extraction” on any iOS device, as well as on high-end Android devices. Further, law enforcement can pay for that ability without having to send devices to Cellebrite. Continue reading Apple’s 2020 iPhones to Introduce 5G and Design Updates

Cyber Threat Alliance’s Early Sharing Aims to Stop Hackers

The nonprofit Cyber Threat Alliance (CTA) has organized its members, which includes some big tech companies such as Cisco, McAfee, Palo Alto Networks and Symantec, to share knowledge about software bugs and hacking threats, to alert their customers and limit the damage. To do so, the companies have decided to put cybersecurity ahead of the competition. Dubbed “early sharing,” the strategy goes into action as government-linked groups in China, Iran, North Korea and Russia run devastating hacking campaigns. Continue reading Cyber Threat Alliance’s Early Sharing Aims to Stop Hackers

San Francisco Is First to Prohibit Use of Facial Recognition

The San Francisco Board of Supervisors, in an 8-to-1 vote, outlawed the use of facial recognition by police and other agencies, making it the first major U.S. city to do so. The vote comes as many U.S. cities are turning to facial recognition to identify criminals, while civil rights advocates warn of its potential for mass surveillance and abuse. But San Francisco city supervisor Aaron Peskin, who sponsored the bill, said its passage sent a message, particularly from a city known as a center for new technology. Continue reading San Francisco Is First to Prohibit Use of Facial Recognition

New Australian Legislation Challenges Unbreakable Encryption

Australia passed a law that challenges the right of tech companies to sell devices with unbreakable encryption. The Telecommunications and Other Legislation Amendment (Assistance and Access) Act 2018, which took effect last month, covers all devices sold in Australia. But if Apple, for example, creates a back door for its iPhones sold there, authorities in other countries previously stymied by Apple’s tough encryption could demand the same access. Australia’s law said it can’t ask a company to build universal decryption. Continue reading New Australian Legislation Challenges Unbreakable Encryption

U.S. Charges Members of China’s Elite APT10 with Hacking

The Trump administration has charged two Chinese citizens accused of involvement in a state-sponsored effort to steal information from government agencies, various businesses and managed service providers. The hackers are said to be members of China’s elite APT10 group, and prosecutors claim there are direct links between the accused and China’s Ministry of State Security. The U.S. says China’s cyberattacks have become significant national and economic security threats. The latest charges indicate that Chinese authorities directed the hacking campaign. Continue reading U.S. Charges Members of China’s Elite APT10 with Hacking

Australian Law Will Allow Agencies to Circumvent Encryption

In the United States, Congress has resisted calls by the FBI and Department of Justice that would require tech companies to create a “back door” to allow them to bypass devices’ encryption. But other U.S. allies are moving forward on just such legislation, with Australia about to adopt a tough encryption law permitting intelligence agencies these powers. The country believes that its agencies need the power to circumvent encryption to protect it from terrorist attacks during the holiday season, often a high-threat period. Continue reading Australian Law Will Allow Agencies to Circumvent Encryption

Federal Government Takes Additional Steps to Block Huawei

The U.S. government is reportedly pushing for foreign allies to stop using hardware from China-based Huawei Technologies Co. According to people familiar with the initiative, the government is aiming to convince wireless and Internet service providers to avoid telecom equipment that comes from Huawei in an effort to increase security. Washington officials are particularly concerned about countries that host military bases. The U.S. and Australia already have bans in place to curb the risk of cyberattacks. Huawei is the world’s largest telecommunications provider. Continue reading Federal Government Takes Additional Steps to Block Huawei

Facebook Says Spammers, Not Nation-State, Behind Breach

Facebook’s internal investigation into the recent data breach that affected 30 million user accounts has concluded that the hack was the work of spammers disguised as a digital marketing company, and not foreign nationals. Facebook believes the attack was initiated by a group of Facebook and Instagram spammers that intended to make money by means of deceptive advertising. The FBI is continuing its investigation into the hack, which is the worst security breach in the social network’s 14-year history. Continue reading Facebook Says Spammers, Not Nation-State, Behind Breach

Facebook Offers More Hack Details, Exposes Web Scraping

Facebook downgraded the number of users hacked two weeks ago to 30 million, revealing that the personal information stolen was more substantial for 14 million of the those hacked, including gender, religion, telephone number, email addresses and computing devices used to connect to Facebook. Hackers also captured the last 15 people or things the user had searched for on Facebook and the last 10 physical locations he had checked into. Another 15 million profiles were scraped for names and contact information. Continue reading Facebook Offers More Hack Details, Exposes Web Scraping

Justice Department Accuses Russian Spies of Cyberattacks

The Justice Department’s National Security Division claims that seven hackers suspected of working with Russia’s GRU military intelligence unit were part of a conspiracy to hack multiple organizations including the World Anti-Doping Agency, the Democratic National Committee, a nuclear energy company and several media outlets. The Fancy Bear cyber espionage group, also known as Sofacy or APT28, is accused of launching a disinformation campaign leading up to the 2016 U.S. presidential election, and “hacking to obtain non-public, health information about athletes and others in the files of anti-doping agencies in multiple countries.” Continue reading Justice Department Accuses Russian Spies of Cyberattacks

China Reportedly Used Tiny Chips to Hack U.S. Companies

According to a Bloomberg Businessweek cover story today, Chinese spies infiltrated nearly 30 U.S. companies including Amazon and Apple by embedding tiny chips into servers in the technology supply chain. In 2015, malicious microchips were reportedly embedded in servers bound for U.S. companies, which resulted in compromised software used in numerous hardware devices. While the report cites former government officials and “senior insiders” at Apple, both Amazon and Apple — as well as motherboard manufacturer Supermicro and China’s Ministry of Foreign Affairs — have firmly disputed the findings. Continue reading China Reportedly Used Tiny Chips to Hack U.S. Companies

Apple Working on Portal for Law Enforcement Data Requests

According to a recent letter from Apple general counsel Kate Adams to Senator Sheldon Whitehouse (D-Rhode Island), Apple has plans to develop an online portal this year that would assist law enforcement in requesting user data in addition to educating police about the type of data that would be available for request. While the iPhone maker has provided user data to law enforcement in the past, including data stored in its iCloud, the company has sparred with law enforcement and government agencies regarding the encryption of its CE devices. Continue reading Apple Working on Portal for Law Enforcement Data Requests

Facebook Deletes Fake Accounts in Windup to Next Elections

Stating that it had detected a political influence campaign potentially targeting the midterm elections, Facebook removed 32 pages and fake accounts that were active around contentious issues across the political spectrum. One was a sequel to last year’s “Unite the Right” rally and another was a campaign to abolish ICE. Facebook was not able to link the pages to Russia, but officials did say that “some of the tools and techniques” were similar to those used by the Kremlin-linked Internet Research Agency (I.R.A.). Continue reading Facebook Deletes Fake Accounts in Windup to Next Elections