Tag Archive for: Announcing

Wall Street eyes cybersecurity, with Goldman Sachs announcing $125 million investment


Growing concerns over cybersecurity vulnerabilities in the United States are prompting record investments from firms to protect critical industries.

FBI Director Christopher Wray said last month that intelligence officials were “concerned” about the possibility of Russian cyberattacks against critical U.S. infrastructure in the wake of Russia’s war with Ukraine.

“The reason we’re concerned about it is not just based on our longstanding understanding of how the Russians operate, but it’s actually the product of specific investigative work and surveillance work that we’ve been doing all together,” Wray told an audience at the Detroit Economic Club in March.

Wray’s comments came a few weeks before Tuesday’s announcement that Goldman Sachs planned to expand its reach in supply chain cybersecurity, investing $125 million in a strategic partnership with a company that serves energy, government and aerospace and defense accounts.

Nikhil Gupta, a professor with New York University’s Tandon School of Engineering, who is affiliated with the NYU Center for Cyber Security, told ABC News the investment was part of a growing trend.

Over the past year, several private investment firms have invested hundreds of millions of dollars in cybersecurity. Former U.S. Treasury Secretary Steve Mnuchin’s Liberty Strategic Capital spent $525 million to acquire mobile security vendor Zimperium last month; Turn/River Capital acquired security policy management firm Tufin for $570 million earlier this month; and software security giant McAfee sold its Enterprise business to Symphony Technology Group for $4 billion dollars in March 2021.

Gupta noted that “more than 70% of manufacturing is conducted by actually small and medium-sized companies, and these companies don’t have resources to invest in upgrading their computers or, or implementing cybersecurity solutions.”

He added, “A lot of times they are manufacturing companies and…

Source…

BlackBerry resisted announcing major flaw in software powering cars, hospital equipment


The back-and-forth between BlackBerry and the government highlights a major difficulty in fending off cyberattacks on increasingly internet-connected devices ranging from robotic vacuum cleaners to wastewater-plant management systems. When companies such as BlackBerry sell their software to equipment manufacturers, they rarely provide detailed records of the code that goes into the software — leaving hardware makers, their customers and the government in the dark about where the biggest risks lie.

BlackBerry may be best known for making old-school smartphones beloved for their manual keyboards, but in recent years it has become a major supplier of software for industrial equipment, including QNX, which powers everything from factory machinery and medical devices to rail equipment and components on the International Space Station. BadAlloc could give hackers a backdoor into many of these devices, allowing bad actors to commandeer them or disrupt their operations.

Microsoft security researchers announced in April that they’d discovered the vulnerability and found it in a number of companies’ operating systems and software. In May, many of those companies worked with the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency to publicly reveal the flaws and urge users to patch their devices.

BlackBerry wasn’t among them.

Privately, BlackBerry representatives told CISA earlier this year that they didn’t believe BadAlloc had impacted their products, even though CISA had concluded that it did, according to the two people, both of whom spoke anonymously because they were not authorized to discuss the matter publicly. Over the last few months, CISA pushed BlackBerry to accept the bad news, eventually getting them to acknowledge the vulnerability existed.

Then BlackBerry said it didn’t intend to go public to deal with the problem. The company told CISA it planned to reach out privately to its direct customers and warn them about the QNX issue.

Technology companies sometimes prefer private vulnerability disclosures because doing so doesn’t tip off hackers that patching is underway — but also because it limits (or at least delays) any resulting…

Source…

Why Is Fox News Acting As State Media, Announcing Trump’s Lawsuits Before They’re Filed And Failing To Point Out How Frivolous They Are?

As we’ve been pointing out, the Trump campaign, with the help of lawyer Charles Harder, has been suing a list of media enemies over the past week. There was the NY Times, followed by the Washington Post and (probably not) finally, CNN. We’ve detailed why each lawsuit is frivolous, and how they appear to be playing to Trump’s base in a performative manner, attacking the credibility of the media which has done critical reporting on his Presidency, and doing so in a manner that potentially serves two purposes: gets his fans riled up about the media while simultaneously creating a chilling effect on fairly typical journalistic analysis of the Trump administration and campaign.

But I wanted to focus in on a separate point: the effective “state media” of Fox News reporting on these lawsuits in absolutely ridiculous ways. Reporter Gregg Re wrote about the NY Times case, and at least included a link to the filing and noted that “lawsuits for libel against media organizations by public figures must clear a high bar.” But the reporting on the next two lawsuits, done by reporters Brian Flood and Brooke Singman, were terrible. Both of them claimed that reporting on the filing of a federal lawsuit was a Fox News “exclusive.” That’s not what exclusive means, guys.

Also, while Fox News eventually added a link to the filing in the story about the CNN lawsuit and the NY Times one, it initially did not link to the CNN one, and as of this writing has still not linked to the Washington Post filing. Indeed, as you can see above, the reporters almost gloat over the fact that Fox News “obtained” access to the lawsuit — and then failed to provide it to their readers. And with the CNN lawsuit, a search of PACER a couple of hours after the Fox News article went live showed no evidence that the case had actually been filed yet. In other words, it’s likely that someone associated with the campaign or the lawsuit handed the complaint over to Fox News to “break” the “exclusive” story.

And perhaps that explains why the reporting by Flood and Singman is so, so bad. Unlike the story by Re regarding the NY Times lawsuit, this one makes no effort to explain why this lawsuit faces a huge barrier (known as the 1st Amendment). Even worse, it repeats a blatantly false statement from the campaign’s “legal adviser” Jenna Ellis:

“False statements are not protected under the U.S. Constitution; therefore, these suits will have no chilling effect on freedom of the press. If journalists are more accurate in their statements and reporting, that would be a positive development, but not why these suits were filed,” Ellis added.

There is some irony in this statement about false statements being false, but it is. There’s plenty of precedent here, including (most clearly) the United States v. Alvarez (a case we’ve been pointing to a lot lately), which says:

The Court has never endorsed the categorical rule the Government advances: that false statements receive no First Amendment protection.

A good reporter would perhaps point that out in response to Ellis. But it appears that Fox News is less interested in employing good reporters, and more interested in acting as state media, and boosting the President it supports.

This is especially sickening, given that these are attacks on the very 1st Amendment that protects Fox News — and its long history of misleading, inaccurate, and occasionally false statements, that the network is somewhat infamous for. You would think, if it wasn’t subsumed in cultish adherence to the President, that it would recognize the importance of actually continuing to defend the part of the Constitution that allows them to exist. At the very least, you might hope that its reporters would be careful enough to accurately report the law. Apparently that is too much to ask.

Permalink | Comments | Email This Story

Techdirt.

Announcing The Public Domain Game Jam: Gaming Like It’s 1924!

Gaming Like It’s 1924: The Newly Public Domain Game Jam

Happy New Years, everyone. Last year, for the very first time in two decades, the US actually allowed some works to enter the public domain. This represented the end of an era in which copyright maximalist lobbyists had been able to regularly extend copyright terms each year to prevent any new works from entering the public domain. However, the backlash to such practices had become so vocal, and the evidence for why such term extensions were necessary had become so non-existent, that they didn’t even make any serious attempt to extend them again, leading works from 1923 to actually enter the public domain. Well, now it’s 2020, and works from 1924 have entered the public domain.

Last year to celebrate, we held our very first public domain game jam, asking people to create both analog and digital games utilizing newly public domain works. It was a great success with over 30 entries, including some really amazing winners.

This year, we’re doing it again, with the Gaming Like It’s 1924 public domain game jam. The rules are basically the same as last year. For the entire month of January, you can submit your digital or analog games (specific rules are at the link) based on some of the newly public domain works from 1924. If you’re looking for ideas on what works are there, Duke’s Center for the Study of the Public Domain has an excellent list and LifeHacker has called out some highlights as well.

Once again, we’re offering up prizes (with even more choices this year) in a variety of categories: best analog game, best digital game, best adaptation of a 1924 work, best remixing of multiple sources, best “deep cut,” and best visuals. We also have a wonderful and diverse judging panel, that is a mix of gaming and copyright experts (and a few who qualify as both!).

You certainly don’t need to follow the path of those who won last year, but if you want, you should check out last year’s winners (and all the other submissions as well) to get some ideas. The contest is open for the entire month of January, with judging in early February. We hope you’ll consider entering and help demonstrate the value of a robust public domain, and the ability to build on those earlier creative works.

Permalink | Comments | Email This Story

Techdirt.