Tag: white | Page 3

Antivirus used to spread malware, White House ransomware summit

November 1, 2022/in Computer Security

Threat group rides antivirus software to install malware

Researchers at Kaspersky discovered the China-based threat group Cicada targeting Japanese organizations. The group used a spear-phishing email to prompt the install of the legitimate K7Security Suite. However it also included a malicious DLL to install it’s custom LODEINFO backdoor. Because Cicada effectively uses a legitimate security app to sideload the DLL, other security apps may not detect it. Targeted organizations span across media groups, diplomatic agencies, and public sector organizations, indicating the group plans to use the backdoor for cyberespionage.

(Bleeping Computer)

White House organizes ransomware summit

The White House hosted its second International Counter Ransomware Summit starting on October 31st, bringing together three dozen nations as well as private-sector companies. The Summit focused on how to make systems more resilient to attacks overall and disrupting threat actors in the planning stages. Private companies attending included Microsoft, Maniant, Crowdstrike, and Palo Alto Networks. The Biden administration cited the recent ransomware attack on the Los Angeles school district as a factor in deciding to call the summit now.

(AP)

Ed tech company exposed user data

The Federal Trade Commission filed a complaint against the ed tech company Chegg, alleging “careless” security practices that compromised personal data. Based on the filing, these practices data back to 2017. In 2018, sensitive information on about 40 million customers became exposed after a former contractor accessed a third-party database. This included names, emails, passwords, sexual orientation, and parents’ income. SInce then, this dataset appears for sale online. The company also reportedly exposed information of employees, including social security numbers. The complaint chided Chegg for not requiring multi-factor authentication, storing personal data in plain text, a lack of any written security policy until 2021, and using “outdated and weak” encryption.

(Engadget)

Twitter exploring paid verification

According to documents seen by and sources…

Source…

Community gathers to recognize White Cane Safety Day

October 15, 2022/in Mobile Security

COLORADO SPRINGS — Saturday, October 15th, is National White Cane Safety Day. National White Cane Safety Day was established in 1964 by President Lyndon B. Johnson.

It recognizes the accomplishments of people who are blind and visually impaired, and the white cane as a symbol of independence.

The White Cane is an essential tool that gives them the ability to achieve a full and independent life and allows them to move freely and safely from place to place.

Today students and staff of the Colorado School for the Deaf and Blind celebrated in Acacia Park with music performances, games, and art displays.

The outing also served to educate the community about the challenges and triumphs of being blind but more importantly, it gave students a sense of empowerment.

Robin Tueting spoke with KOAA News5 about the importance of what White Cane represents.

_____

Watch KOAA News5 on your time, anytime with our free streaming app available for your Roku, FireTV, AppleTV and Android TV. Just search KOAA News5, download and start watching.

Source…

The Definition Of White Hackers, And What They Might Be Hacking

July 16, 2022/in Computer Security

In the past few years, more and more companies are hiring white hackers to spy on their data. This is because such hackers can help companies figure out where their vulnerabilities lie and fix them quickly so that they don’t get hacked.

Some hackers specialize in different areas, like finding vulnerabilities or developing malware. However, there are also white hackers, who usually specialize in software development and testing.

What is a white hacker?

A white hacker is someone who engages in hacking for the purpose of causing harm, or simply for the fun of it. This can include everything from hacking into personal email accounts to disrupting public networks.

Most white hackers are not affiliated with any specific group or organization, and they tend to hack for their own amusement or for financial gain. However, there is a small but growing contingent of white hackers who are part of organized hacker groups, such as the Chinese National Computer Network Security Center (CN CNS) and the Russian Association for Cryptography Research (RACR).

What might white hackers be attacking?

White hackers typically attack systems that they don’t have permission to access, or systems that they think are vulnerable to attack. They may also target systems that they believe are important to their opponents, or systems that they simply find amusing.

Why do companies need ethical hackers?

Ethical hacking is a process that helps protect computer networks and their data from unauthorized access. The practice of ethical hacking is used by companies to ensure their systems are secure, and to identify any potential vulnerabilities before they can be exploited. To do this, ethical hackers use a variety of tools and techniques, including penetration testing, which is the process of testing the security of a computer system.

There are several reasons companies need ethical hackers. One reason is that malicious hackers often target companies for financial gain. By knowing about potential vulnerabilities, ethical hackers can help protect companies from attack. Additionally, many companies have sensitive information that they want to keep safe from prying eyes. By using ethical hacking techniques, company…

Source…