Lifeboat Foundation

The United States government said today that a multinational law enforcement operation has destroyed Qakbot, also known as QBot, an infamous botnet and malware loader that was responsible for losses that amounted to hundreds of millions of dollars all over the globe, and that they have confiscated more than $8.6 million in illegal cryptocurrencies.

During a news conference held on Tuesday to announce the takedown of the botnet, United States Attorney Martin Estrada referred to the investigation as “the most significant technological and financial operation ever led by the Department of Justice against a botnet.” Duck Hunt was headed by the FBI. For one thing, the federal government developed some software that, when installed on computers that were infected with Qbot, would make the virus useless.

Continue reading “How FBI remotely deleted QBot malware from 700K computers worldwide” »

Finally approved for public release, Baidu’s Ernie Bot app now needs to make itself valuable for new users.

As I reported last week, Baidu became the first Chinese tech company to roll out its large language model—called Ernie Bot—to the general public, following a regulatory approval from the Chinese government. Previously, access required an application or was limited to corporate clients.

I have to admit the Chinese public has reacted more passionately than I had expected.

Sending an email with a forged address is easier than previously thought, due to flaws in the process that allows email forwarding, according to a research team led by computer scientists at the University of California San Diego.

The issues researchers uncovered have a broad impact, affecting the integrity of email sent from tens of thousands of domains, including those representing organizations in the U.S. government—such as the majority of U.S. cabinet email domains, including state.gov, as well as security agencies. Key financial service companies, such as Mastercard, and major news organizations, such as The Washington Post and the Associated Press, are also vulnerable.

It’s called forwarding-based spoofing and researchers found that they can send email messages impersonating these organizations, bypassing the safeguards deployed by email providers such as Gmail and Outlook. Once recipients get the spoofed email, they are more likely to open attachments that deploy malware, or to click on links that install spyware on their machine.

Ensuring security in the software market is undeniably crucial, but it is important to strike a balance that avoids excessive government regulation and the burdens associated with government-mandated legal responsibility, also called a liability regime. While there’s no question the market is broken with regards to security, and intervention is necessary, there is a less intrusive approach that enables the market to find the right level of security while minimizing the need for heavy-handed government involvement.

Imposing a liability regime on software companies may go too far and create unintended consequences. The downsides of liability, such as increased costs, potential legal battles, and disincentives to innovation, can hinder the development of secure software without necessarily guaranteeing improved security outcomes. A liability regime could also burden smaller companies disproportionately and stifle the diversity and innovation present in the software industry.

Instead, a more effective approach involves influencing the software market through measures that encourage transparency and informed decision-making. By requiring companies to be fully transparent about their security practices, consumers and businesses can make informed choices based on their risk preferences. Transparency allows the market to drive the demand for secure software, enabling companies with robust security measures to potentially gain a competitive edge.

Every seven minutes a cyber-attack is reported in Australia.

Millions of Australians have had their data stolen in malicious attacks, costing some businesses tens of millions of dollars in ransom. The federal government is warning the country must brace for even more strikes as cyber gangs become more sophisticated and ruthless.

Continue reading “How cyber-crime has become organised warfare | Four Corners” »

X, formerly known as Twitter, will begin collecting users’ biometric data, according to its new privacy policy that was first spotted by Bloomberg. The policy also says the company wants to collect users’ job and education history. The policy page indicates that the change will go into effect on September 29.

“Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes,” the updated policy reads. Although X hasn’t specified what it means by biometric information, it is usually used to describe a person’s physical characteristics, such as their face or fingerprints. X also hasn’t provided any details about how it plans to collect it.

The company told Bloomberg that the biometrics are for premium users and will give them the option to submit their government ID and an image in order to add a verification layer. Biometric data may be extracted from both the ID and image for matching purposes, Bloomberg reports.

This post is also available in: עברית (Hebrew)

The GhostSec cybergang claims to have breached the FANAP Behnama software, exposing 20GB of data including face recognition and motion detection systems it says are used by the Iranian government to monitor and track its people.

Now the group says it intends to make the data public, “in the interests of the Iranian people, but also in the interests of protecting the privacy of each and every one of us.” Cybersecurity analyst Cyberint commented on the group’s statement, saying that while GhostSec’s actions align with hacktivist principles, they also position themselves as advocates for human rights.

NBC News Global Security Reporter Dan De Luce joins Meet the Press NOW to discuss the latest cyberattack hitting U.S. government agencies.

» Subscribe to NBC News: http://nbcnews.to/SubscribeToNBC
» Watch more NBC video: http://bit.ly/MoreNBCNews.

Continue reading “U.S. hit by cyberattack: ‘Once you plug the dam one place, hackers find some other weakness’” »

I’m excited to share my new opinion article for Newsweek. It advocates for transforming America from a military-industrial complex into a science-industrial complex! Give it a read!

America spends 45 percent of its discretionary federal spending on defense and wars, while around us, the world burns in ways that have nothing to do with fighting or the military. Global warming has escalated into an enormous crisis. A fifth of everyone we know will die from heart disease. And an opioid crisis is reducing the average lifespans of Americans for the first time in decades. There’s plenty of tragedy, fear, and hardship all around us, but it has nothing to do with the need to make more bombs. It does, however, have to do with science.

It seems obvious America should do something different than spend so much of its tax dollars on defense. We should consider halving that money, and directing it to science, transforming America from a military-industrial complex into a science-industrial complex. Despite science and technological progress being broadly responsible for raising the standard of living around the world over the last 50 years, America spends only 3 percent of its GDP ($205 billion) on science and medical research across the federal government. Notably, this is dramatically less than the $877 billion the U.S. will spend on defense this year.

Continue reading “Could We Transform America Into a Science-Industrial Complex?” »