/
authors:"Greg Otto" × limpar

Resultados

6 casos · pág. 1/1

cyberscoop.com · low

Op-ed urges NIST and NSA to evaluate vaultless, keyless pseudonymization to reduce the value of stolen data

An op-ed argues that encryption alone leaves a gap in data protection, because data must be decrypted when it is processed and then moves through clouds, vendors, backups, analytics tools and AI pipelines. The authors propose vaultless, keyless pseudonymization, which replaces sensitive values with realistic, format-preserving substitutes…

cyberscoop.com · high

BAE Systems cybersecurity incident halts Bankruptcy Noticing Center operations for all US federal bankruptcy courts

A cybersecurity incident at defense contractor BAE Systems has stopped the production and delivery of bankruptcy notices for every US federal bankruptcy court. BAE operates the Bankruptcy Noticing Center (BNC) systems and websites on behalf of the federal judiciary. The Administrative Office of the U.S. Courts confirmed the incident on Oc…

securityaffairs.com · · 3 fontes · 3 atualizações high

Pegasus zero-click spyware confirmed on Belgrade University rector's iPhone days before Serbia's election; prosecutor also targeted

Citizen Lab, working with the SHARE Foundation, confirmed with high confidence that the iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, was infected with NSO Group's Pegasus in 2026 through a zero-click exploit (thehackernews.com, securityaffairs.com,…

wired.com · · 5 fontes · 5 atualizações high

AdFection: Discover-Tech ads delivered Candiru zero-click spyware to at least 45 Al Jazeera devices, Citizen Lab reports

The Citizen Lab disclosed AdFection on 15 October 2026. It calls this the first public technical confirmation of zero-click mercenary spyware delivered to real devices through targeted online advertising. The Israeli ad firm Discover-Tech (spelled Discovere-Tech by bleepingcomputer.com) posed as a legitimate ad company while acting as a b…

thehackernews.com · · 11 fontes · 15 atualizações critical

eMudhra exits SSL/TLS business after eight intermediate CA keys found trivially weak; Mozilla and Chrome distrust ECC root

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge certificates for any domain. A researcher credited as Wayne reported it on October…