"Computer Scientists Unveil Novel Attacks on Cybersecurity"

"Computer Scientists Unveil Novel Attacks on Cybersecurity"

A multi-university and industry research team led by computer scientists at the University of California, San Diego, discovered two novel attacks targeting the conditional branch predictor in high-end Intel processors that could compromise billions of processors being used today. They found an attack that is the first to target a feature in the branch predictor known as the Path History Register (PHR), which tracks branch order and branch addresses. This attack exposes more information with greater precision than previous attacks that lacked branch predictor structure insight.

Submitted by Gregory Rigby on

"FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures"

"FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures"

The US Federal Trade Commission (FTC) recently announced that it will send a total of $5.6m in refunds to customers of Ring, a home camera provider, due to a settlement with Ring over security and privacy failings. Ring, which was bought by tech giant Amazon in 2018, reached a settlement with the FTC in 2023 over charges that the company allowed employees and contractors to access consumers’ private videos and failed to implement security protections, enabling hackers to take control of consumers’ accounts, cameras, and videos.

Submitted by Adam Ekwall on

"Cybersecurity Researchers Spotlight a New Ransomware Threat – Be Careful Where You Upload Files"

"Cybersecurity Researchers Spotlight a New Ransomware Threat – Be Careful Where You Upload Files"

A team of researchers from Florida International University's (FIU) Cyber-Physical Systems Security Lab, in collaboration with Google Senior Research Scientist Guliz Seray Tuncay, delved into how hackers can gain access to a user's computer files via the File System Access Application Programming Interface (API), which allows web applications in modern browsers to interact with users' local file systems. The threat affects Google Chrome and Microsoft Edge browsers, but not Apple Safari or Mozilla Firefox.

Submitted by Gregory Rigby on

"HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees"

"HelloKitty Ransomware Rebranded and Back in Business, Looking for Employees"

As reported by security researcher "3xp0rt," a hacker claiming to be the creator of "HelloKitty" ransomware has rebranded the gang as "HelloGookie." HelloKitty is known for hacking the game company CD Project Red in 2021 and stealing the source code for Cyberpunk 2077, Witcher 3, and Gwent. The threat actor debuted with a massive data dump on a new dark web website. HelloGookie uploaded a 750GB archive with Witcher 3 builds and Cyberpunk 2077 source code. This article continues to discuss the rebranding of the HelloKitty ransomware. 

Submitted by Gregory Rigby on

IEEE Secure Development Conference (SecDev)

"SecDev​ ​is​ ​a​ ​venue​ ​for​ ​presenting​ ​ideas,​ ​research,​ ​and​ ​experience​ ​about​ ​how​ ​to​ ​develop​ ​secure systems. It focuses on theory,​ ​techniques,​ ​and​ ​tools​ ​to ​'build​ ​security​ ​in' to​ ​existing​ ​and​ ​new​ ​computing​ ​systems, and does not focus on simply discovering​ ​the​ ​absence​ ​of​ ​security.​

 

6th IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA)

"IEEE TPS-ISA is an international multidisciplinary forum for presentation of state-of-the art innovations, and discussion among academic, industrial researchers, and practitioners on issues related to trust, privacy and security in emerging smart and intelligent systems and applications."

11th International Conference on Internet of Things: Systems, Management and Security (IOTSMS 2024)

"The international conference on Internet of Things: Systems, Management, and Security (IoTSMS) aims at soliciting original ideas on the broad area of IoT, including challenges and opportunities, concepts and applications, and future trends. The IoTSMS aims to facilitate discussions among academics and IoT practitioners and make positive contributions to the field."

24th International Conference on Software Quality, Reliability and Security (QRS)

"This conference gives engineers and scientists from both industry and academia a platform to present their ongoing work, relate their research outcomes and experiences, and discuss the best and most efficient techniques for the development of reliable, secure, and trustworthy systems."

 

9th IEEE European Symposium on Security and Privacy

"Euro S&P has traditionally focused on technical aspects of computer security and privacy research. We consider the scope of the symposium to include economic, ethical, legal, and social aspects and interdependencies of computer security and privacy. We especially encourage submissions that address global aspects of computer security and privacy, including issues particular to parts of the world and communities that are often neglected."

 

Subscribe to