U.S. Cyber Command attacks hackers

Amid growing concern about foreign interference in the November elections, military hackers at the United States Cyber Command have started attacking the Trickbot botnet. In this short article, we’ll tell you what’s happening and why it matters for the elections.

What is the Trickbot botnet?

Trickbot is botnet malware: malware that can be used to create networks of infected computers and then coordinate their activity. Originally a banking Trojan, the malware has evolved over the past several years and can now be used to spread ransomware and other forms of malware. It …

Notes from VB2020 localhost

The annual Virus Bulletin security conference was held last week; as has been the case with so many other events this year, the proceedings were fully remote, leading the organizers to call the 2020 instalment of the conference “VB2020 localhost”.

Checklist 202: The T2 Vulnerability with Patrick Wardle

This week’s big news: an “unpatchable” hardware vulnerability affecting Apple’s T2 security chip! But how serious is it, really? We spoke with Mac security expert Patrick Wardle to separate the facts from the clickbait headlines. We’ll cover:

the technical backgroundwho’s impacted (and what they can do)

Parsing the T2 story

The Apple security community was abuzz this week with news of an unpatchable vulnerability in the T2 security chip found in newer Macs.

To begin with, a quick refresher: The T2 chip is essentially a co-processor that handles much of the Mac’s security functionality, …

Russian APT Fancy Bear may have compromised federal agency

An unnamed U.S. federal agency has been breached, according to a recent report by the Cybersecurity and Infrastructure Security Agency (CISA), and third-party analysts now believe that Fancy Bear, the notorious Russian Advanced Persistent Threat (APT) group, is the likely culprit. 

In this short article, we’ll provide some details about the incident, give you some more background to the story, and share some of CISA’s security recommendations for organizations.

What happened?

The CISA report did not disclose the date of the hack or the name of the agency affected. But it did describe …

Is mobile sensor data the future of tracking?

In this short article, we’ll introduce you to this emerging phenomenon, tell you how it works, and offer some thoughts about the future of privacy.

Checklist 201: Cybersecurity Awareness Month

October is National Cybersecurity Awareness Month, and the National Cybersecurity Alliance has kicked things off by releasing some timely recommendations for 2020.

FinSpy spyware for macOS discovered

Researchers at Amnesty International have just announced the discovery of FinSpy spyware variants that target macOS and Linux users. In this article, we’ll tell you what they found, share some technical details uncovered by Amnesty’s malware analysts, and explain what it means for security and privacy.

What is FinSpy?

FinSpy is commercial spyware, produced by a private company and sold to law enforcement and intelligence agencies around the world. There are (arguably) legitimate uses of such monitoring software, for example in criminal and anti-terrorism investigations; however, FinSpy’s manufacturers have come under fire …

Checklist 200: TikTok, TV, and Time for a Checklist

On this week’s Checklist, we discuss a rapidly changing App Store story, we talk about streaming services and privacy, and we show you how to keep your wits in a cybersecurity emergency.

Apple updates iOS, macOS, and more

Apple has issued its initial round of updates to iOS 14, just a little over a week after the new mobile OS was first released to the public. In addition, there were updates to macOS, iPadOS, tvOS, and watchOS as well.

TikTok and WeChat bans on hold for now

With the United States threatening to make good on its promise to pull them from U.S. app marketplaces, popular apps TikTok and WeChat are granted a last-minute stay of execution.

macOS Big Sur security and privacy guide

Apple will soon release macOS Big Sur to the public — and it looks like it will bring a number of important security and privacy enhancements. In this guide, we’ll tell you everything you need to know about the Mac’s new and improved OS!

About the name and number

Ever since 2013, Apple has used California landmarks to name each new version of their flagship OS, and macOS “Big Sur” is no exception. However, there is one major change this time around: the version numbering system has been updated. Instead of following …

New iPads, Apple Watches, and more at the Apple Special Event

Apple held a special event this week to introduce several new devices and features. Here are some of the highlights: 

Apple Watch Series 6

As expected, Apple used the special event to introduce the Apple Watch Series 6. Although a number of cosmetic and design changes were mentioned (including a new (PRODUCT)RED case, seamless watch bands, and more faces than ever before), the Apple Watch Series 6 was presented first and foremost as a next-gen health and wellness device.

The Apple Watch Series 6 has a number of new health features, but perhaps …

Checklist 199: iOS 14 Privacy Features with Nick Leon

With iOS 14 out for less than 24-hours, now is an excellent time to look at some of its privacy improvements. Nick Leon joins us to address them.

Checklist 198: Listener Tracking in Podcasts with Rob Walch

Did you know that some podcasts actually track their listeners? Rob joins us today to talk about how the tracking occurs and about a new tool on the way to fight it.

Is App Notarization broken?

Security researchers have discovered a variant of Shlayer malware — an extremely common macOS threat — that appears to have circumvented Apple’s App Notarization process.

What is geofencing?

Federal judges in the United States are starting to push back against police requests for “geofence warrants”, citing constitutional concerns. In this short article, we’ll introduce you to the issue, tell you what it means for your privacy, and explain how you can limit the ability of the government (and others) to track you.

What is geofencing?

Broadly speaking, geofencing refers to the practice of creating a virtual boundary around a real-world physical area. The technique is often used by marketers and advertisers who want to show more relevant ads or offer …

Checklist 197: Staring at the Cloud with Dominique West

On this Checklist, we talk with cloud security expert Dominique West. The conversation covers career paths in infosec, today’s changing threat landscape, common misconceptions about cloud security, and the importance of community to the industry.

Guide to iOS 14 Privacy Features

Apple will soon release iOS 14 to the public, and it has a number of important privacy enhancements that you should know about. In this guide, we’ll walk you through iOS 14’s privacy features, and give you tips and how-tos to help you make the most of them.

Data Sharing Controls

First up, we’ll take a look at some new features that let you control how (or if) you share your data with apps.

App tracking controls

This one is a real game-changer. Apps track us in a variety of ways, mostly so …

Ransomware attacks by amateur Iranian hackers used “off-the-shelf” malware

Threat researchers are reporting that low-skilled Iranian hackers carried out a number of successful attacks against enterprise targets in June. The incident highlights the growing threat of off-the-shelf malware to businesses and individuals.

In this short article, we’ll tell you what happened, give you some background to the issue, and let you know what you can do to stay safe.

The incident

According to researchers at Singapore-based Group-IB, newbie hackers in Iran managed to penetrate the networks of a number of companies across the globe and infect their systems with Dharma ransomware. The …

Checklist 196 : The Art of Mac Malware: Analysis with Patrick Wardle

Security pro Patrick Wardle is writing a book, and he may just want your help. We’ll cover some Mac malware basics, talk about the book he’s writing, and how the security and Mac communities can help on episode 196 of The Checklist, brought to you by SecureMac.