Content by Scott Ferguson

Ethical Guidelines for AI, Machine Learning Development

Scott Ferguson  •  July 8, 2019

Enterprises need to consider ethical guidelines when creating new types of artificial intelligence and machine learning, says Diana Kelley of Microsoft, who explains how companies can create responsible new technologies.

Hackers Slurp $500,000 Through 7-Eleven Mobile Payment App

Scott Ferguson  •  July 5, 2019

Hackers appear to have accessed a new mobile payment app for 7-Eleven customers in Japan, taking about $500,000 from 900 customers over several days. Poor passwords and authentication designs by the company are likely to blame, according to media reports.

'Silence' Gang Tied to Bank Heist in Bangladesh - Report

Scott Ferguson  •  July 3, 2019

A recent $3 million bank heist in Bangladesh is likely the handiwork of "Silence," a Russian-speaking gang known for its slow and methodical attacks against banks and ATMs, according to an analysis by security firm Group-IB.

US Cyber Command Warns of Outlook Vulnerability Exploits

Scott Ferguson  •  July 3, 2019

The U.S. Cyber Command has issued a warning that attackers are attempting to exploit an older vulnerability in Microsoft Outlook to plant remote access Trojans or other types of malware within government networks. Some researchers say the exploits could be tied to an Iranian-backed threat group.

Facebook Takes Down Pages Loaded With Malware

Scott Ferguson  •  July 2, 2019

Malicious actors are increasingly using social media platforms to spread malware to unsuspecting victims. In the latest incident, Facebook removed more than 30 pages from its platform after security analysts with Check Point Research found that a hacker had loaded them with malware.

Sophos Proof-of-Concept Exploit Shows Dangers of BlueKeep

Scott Ferguson  •  July 1, 2019

Sophos is the latest security firm to create a proof-of-concept exploit for the BlueKeep vulnerability in older versions of Windows. The company echoed several government agencies that have urged businesses to patch their devices.

UpGuard: Unsecured Amazon S3 Buckets Exposed 1 TB of Data

Scott Ferguson  •  July 1, 2019

Several unsecured Amazon S3 buckets belonging to IT services firm Attunity left at least 1 TB of data, including files from companies such as Netflix, TD Bank and Ford, exposed to the internet, UpGuard researchers disclosed. Although the databases have been secured, an investigation is continuing.

Ex-Equifax CIO Gets 4-Month Prison Term for Insider Trading

Scott Ferguson  •  June 28, 2019

A former Equifax CIO who sold his stock in the company after learning about its 2017 data breach several months before the public and government agencies were informed has been sentenced to four months in prison for insider trading. Another former Equifax executive was sentenced on similar charges last year.

ENISA Gets Permanent Mandate as EU Tackles Cybersecurity

Scott Ferguson  •  June 27, 2019

With the European Union's Cybersecurity Act now in full force, the European Union Agency for Network and Information Security, or ENISA, has a new name and a permanent mandate - as well as more money and staff - to oversee a range of cybersecurity issues.

Wipro Attack Tied to Larger Phishing Campaign: Analysis

Scott Ferguson  •  June 27, 2019

The cyberattack earlier this year against Indian outsourcer Wipro, as well as several of its customers, is part of a much larger, multiyear phishing campaign that involves many more companies used as jumping off points, according to RiskIQ, which says the attackers apparently are manipulating gift cards.

Alleged AlphaBay Moderator Faces Racketeering Charge

Scott Ferguson  •  June 24, 2019

An alleged moderator of the AlphaBay underground marketplace has been indicted for facilitating sales on the darknet site before law enforcement shut it down.

NASA's Jet Propulsion Lab a Frequent Hack Victim: Audit

Scott Ferguson  •  June 21, 2019

Hackers have repeatedly stolen valuable data - including launch codes and flight trajectories for spacecraft - from NASA's Jet Propulsion Laboratory in recent years, according to a new inspector general audit, which describes weak security practices.

Facebook's Libra Cryptocurrency Prompts Privacy Backlash

Scott Ferguson  •  June 19, 2019

With Facebook now officially preparing to launch its own cryptocurrency, Libra, in 2020, the social media giant is facing a privacy and security backlash both in the U.S. and Europe. Lawmakers and regulators are raising concerns about the offering based on the company's poor history of protecting user data.

DHS Is Latest to Warn of BlueKeep Vulnerability

Scott Ferguson  •  June 17, 2019

Yet another warning has been issued about the BlueKeep vulnerability in older versions of Microsoft Windows. The latest comes from the Department of Homeland Security, which tested a remote code execution exploit.

Xenotime Group Sets Sights on Electrical Power Plants

Scott Ferguson  •  June 17, 2019

Xenotime, the group suspected of launching the Trisis malware attack in Saudi Arabia during 2017, has over the past few months shifted its focus beyond the oil and gas industry to target electrical plants and utilities, security firm Dragos reports.