The attack was the first in five years to use Sandworm’s Industroyer malware, which is designed to automatically trigger power disruptions.
Security / Security News
TSA’s Terrorist Watch List Comes for Amtrak Passengers
Plus: Microsoft seizes Russian GRU domains, Cash App’s data breach, and Obama’s disinfo admission.
WatchGuard Didn’t Explicitly Disclose a Flaw Exploited by Hackers
The security vendor kept a critical vulnerability in its firewall appliances quiet even as it was under attack from a Russian hacking group.
The Senate Bill That Has Big Tech Scared
The proposal would stop the biggest platforms from giving themselves an advantage over the little guys. Who’s afraid of a little competition?
Meta Tries to Break the End-to-End Encryption Deadlock
A new report Meta commissioned aims to redefine comprehensive encryption as essential to protecting human rights.
Shutdown of Russia’s Hydra Market Disrupts a Crypto-Crime ATM
More than just a market for illegal drugs, the dark-web site allowed criminals to launder or cash out hundreds of millions in stolen cryptocurrencies.
Fake Cops Scammed Apple and Meta to Get User Data
Plus: Lapsus$ teens hit with charges, Wyze’s security screwup, and Russia’s cyber rampage.
Hunt for Lapsus$ Hackers Leads to a British Teen
Plus: New details emerge about Russian hacks and hackers as the US warns of potential new attacks.
TSA’s First Crack at Guarding Pipelines From Hackers Falls Short
Plus: Anonymous dedicates a hack to Hillary Clinton, Google researchers expose Exotic Lily, and more.
A Developer Altered Open Source Software to Wipe Files in Russia
The author of a popular application pushed out an update containing malicious code in an effort to sabotage computers in the country.