Content by Jeremy Kirk

Mirai Botnet Code Gets Exploit Refresh

Jeremy Kirk  •  March 19, 2019

Mirai, the powerful malware that unleashed unprecedented distributed denial-of-service attacks in 2016, has never gone away. And now a new version has been equipped with fresh exploits that suggest its operators want to harness the network bandwidth offered by big businesses.

Bitcoin Exchange's CEO Gets Suspended Sentence

Jeremy Kirk  •  March 18, 2019

The former CEO of what was once the world's most popular bitcoin exchange, Mt. Gox, will not serve prison time. Mark Karpelès was sentenced Friday to two and a half years in prison on one charge of falsifying data, but the sentence was suspended. He was cleared of embezzlement and fraud charges.

Anti-Virus on Android: Beware of Low-Quality Apps

Jeremy Kirk  •  March 15, 2019

More than half of 250 anti-virus applications available in Google's Play Store offer insufficient protection against malicious software, according to a new study by testing firm AV Comparatives. One clear takeaway for all Android anti-virus users: Select products carefully.

Fresh POS Malware Strikes Small and Midsize Companies

Jeremy Kirk  •  March 14, 2019

A closely held type of point-of-sale malware, DMSniff, is spreading further while another, GlitchPOS, has also emerged. Despite a surfeit of stolen payment card details on the black market, efforts to steal more continue, highlighting the continuing challenges around card security.

Facebook's Cryptocoin: A Disguised PayPal on a Blockchain?

Jeremy Kirk  •  March 1, 2019

Facebook is edging closer to launching its own cryptocurrency, with a rollout expected this year, The New York Times reports. But some critics argue that the project seems more like a trendy and unnecessary redressing of a PayPal-like system with a blockchain.

Dongle Danger: Operating Systems Don't Defend Memory

Jeremy Kirk  •  February 28, 2019

Windows, MacOS and Linux operating systems don't sufficiently protect memory, making it possible for a fake network card to sniff banking credentials, encryption keys and private files, according to new research. Fixes are in the pipeline, but caution should be used before connecting to peripherals in public areas.

Before Elections, US Cut Russian Trolls' Internet Access

Jeremy Kirk  •  February 27, 2019

The U.S. military curtailed the internet access of an infamous Russian trolling operation around the mid-term elections in November 2018 to stem the spread of noxious disinformation and also directly contacted some of the troll-factory employees by name, the Washington Post reports.

Tech Industry Pushes for Australian Encryption Law Changes

Jeremy Kirk  •  February 26, 2019

Technology organizations say Australia's anti-encryption law passed in December 2018 is already undermining trust in their local operations. The comments come as a Senate committee is reviewing the law - passed in a hurry in December - to consider whether to amend it.

The Gap Between Mobile Apps and Privacy

Jeremy Kirk  •  February 25, 2019

Why are we surprised about the amount and sensitivity of data that mobile apps collect? The online industry has never been forthright about it. That's why we're faced with a yawning gap between user expectations and true privacy. And it's why Facebook, Google, Apple and others have many questions to answer.

Toyota Australia, Healthcare Group Hit By Cyberattacks

Jeremy Kirk  •  February 22, 2019

Australia has faced a few tough weeks on the cybersecurity front. Toyota Australia's computer systems were still down Friday after an attempted cyberattack. A healthcare group acknowledged it was the victim of a ransomware attack. And last week, suspected nation-state attackers hit Parliament's email systems.

WhatsApp Flaw Could Enable iOS Message Snooping

Jeremy Kirk  •  February 21, 2019

Facebook says it will soon issue a patch for a bug in its WhatsApp messenger application that can circumvent a security feature launched just last month for Apple devices. The flaw could let someone with physical access to a device bypass Face ID and Touch ID.

Password Managers Leave Crumbs in Memory, Researchers Warn

Jeremy Kirk  •  February 20, 2019

A security audit of popular password managers has revealed some concerning weaknesses. Luckily, none of the problems are showstoppers that should put people off using such applications. But the research shows that some password managers need to more thoroughly scrub data left in memory.

Suspected State-Sponsored Hackers Pummel US and Australia

Jeremy Kirk  •  February 19, 2019

Recent apparently state-sponsored hack attacks have hit dozens of companies in the U.S. and political parties in Australia. Officials say China and Iran appear to have escalated their online espionage campaigns, seeking to gather better intelligence and steal intellectual property.

Facebook's Leaky Data Bucket: App Stored User Data Online

Jeremy Kirk  •  February 18, 2019

A security consultancy discovered Facebook user data exposed in two different places online without authentication or encryption. The data, which is now offline, came from an Android app that purported to offer statistical information to logged-in users.

WannaCry Hero Loses Key Motions in Hacking Case

Jeremy Kirk  •  February 15, 2019

A famed British computer security researcher has lost several key motions in a federal hacking case that stems from his alleged contribution to two types of banking malware. The rulings could complicate the challenges for the defense team of Marcus Hutchins, who remains in the U.S.