Content by Mathew J. Schwartz

The Internet of Buggy Things

Mathew J. Schwartz  •  May 26, 2015

It's no surprise that virus-wielding hackers are exploiting Internet of Things devices. Blame too many device manufacturers rushing products to market, skimping on secure development practices and failing to audit the third-party code they use.

In Britain, Malware No. 1 Cyberthreat

Mathew J. Schwartz  •  May 22, 2015

Britain's computer emergency response team - CERT-UK - reports that malware remains the dominant mode of online attack for cybercriminals, and Zeus their most preferred tool of choice. But the team is promoting a free information-alert service to help.

Logjam Vulnerability: 5 Key Issues

Mathew J. Schwartz  •  May 21, 2015

While the "Logjam" vulnerability raises serious concerns, there's no need to rush related patches into place, according to several information security experts. Learn the key issues, and how organizations must respond

NetUSB Flaw Affects Router Makers

Mathew J. Schwartz  •  May 20, 2015

"Millions" of devices from numerous router manufacturers appear to use a third-party software component called NetUSB, which can be exploited to bypass authentication checks and remotely take control of the devices, security researchers warn.

Massive 'Logjam' Flaw Discovered

Mathew J. Schwartz  •  May 20, 2015

Numerous websites, mail servers and other services - including virtual private networks as well as "all modern browsers" - have a 20-year-old flaw that could be exploited by an attacker, computer scientists warn.

Questions Over Plane Hacking Report

Mathew J. Schwartz  •  May 18, 2015

Did information security expert Chris Roberts exploit vulnerabilities in airplanes' onboard entertainment systems, allowing him to access a plane's thrust management computer and cause it to climb?

Router Hacks: Who's Responsible?

Mathew J. Schwartz  •  May 18, 2015

An army of 40,000 small office/home office routers have been exploited by automated malware. But who's responsible for devices being vulnerable: vendors for using well-known defaults; or distributors and IT managers for not locking them down?

Starbucks: Coffee and a Fresh Password

Mathew J. Schwartz  •  May 15, 2015

Caffeine junkies are up in arms over reports that criminals have been targeting their Starbucks account balances. But the real story is poor password-picking practices by consumers, and Starbucks' lack of multi-factor authentication.

Google App Engine Flaws Described

Mathew J. Schwartz  •  May 15, 2015

Veteran Java bug hunter Adam Gowdiak has disclosed details of what he says are unpatched flaws in Google App Engine for Java and criticized the company for its response.

GCHQ Seeks 'Responsible' Hackers

Mathew J. Schwartz  •  May 14, 2015

Wanted: Hackers for hire. Or in British government parlance: "Committed and responsible individuals who have the potential to carry out computer network operations to keep the U.K. safe." Ready to apply?

FBI Hacker Hunt Goes 'Wild West'

Mathew J. Schwartz  •  May 14, 2015

The FBI is offering a big-stakes reward for an alleged criminal who ranks at the top of its "cyber most wanted" list. But one cybercrime expert asks: "Would you cross the Russian mafia or some organized crime gang for $3 million?"

Fraudsters Drain Starbucks Accounts

Mathew J. Schwartz  •  May 13, 2015

Fraudsters have been hacking into and draining Starbucks accounts, customers report. Security experts say attackers appear to be guessing weak account passwords, then using funds to fill up gift cards destined for the black market.

Crime: Why So Much Is Cyber-Enabled

Mathew J. Schwartz  •  May 12, 2015

Much of today's crime is "cyber-enabled," warns cybercrime expert Raj Samani, and successfully blocking such attacks increasingly demands not just better technology and public-private collaboration, but also an understanding of psychology.

UK Elections: Privacy, Security Impacts

Mathew J. Schwartz  •  May 8, 2015

Britain's Tory party has secured a majority in Parliament, which means the country will soon see a new legislative agenda. Here are some of the information security, privacy and surveillance initiatives to expect in the coming months.

Lenovo Patches Critical PC Flaws

Mathew J. Schwartz  •  May 7, 2015

Lenovo issues an emergency patch to fix flaws in the System Update software that it preinstalls on business-focused Windows PCs after security researchers discover vulnerabilities that could be used to remotely compromise machines.