Security, Spoken

In May, President Donald Trump announced that the United States would withdraw from the 2015 nuclear agreement, negotiated by the Obama Administration, designed to keep Iran from developing or acquiring nuclear weapons. As part of that reversal, the Trump administration reimposed economic sanctions on Iran. From the start, the US actions stoked tensions and fear of Iranian retaliation in cyberspac...

Learn more about your ad choices. Visit podcastchoices.com/adchoices

If you thought you were going to make it out of 2018 without a couple more data slip-ups, think again! Two incidents bookended the week. Monday, Google revealed that a bug in its somehow still alive Google+ social network exposed the data of 52.5 million users. That's orders of magnitude bigger than the 500,000 users that were impacted by a previous Google+ exposure. And on Friday, Facebook announ...

If you haven’t heard, 2018 was extremely bad for Facebook. The company was rocked by so many scandals that it’s become hard to list them all in one place. I won’t try here, but I will say it’s equally difficult to determine how much those missteps really matter to Facebook’s billions of users. During a one-day event in New York City on Thursday, the social network got a chance to find out. Learn m...

In offices and universities all across the country Thursday, the same threat appeared in email inboxes: Pay $20,000 worth of bitcoin, or a bomb will detonate in your building. Police departments sent out alerts. Workers from Los Angeles to Raleigh, North Carolina, evacuated their cubicles in the middle of the day. All over Twitter, people posted screenshots of the emails, many different versions o...

This has not been Facebook's proudest year for privacy and security. The company faced the massive Cambridge Analytica data misuse and abuse scandal in April and beyond. It also disclosed its first data breach in October, which compromised information from 30 million accounts. But Facebook has at least one security-focused bright spot it can point to in 2018: its bug bounty. Bug bounties are progr...

The massive data breach that affected 500 million Marriott customers feels like a recent event, given that the company just discovered and disclosed it over the last four months. But it's important to remember that the attack began much earlier, especially as Reuters and others have reported that state-sponsored Chinese hackers were behind it. If that attribution holds up, China's broader hacking...

We are deep into the worst case scenarios. But as new sentencing memos for Trump associates Paul Manafort and Michael Cohen make all too clear, the only remaining question is how bad does the actual worst case scenario get? The potential innocent explanations for Donald Trump’s behavior over the last two years have been steadily stripped away, piece by piece. Learn more about your ad choices. Visi...

In October, Google dramatically announced that it would shut down Google+ in August 2019, because the company had discovered through an internal audit (and a simultaneous Wall Street Journal exposé) that a bug in Google+ had exposed 500,000 users' data for about three years. Maybe it should have pulled the plug sooner. On Monday, Google announced that an additional bug in a Google+ API, part of a...

Nearly after a month after the midterm elections, details on a hack of the Republican National Congressional Committee reveals that meddling in the midterms was much worse than it seemed on election day. The hack probably should have been the biggest news of the week, but for a little distracting—and important!—thing called the Mueller probe. Learn more about your ad choices. Visit podcastchoices....

Australia's parliament passed controversial legislation on Thursday that will allow the country's intelligence and law enforcement agencies to demand access to end-to-end encrypted digital communications. This means that Australian authorities will be able to compel tech companies like Facebook and Apple to make backdoors in their secure messaging platforms, including WhatsApp and iMessage. Learn...

I first came across the imposter Facebook page by accident. The page was made to look like that of my employer, Vietnam Veterans of America, complete with our organization's registered trademark and name. As an Iraq veteran and the office’s designated millennial policy guy, I was helping run VVA's social media accounts. Learn more about your ad choices. Visit podcastchoices.com/adchoices

As the founder and director of a nonprofit animal shelter on the East Coast, Alana has spent most of the past decade caring for pets that might otherwise be euthanized. Her work also resonates with people online—the Facebook page for the shelter has more than 1.3 million followers. But in August, she noticed something strange: A series of unfamiliar posts began appearing on the page, and no one at...

Though sporadic hacker intrusions and phishing campaigns targeted political entities in the lead-up to November's midterm elections, things seemed pretty quiet overall on the election-meddling front in the US. Certainly no leaks or theatrics rose to the level of Russia's actions during the 2016 presidential election. But a belatedly revealed breach of the National Republican Congressional Committe...

It sounds good in theory. A bill introduced last week by two members of the New York City Council would punish people who send harassing, sexually explicit photos and videos with up to a year of jail time or a $1,000 fine. One unfortunately growing trend the bill hopes to thwart? "Cyber flashing," a type of digital harassment where creeps use Apple's AirDrop feature to send dick pics and other lew...

The push to encrypt traffic throughout the web has resulted in safer and more secure browsing across millions of sites. But not everywhere uses the so-called Transport Layer Security that keeps HTTPS-enabled sites safe from prying eyes. Including, it turns out, Apple’s iTunes and iOS App Store infrastructure, which runs its downloads over unencrypted connections. Typically you can tell when a webs...

By now, you’ve probably heard of PewDiePie, a Swedish comedian and video game commentator who has been the most followed creator on YouTube for years. But you might not be as familiar with T-Series, an almost equally popular Indian media company. For months, T-Series and PewDiePie, whose real name is Felix Kjellberg, have been dueling over who will be the king of YouTube. In October, PewDiePie eve...

Early Friday morning, the hotel behemoth Marriott announced a massive hack that impacts as many as 500 million customers who made a reservation at a Starwood hotel. Marriott acquired the Starwood hospitality group in September 2016, which operates numerous hotel brands including Sheraton, Westin, Aloft, and W Hotels. But the intrusion that caused the enormous data breach predates Marriott's acquis...

Tension has existed for decades between law enforcement and privacy advocates over data encryption. The United States government has consistently lobbied for the creation of so-called backdoors in encryption schemes that would give law enforcement a way in to otherwise unreadable data. Meanwhile, cryptographers have universally decried the notion as unworkable. But at a cybercrime symposium at the...

Just a little over two hours separated President Trump angrily tweeting, “Did you ever see an investigation more in search of a crime?” and special counsel Robert Mueller announcing his latest evidence of new crimes Thursday morning. Former Trump lawyer Michael Cohen pleaded guilty for lying to Congress about the status of the real estate developer’s hotel deal in Moscow. Learn more about your ad...

The port of San Diego. The city of Atlanta. Kansas Heart Hospital. Those are just a few of the more than 200 municipalities, universities, hospitals, and other targets that have fallen victim to SamSam, a pernicious strain of ransomware that has spent the past three years rampaging throughout the US. On Wednesday, the Justice Department indicted two Iranian men allegedly behind the attacks. Learn...

In recent years, hacks against the power grid have gone from a mostly theoretical risk to a real-world problem. Two large-scale blackouts in Ukraine caused by Russian cyberattacks in 2015 and 2016 showed just how feasible it is. But grid hacking comes in less dramatic forms as well—which makes Russia's continued probing of US critical infrastructure all the more alarming. Learn more about your ad...

History may show that Monday ranks among the most consequential days yet of Robert Mueller’s 18-month special counsel investigation into Russian interference in the 2016 presidential election. Learn more about your ad choices. Visit podcastchoices.com/adchoices

Here's an easy thing you can do right now to improve your digital security hygiene. Pull out your iPhone, open Settings, go into the Siri settings, and turn off Access When Locked. That's it! Do it on your iPad while you're at it. Go ahead and do it for your family and friends, too, at holiday functions when you need to deflect personal questions. Everybody wins! In the battle of the smart assista...

The data theft technique called "Rowhammer" has fascinated and worried the cybersecurity community for years now, because it combines digital and physical hacking in ways that are both fascinating and unaccounted for. Since its discovery, researchers have steadily refined the attack, and expanded the array of targets it works against. Learn more about your ad choices. Visit podcastchoices.com/adch...