Twitter revealed that the Federal Trade Commission may hit it with a fine up to $250 million for using consumers’ email addresses and phone numbers — collected for “safety and security” purposes — to target ads, something it said it did “inadvertently” between 2013 and 2019. This is a violation of its 2011 agreement with the FTC, in which Twitter agreed that it would no longer mislead consumers by not disclosing other potential uses. Twitter has already received a draft complaint from the FTC. Continue reading FTC to Fine Twitter for Using Consumer Data for Targeted Ads

Recently, the chief executives of Facebook, Google and Twitter all had their email accounts hacked. They regained control of their accounts within hours but many others — especially those who re-use passwords — haven’t been so lucky. Hackers can use software that gleans new passwords from old ones, and nearly two billion old passwords are for sale for as little as $2 on LeakedSource, a database operated anonymously. The pattern of re-using corporate passwords on LinkedIn and other sites is a growing concern. Continue reading Re-Used Passwords a Major Culprit in the Rise of Data Abuse

Defense Advanced Research Projects Agency (DARPA) has launched the Cyber Grand Challenge (CGC), to create a program that — without any human interference — can find security vulnerabilities abused by hackers, then create a fix and distribute it. If the Challenge is successful, power plants, air traffic and water infrastructure would eventually become safe from computer viruses and hackers, and ordinary citizens would know their computers and digital devices are safe from malware and viruses. Continue reading DARPA Announces Competition to Combat Computer Viruses

A new executive order signed by President Obama earlier this week aims to warn off foreign online hackers from targeting the United States. The order authorizes severe consequences to the individual or foreign party determined to be involved with any attack that may compromise the security, foreign policy, economic health, and financial stability of the U.S. Any violations of the policy could result in both financial and travel sanctions as regulated by the federal government. Continue reading President Obama Approves Order Against Foreign Cyberattacks

The Obama administration announced Tuesday that it will establish a new agency tasked with protecting the U.S. from cyberattacks. The Cyber Threat Intelligence Integration Center will gather intelligence from both the Central Intelligence Agency and the National Security Agency to help prevent hackers from stealing information. This announcement comes on the heels of a major security breach last week, when hackers broke into the system of health insurance company Anthem. Continue reading White House Creates Cybersecurity Agency to Combat Threats

During an HPA Tech Retreat panel yesterday on “Cyber and Content Security: Time for a Strategy Change,” moderated by NSS Labs Sales Director Kari Grubin, panelists asked the important questions: Who are the perpetrators? How easy is it to gain access? How can we understand the risks to our specific companies? And how can we architect against risks? Grubin was joined by Frank Artes of NSS Labs, Theresa Miller of Lionsgate, Bryan Ellenburg of the CDSA, and Ted Harrington of Independent Security Evaluators. Continue reading HPA Tech Retreat: Cybersecurity in Today’s Media Industry

Last week, Yahoo joined Google and Microsoft in the effort to bring more privacy to users of their popular email services. The 110 million unique Yahoo email users will have the option to turn on an encrypted messaging feature. The feature relies on PGP encryption, which stores each user’s encryption key on their personal laptops and devices. Google also announced that encrypted websites will fare better in their search results due to a new feature in its ranking algorithm. Continue reading Tech Giants Tighten Security on Emails with Encryption Option

Hold Security, an Internet security research firm in the U.S., discovered a Russian crime ring has stolen an unprecedented amount of Internet credentials, including 1.2 billion user names and passwords, and more than 500 million email addresses. The hackers targeted websites from multiple countries and a range of businesses, from Fortune 500 companies to small websites. The crime ring is currently using the information to send spam through social networks for a fee. Continue reading Russian Criminals Obtain Passwords and More in Massive Hack