Content by Doug Olenick

California Voters Pass Prop. 24 Amending CCPA

Doug Olenick  •  November 5, 2020

California voters passed Proposition 24, the California Privacy Rights Act, on Nov. 3, which expands upon the recently activated California Consumer Privacy Act specifically when it comes to enforcement and how businesses handle personal data.

Maze Claims to End Its Ransomware and Extortion Operations

Doug Olenick  •  November 2, 2020

The Maze cybercrime gang, which revolutionized the ransomware business by adding an extortion element to each attack, has issued a statement saying it has hung up its spikes and will retire, at least temporarily. Security executives do confirm Maze's activity has dropped off in recent months.

Analysis: Tactics of Group Waging Attacks on Hospitals

Doug Olenick  •  October 30, 2020

A new report describes the attack methods of an Eastern European gang known as UNC1878 or Wizard Spider that's been waging ransomware attacks against U.S. hospitals in recent days.

Phishing Scam Costs Wisconsin GOP $2.3 Million

Doug Olenick  •  October 29, 2020

The Republican Party of Wisconsin says fraudsters used phishing emails and doctored invoices to steal $2.3 million earmarked for President Donald Trump's reelection campaign. The FBI is investigating.

100,000 Windows Devices Still Exposed to SMBGhost Flaw

Doug Olenick  •  October 29, 2020

Almost eight months after Microsoft warned of a critical vulnerability in Windows called SMBGhost, more than 100,000 unpatched devices remain vulnerable, according to security researchers. The COVID-19 pandemic and ensuing rush to move workers into home offices may have led to delays in applying the fix.

Analysis: The Security of 5G Devices, Networks

Doug Olenick  •  October 28, 2020

So far, much of the discussion about 5G security has focused on avoiding the use of technology from Chinese manufacturers, including Huawei and ZTE. But security experts are increasingly concerned that 5G network and device providers rushing products to market aren't devoting enough attention to security.

Even in Test Mode, New Mirai Variant Infecting IoT Devices

Doug Olenick  •  October 26, 2020

A greatly enhanced variant of the powerful Mirai botnet is already infecting IoT devices even though it's operating in a test environment, according to researchers at cybersecurity firm Avira Protection Lab.

Massive U.S. Voter Database Offered for Sale

Doug Olenick  •  October 23, 2020

Voter information on as many as 186 million Americans was being offered for sale in an online forum, according to Trustwave. The information apparently came from public sources as well as data leaks.

White House Denies Trump's Twitter Account Was Hacked

Doug Olenick  •  October 22, 2020

The White House are Twitter are both debunking claims by a Dutch ethical hacker that he accessed President Donald Trump's Twitter account earlier this month by guessing the password, enabling him to obtain full privileges and capture screenshots.

Trickbot Rebounds After 'Takedown'

Doug Olenick  •  October 20, 2020

The recent "takedown" of Trickbot by Microsoft and others had only a temporary effect; the botnet's activity levels have already rebounded, according to Crowdstrike and other security firms.

6 Russians Indicted for Destructive NotPeyta Attacks

Scott Ferguson , Doug Olenick  •  October 19, 2020

The U.S. Justice Department unsealed indictments against six Russian military officers on Monday, alleging that they carried out a series of major hacking operations, including deploying destructive NotPetya malware - tied to more than $10 billion in damages - and attacking the 2018 Olympics.

British Airways' GDPR Fine Dramatically Reduced

Doug Olenick  •  October 16, 2020

Britain's Information Commissioner's Office announced this week a dramatic reduction in its fine against British Airways for violating the EU's General Data Protection Regulation. The company will pay a $26 million fine instead of $238 million in a case tied to a 2018 breach.

Barnes & Noble Investigates Hacking Incident

Doug Olenick  •  October 15, 2020

Books retailer Barnes & Noble is investigating a security incident involving unauthorized access to its corporate systems, including those storing customers' information. To begin its mitigation efforts, the company shut down its systems, which meant its Nook e-book platform was offline.

New York Calls for Federal Regulation of Social Media

Doug Olenick  •  October 14, 2020

A report by New York state investigators calls for Twitter and other social media companies to implement greater cybersecurity measures and advocates greater federal regulatory oversight of social media companies to help prevent the misuse of their platforms.

Analysis: Will Trickbot Takedown Impact Be Temporary?

Doug Olenick  •  October 13, 2020

Despite the takedown of the Trickbot botnet by Microsoft and others Monday, the malware is still functioning, and its operators retain the tools needed to rebuild their malicious network, some cybsersecurity experts say. So the impact, while significant, could prove to be temporary.