security News of 10/24/20

President Trump’S Twitter Accessed By Security Expert Who Guessed Password “maga2020!”

A Dutch security researcher says he accessed President Trump’s @realDonaldTrump Twitter account last week by guessing his password: “maga2020!”. Victor Gevers, a security researcher at the GDI Foundation and chair of the Dutch ...

Contrast Launches Its Security Observability Platform

Contrast , a developer-centric application security company with customers that include Liberty Mutual Insurance, NTT Data, AXA and Bandwidth, today announced the launch of its security observability platform. The idea here is to offer developers a ...

Secureframe Raises $4.5m To Help Businesses Speed Up Their Compliance Audits

While certifications for security management practices like SOC 2 and ISO 27001 have been around for a while, the number of companies that now request that their software vendors go through (and pass) the audits to be in compliance with these ...

Now May Be The Best Time To Become A Full-Stack Developer

Sergio Granada Contributor Sergio Granada is the CTO of Talos Digital, a global team of professional software developers that partners with agencies and businesses in multiple industries providing software development and ...

Apple, Opera, And Yandex Fix Browser Address Bar Spoofing Bugs, But Millions More Still Left Vulnerable

Year after year, phishing remains one of the most popular and effective ways for attackers to steal your passwords. As users, we’re mostly trained to spot the telltale signs of a phishing site, but most of us rely on carefully examining the web ...

Security Testing Firm NSS Labs Ceases Operations, Citing Coronavirus

Security testing company NSS Labs “ceased operations” last week, the company said in a notice on its website, citing impacts related to the ongoing coronavirus pandemic. The Austin, Texas-based company was quietly acquired by private ...

Splunk Acquires Plumbr And Rigor To Build Out Its Observability Platform

Data platform Splunk today announced that it has acquired two startups, Plumbr and Rigor , to build out its new Observability Suite, which is also launching today. Plumbr is an application performance monitoring service, while Rigor focuses on ...

Trump Says ‘Nobody Gets Hacked’ But Forgot His Hotel Chain Was Hacked — Twice

According to President Trump speaking at a campaign event in Tucson, Arizona, on Monday, “nobody gets hacked.” You don’t need someone who covers security day in and day out to call bullshit on this one. “Nobody gets hacked. ...

US Charges Russian Hackers Blamed For Ukraine Power Outages And The NotPetya Ransomware Attack

Six Russian intelligence officers accused of launching some of the “world’s most destructive malware” — including an attack that took down the Ukraine power grid in December 2015 and the NotPetya global ransomware attack in 2017 ...

UK’S ICO Downgrades British Airways Data Breach Fine To £20m, After Originally Setting It At £184m

One of the biggest data breaches in UK corporate history has been closed off by regulators not with a bang, but a whimper — as a result of Covid-19. Today the Information Commissioner’s Office, the UK’s data watchdog, announced ...

Twitter Changes Its Hacked Materials Policy In Wake Of New York Post Controversy

Twitter has announced an update to its hacked materials policy — saying it will no longer remove hacked content unless it’s directly shared by hackers or those “acting in concert with them”. Instead of blocking such ...

Application Security Platform NeuraLegion Raises $4.7 Million Seed Led By DNX Ventures

A video call group photo of NeuraLegion’s team working remotely around the world Application security platform NeuraLegion announced today it has raised a $4.7 million seed round led by DNX Ventures, an enterprise-focused investment ...

Zoom To Start First Phase Of e2e Encryption Rollout Next Week

Zoom will begin rolling out end-to-end encryption to users of its videoconferencing platform from next week, it said today . The platform, whose fortunes have been supercharged by the pandemic-driven boom in remote working and socializing this ...

Twitter Hack Probe Leads To Call For Cybersecurity Rules For Social Media Giants

An investigation into this summer’s Twitter hack by the New York State Department of Financial Services (NYSDFS) has ended with a stinging rebuke for how easily Twitter let itself be duped by a “simple” social engineering technique ...

Lead Edge Capital Just Closed On $950 Million From A Whopping 500 Investors

Lead Edge Capital , a software-focused venture firm with one office in New York and another in California, was founded just 11 years ago. Yet it’s already managing $3  billion in assets through a process that founder Mitchell Green ...

Cyberpion Raises $8.25m In Seed Funding To Help Businesses Secure Assets Beyond Their Firewall

Hijacking a company’s DNS or injecting code into third-party tools are the kind of attacks that many companies aren’t equipped to handle. Cyberpion , a new security startup founded by a number of experienced security experts, aims to help ...

A Prison Video Visitation Service Exposed Private Calls Between Inmates And Their Attorneys

Fearing the spread of coronavirus, jails and prisons remain on lockdown. Visitors are unable to see their loved ones serving time, forcing friends and families to use prohibitively expensive video visitation services that often don’t work . ...

Harbor, The App That Gamifies Emergency Preparedness, Launches

Harbor , an emergency-preparedness company that just raised $5 million in seed , has today publicly launched its app. The app gamifies the process of preparing your home and family for whatever crisis may befall them, including common emergencies ...

Dr Lal PathLabs, One Of India’S Largest Blood Test Labs, Exposed Patient Data

Dr Lal PathLabs, one of the largest lab testing companies in India, left a huge cache of patient data on a public server for months, TechCrunch has learned. The lab testing giant, headquartered in New Delhi, serves some 70,000 patients a day , and ...

Decrypted: The Major Ransomware Attack You Probably Didn’T Hear About

Watching the news this past week was like drinking from a firehose. Speaking of which, you probably missed a busy week in cybersecurity, so here are the big stories from the past week. THE BIG PICTURE Blackbaud hack gets worse, as bank account ...