Content by Mathew J. Schwartz

Hacking Team Dump: Windows Zero Day

Mathew J. Schwartz  •  July 15, 2015

Security researchers reported a zero-day bug to Microsoft - which has patched the flaw - after reverse-engineering details were contained in a bug hunter's sales pitch to hacked surveillance software vendor Hacking Team.

Microsoft Kills Windows XP Anti-Virus

Mathew J. Schwartz  •  July 14, 2015

Shed a tear for enthusiasts of aging Microsoft Windows operating systems. That's because Microsoft has now retired Windows Server 2003 support, as well as anti-virus scanner and signature updates for Windows XP. But breaking up can be hard to do.

OPM Breach: Get Your Priorities Straight

Mathew J. Schwartz  •  July 14, 2015

After the OPM breach, the U.S. and China recently agreed to hammer out a cyber "code of conduct." But John Pescatore, a director at the SANS Institute, argues that governments would be better served by first jointly combating cybercrime.

Windows Server 2003: Mitigating Risks

Mathew J. Schwartz  •  July 13, 2015

With Microsoft ceasing support for Windows Server 2003, security experts are warning organizations to quickly migrate to a new operating system and, in the meantime, lock down any servers that continue to use the aging operating system.

Zero-Day Exploit Alert: Flash, Java

Mathew J. Schwartz  •  July 13, 2015

In-the-wild attacks have been found targeting at least one of two new zero-day Flash flaws leaked by Hacking Team's hacker. Separately, cyber-espionage APT attackers have been targeting a new Java flaw.

Malware Kingpin Pleads Guilty

Mathew J. Schwartz  •  July 13, 2015

Malware kingpin Vladimir Tsastsin has pleaded guilty to charges relating to a $14 million click fraud scheme that the FBI dubbed Operation Ghost Click. The scheme, which also involved money laundering, affected 4 million victims in 100 countries.

OPM Breach Fallout: What's Next?

Mathew J. Schwartz  •  July 10, 2015

As the U.S. Office of Personnel Management total breach victim count hits more than 22 million, many lawmakers are calling for the OPM's director to be fired. Meanwhile, the White House says it's weighing its response against the hackers responsible.

OPM Breach Numbers 'Enormous'

Mathew J. Schwartz  •  July 9, 2015

FBI Director James Comey says the White House plans to confirm that the U.S. Office of Personnel Management data breach exposed "millions and millions" of background-check records. Meanwhile, a second union has now sued OPM over the breach.

Young Hackers: Jail Time Appropriate?

Mathew J. Schwartz  •  July 9, 2015

Is it wrong that accused Lizard Squad hacker Julius Kivimaki, a teenager who was convicted of 50,700 "instances of aggravated computer break-ins" attacks, gets to walk away without having to serve any jail time?

Hacking Team Zero-Day Attack Hits Flash

Mathew J. Schwartz  •  July 8, 2015

Warning: All versions of Flash Player are vulnerable to a zero-day, weaponized exploit that became public when Italian spyware vendor Hacking Team was hacked, and 400 GB of corporate data leaked. Adobe has released an update to patch the flaw.

Britain's NHS Loses Health Data, Again

Mathew J. Schwartz  •  July 7, 2015

More than 3,000 National Health Service patients had their personal data exposed when an employee lost an unencrypted memory stick in a parking lot, violating NHS policies. But creating policies isn't the same as enforcing them.

Spyware Vendor Alert: Suspend Software

Mathew J. Schwartz  •  July 7, 2015

Italian surveillance software maker Hacking Team has confirmed that it was hacked and recommends police, law enforcement and government agencies suspend their use of its software, pending a full breach investigation.

Surveillance Software Firm Breached

Mathew J. Schwartz  •  July 6, 2015

Hacking Team, an Italian vendor of "easy-to-use offensive technology" that it sells to government agencies, has been hacked. Leaked customer lists reportedly name the FBI and DEA, plus the governments of Bahrain, Russia and Sudan, among others.

Can Selfies Fight Payment Card Fraud?

Mathew J. Schwartz  •  July 4, 2015

MasterCard is testing a smartphone app that lets users approve online transactions using facial recognition, via the equivalent of taking a selfie. But could such technology be spoofed, and will it reduce card fraud?

Bitcoin Exchange Hacked With Word Macro

Mathew J. Schwartz  •  July 2, 2015

An unconfirmed post-breach report for bitcoin exchange Bitstamp shows the organization was targeted by a sustained attack that combined phishing via email and Skype with macro malware to successfully steal almost 19,000 bitcoins, worth $5 million.