Cybersecurity is the rickety scaffolding supporting everything you do online. For every new feature or app, there are a thousand different ways it can break – and a hundred of those can be exploited by criminals for data breaches, identity theft, or outright cyber heists. Staying ahead of those exploits is a full-time job, and one of the most lucrative and sought-after skills in the tech industry. All too often, it’s something up-and-coming companies decide to skip out on, only to pay the price later on.
Seems a lot of people got password reset requests from Instagram over the last few days, including several Verge staffers and members of their family. The email might look legit. It might even have that little blue checkmark in Gmail. But, it probably came from a scammer. Honestly, it’s best practice to never click links in emails anyway.
In June, Aflac disclosed a data breach involving a “sophisticated cybercrime group” that stole names, social security numbers, contact information, health data, and more from its systems. The insurance provider has now revealed just how many people are affected, adding that it is currently “not aware of any fraudulent use of personal information.”
[SecurityWeek]
On Thursday, Trust Wallet announced a “security incident” affecting version 2.68 of its Chrome extension. Binance founder Changpeng Zhao confirmed that Trust Wallet “will cover” the losses and that the team is investigating the hack.
The feature was first piloted in the UK earlier this year, and works by automatically warning users when they launch eligible financial apps while screen sharing during calls with numbers that aren’t in the device’s contact list. The warning forces a 30-second pause period that aims to “break the spell of the scammers’ social engineering,” according to Google.
An exposed dataset from the license plate surveillance company Flock, which is known to work with the US Border Patrol and ICE via local police, showed that some of the AI annotators paid to classify American license plates are located in the Philippines.
After 404 Media contacted Flock for comment, the dataset disappeared.
The infrastructure buildout will add nearly 1.3 gigawatts of capacity for AI and cost up to $50 billion, the company said. US government customers will have access to both AWS Trainium AI chips and NVIDIA chips, and Amazon said it plans to start building the data centers in 2026.
On November 12, hackers stole account records and legal agreements from a company you’ve probably never heard of: SitusAMC. It handles commercial real estate and residential loans for the likes of JPMorgan Chase and Citi, who were among Situs’ Wall Street clients notified about the breach, the New York Times reported.
[The New York Times]
The next generation of BitLocker, Microsoft’s encryption feature in Windows, will require next-generation Windows devices that are built on unannounced chips. “Hardware acceleration of BitLock requires the capability in the silicon platform,” says Windows chief Pavan Davuluri. “As and when those capabilities are available, the OS will be able to unlock them for users.”
A new setting allows your 1Password vault to automatically unlock alongside your Mac or PC. It’s part of three new security presets rolling out now to individual and family plans — biz plans coming soon.
The browser is now better at blocking “fingerprinters” that gather information about your system to ID you, even after clearing cookies or using private browsing. Mozilla says the improvements almost halve the number of Firefox users tracked by fingerprinting, preventing websites from obtaining details about hardware specifications, touchscreen support, and dock or taskbar dimensions.
Facing waves of cuts, reassignments, and rampant politicization, CISA is staring down a diminished role in US cyber defenses.
The DOJ is charging two former ransomware negotiators at DigitalMint, along with a former incident response manager at Sygnia, for allegedly hacking and attempting to extort at least five US-based companies using ALPHV/BlackCat ransomware, as reported by the Chicago Sun-Times. The “rogue” trio allegedly got a $1.2 million ransom from one victim. DigitalMint and Sygnia say they are cooperating with the investigation.
