Twitter Scammers Stole $1,000 From My Friend—So I Hunted Them Down
After scammers duped a friend with a hacked Twitter account and a “deal” on a MacBook, I enlisted the help of a fellow threat researcher to trace the criminals’ offline identities.
Security / Cyberattacks and Hacks
TETRA Radio Code Encryption Has a Flaw: A Backdoor
A secret encryption cipher baked into radio systems used by critical infrastructure workers, police, and others around the world is finally seeing sunlight. Researchers say it isn’t pretty.
China’s Breach of Microsoft Cloud Email May Expose Deeper Problems
Plus: Microsoft expands access to premium security features, AI child sexual abuse material is on the rise, and Netflix’s password crackdown has its intended effect.
Satellites Are Rife With Basic Security Flaws
German researchers gained rare access to three satellites and found that they’re years behind normal cybersecurity standards.
How a Cloud Flaw Gave Chinese Spies a Key to Microsoft’s Kingdom
Microsoft says hackers somehow stole a cryptographic key, perhaps from its own network, that let them forge user identities and slip past cloud defenses.
Ransomware Attacks Are on the Rise, Again
Ransomware attacks tumbled in 2022, offering hope that the tide was turning against the criminal gangs behind them. Then things got a whole lot worse.
Silk Road’s Second-in-Command, Variety Jones, Gets 20 Years in Prison
Roger Thomas Clark, also known as Variety Jones, will spend much of the rest of his life in prison for his key role in building the world’s first dark web drug market.
Russia’s Notorious Troll Farm Disbands
Plus: A French bill would allow spying via phone cameras, ATM skimmers target welfare families, and Japan’s largest cargo port gets hit with ransomware.
EV Charger Hacking Poses a ‘Catastrophic’ Risk
Vulnerabilities in electric vehicle charging stations and a lack of broad standards threaten drivers—and the power grid.
Security News This Week: Cyberstalkers Win First Amendment Victory in the US Supreme Court
Plus: Hackers knock out Russian military satellite communications, a spyware maker gets breached, and the SEC targets a victim companyis CISO.