Government hacking
7 Articles
Call Them What They Are: Time to Fix Cyber Threat Actor Naming
The Microsoft-CrowdStrike partnership on cyber threat actor naming conventions is welcome, but more comprehensive reform is needed to serve defenders and the public.
Hack-to-Patch by Law Enforcement Is a Dangerous Practice
Recent so-called hack-to-patch activity by law enforcement sets a dangerous precedent for the global business community. Serious security, technical, and policy drawbacks emerge…
We’re From the Government, We’re Here to Help: The FBI and the Microsoft Exchange Hack
In a recent operation, the FBI removed malware from hacked Microsoft Exchange servers, and only attempted to notify the servers’ owners after the fact. This approach is almost…
The Latest GRU Indictment: A Failed Exercise in Deterrence
On Oct. 19, the Justice Department unsealed an indictment naming six Russian military intelligence officers, members of GRU Unit 74455, also known as “Sandworm.” Peter Machtiger…
Shining a Light on Federal Law Enforcement’s Use of Computer Hacking Tools
Ten years ago, an FBI official impersonated an Associated Press reporter to lure and track a teenager suspected of sending in prank bomb threats to his school. To find him, the…
The EWI Encryption Report: Stop Trying to Sell Me a Shoebox
Which would you prefer: keeping your valuables in a locked safe, or keeping them in a shoebox and trusting that everyone will adhere to laws against theft and their concomitant…
It’s Time to Pass Legislation Governing a Key Part of the Government’s Hacking Policy
An example of the splash screen from the Petya malware that was suspected of relying on an exploit developed by the U.S. National Security Agency. It’s well known that government…
1-7 of 7 items