The Institute for Information Security & Privacy has joined the School of Cybersecurity and Privacy! In order to ensure we continue as a coordinating body for cybersecurity research, we are migrating our content to the School of Cybersecurity and Privacy website. We hope to see you there! This website will come down after the start of the new year.
Yahoo recently disclosed that some half a billion user accounts were compromised by state-sponsored actors in late 2014. Names, email addresses, phone numbers, passwords and dates of birth were put up for sale on websites hosting illicit marketplaces. Yahoo is currently notifying account holders for its email services and users who may have linked their Flickr photo sharing services.
In a recent opinion piece on Lawfare, researcher Nicholas Weaver discusses the Cost of Using Zero-Days (exploits). He re-caps the significance of the Israeli-based “cyber war” company NSO Group’s efforts to compromise the iPhone of an outspoken human rights defender from the UAE, Ahmed Mansoor, and demonstrates the dual-edged nature of using zero-day exploits in such a public manner.