Content by Mathew J. Schwartz

Hacking ATMs: No Malware Required

Mathew J. Schwartz  •  October 21, 2014

Researchers demonstrate how ATMs could be hacked - without installing malware - by connecting a tiny computer to an inside port, bypassing the ATM's own computer and instructing the cash dispenser to begin issuing money.

Staples Launches Breach Investigation

Mathew J. Schwartz  •  October 21, 2014

Staples has confirmed that it's investigating a potential data breach after a report warned that elevated levels of payment card fraud had recently been tied to card numbers used by consumers who shopped at the office supply retailer.

'Endrun' Networks: Help in Danger Zones

Mathew J. Schwartz  •  October 20, 2014

Drawing on networking protocols designed to support NASA's interplanetary missions, two researchers have created a networking system that's designed to transmit information securely and reliably in even the worst conditions, such as in an Ebola hot zone.

Defending Against Government Intrusions

Mathew J. Schwartz  •  October 17, 2014

Government intelligence agencies' information security offensive capabilities may far outstrip businesses' collective defenses, but organizations can still tap a variety of techniques to defend themselves against many types of intrusions.

Do Wearable Devices Spill Secrets?

Mathew J. Schwartz  •  October 17, 2014

Apps for wearable devices that are designed to track a user's pulse rate, blood-oxygen level or location may be leaking that data during transmission, Symantec security researcher Candid Wüeest warns in a Black Hat Europe briefing.

Black Hat Keynoter: Beware of Air Gap Risks

Mathew J. Schwartz  •  October 16, 2014

Disconnecting systems from the Internet via an "air gap" is supposed to make the data they store harder to steal. But at Black Hat Europe, cryptographer Adi Shamir demonstrated how a laser and drone can be used to bypass air gaps.

Black Hat Europe: A Preview

Mathew J. Schwartz  •  October 15, 2014

Amsterdam is again playing host to the annual Black Hat Europe information security gathering, and presenters have promised to cover everything from privacy flaws in wearable computers to two-factor authentication system failures.

New Flaw: POODLE Puts Browsers at Risk

Mathew J. Schwartz  •  October 15, 2014

Security experts urge organizations to disable support for SSL on clients and servers because of flaws in the cryptographic protocol that could be used to impersonate website users and decrypt HTTPS traffic.

'Mayhem' Malware Exploits Shellshock

Mathew J. Schwartz  •  October 10, 2014

Malware known as "Mayhem" that targets Unix and Linux systems has been updated to exploit Shellshock flaws, security experts warn. But with few Unix-flavor systems running anti-virus software, how can it be stopped?

Malware Attacks Drain Russian ATMs

Mathew J. Schwartz  •  October 8, 2014

Criminals have infected at least 50 ATMs in Eastern Europe, including Russia, with malware, dispensing millions of dollars in cash directly to money mules. Interpol warns such attacks could spread worldwide.

Yahoo: Shellshock Attackers Got Lucky

Mathew J. Schwartz  •  October 7, 2014

Yahoo confirms Shellshock-targeting attackers hacked into three of its servers, but claims they didn't exploit Bash flaws. Meanwhile, Lycos denies it's been breached and WinZip isn't responding directly to a report that it was hacked.

Report: Shellshock Attack Hits Yahoo

Mathew J. Schwartz  •  October 6, 2014

Shellshock threats continue to escalate, with security researchers now counting 11 types of exploits that target the Bash flaws. Yahoo, Lycos and WinZip are reportedly among the "Bash attack" victims.

Beyond Chase: 9 More Banks Breached?

Mathew J. Schwartz  •  October 6, 2014

The hackers who breached JPMorgan Chase also infiltrated about nine other financial institutions, and may be operating from Russia, according to one news report. But security experts caution against jumping to conclusions over attackers' identities or motives.

Feds Fumble Spyware Story

Mathew J. Schwartz  •  October 3, 2014

"Selling spyware is not just reprehensible, it's a crime," says a U.S. Justice Department official. So why are 245 local U.S. law enforcement agencies and prosecutors giving spyware away for free?

Hackers Exploit U.S. Army, Microsoft

Mathew J. Schwartz  •  October 1, 2014

The Justice Department announces that four alleged members of an international hacking ring have been charged with stealing intellectual property valued at $100 million, including a U.S. Army Apache helicopter simulator and Microsoft Xbox prototypes.