News Briefs

Anti-Phishing Working Group Proposes Use of Secure Hashing to Address GDPR-Whois Debacle

The AntiPhishing Working Group (APWG) in a letter to ICANN has expressed concern that the redaction of the WHOIS data as defined by GDPR for all domains is "over-prescriptive". more

FBI, DHS Release Technical Details on North Korea’s DDoS Botnet Infrastructure

U.S. Department of Homeland Security (DHS) and the FBI today released a technical alert based joint-effort analysis of methods behind North Korea’s cyberattacks. more

Cloudflare Outage Highlights Internet’s Growing Single Points of Failure

Cloudflare's global outage caused cascading failures across the internet, reigniting concerns about the concentration of web infrastructure and the urgent need for more resilient, transparent systems to support critical online services. more

Domain Registrars Given a Six-Month Deadline to Implement Registration Data Access Protocol (RDAP)

ICANN issued an industry-wide six-month deadline for the deployment of the Registration Data Access Protocol (RDAP) - a replacement for the WHOIS protocol. more

Data Growth, IoT Will Lead to Unlimited Energy Consumption If Not Controlled, Scientists Warn

Researchers from Lancaster University's School of Computing and Communications have warned that the rapid growth of remote digital sensors and devices connected to the internet -- Internet of Things -- has the potential to bring unprecedented and, in principle, almost unlimited rises in energy consumed by smart technologies. more

Equifax Breach Blamed on Open-Source Software Flaw

Equifax has blamed a flaw in the software running its online databases for the massive breach revealed last week that has allowed hackers to steal personal information of as many as 143 million customers. more

Cyberattack on UK Parliament Halts Email Access

UK parliament has been the target of a "sustained and determined" cyberattack by hackers attempting to gain access to Member of Parliaments' and their staffers' email accounts. more

Teen Hacker Who Targeted High Ranking US Government Officials Sentenced to 2 Years in Prison

A British teenager who hacked into the online accounts of former CIA director John Brennan, former director of intelligence James Clapper, and other high-profile US government employees, was sentenced today for to two years in prison. more

Microsoft Takes Legal Action Against North Korean Cybercrime Group, Takes Down 50 Domains

Microsoft has taken control of 50 domains used by a North Korean cybercrime group dubbed "Thallium" to steal information from users, including government employees, think tanks, university staff members, and those working on nuclear proliferation issues. more

Volunteer-Based Project Succeeds in Taking Down 100,000 Malware Distribution Sites Within 10 Months

In March of 2018, abuse.ch, a non-profit cybersecurity organization in Switzerland, launched a project called URLhaus to collect and share URLs identified to be distributing malware. more

Microsoft Releases a Cybersecurity eBook, Free Download

Micorsoft has released a 253 page cybersecurity ebook primarily intended for teens but also serves as a useful resource for adults interested in overall understanding of various Internet security topics. more

Paper on Civil Society Involvement in ICANN

A paper titled, "Civil society involvement in ICANN: Strengthening future civil society influence in ICANN policymaking," written by Robin Gross, examines the historical role that civil society has played at ICANN in policymaking. more

WIPO Becomes First Non-Chinese Entity to Provide Domain Dispute Resolution Services for China’s .cn

WIPO's Arbitration and Mediation Center earlier this month became the only non-Chinese entity to provide domain name dispute resolution services for the .CN and .?? (China) country code Top-Level Domain (ccTLD). more

Configuration Chaos: Cloudflare Explains Major Outage in Detailed Post-Mortem

Cloudflare has detailed the cause of a global outage in a post-mortem report, revealing that a flawed internal database change -- not a cyberattack -- caused widespread service disruption across its network and customer systems. more

US Congress Considering Legislation to Authorize Faster Access to International Electronic Data

A legislation called, Clarifying Lawful Overseas Use of Data Act, or Cloud Act, was introduced on Monday by Congress aimed at creating a clearer framework for law enforcement to access data stored in cloud computing systems. more