Security, Spoken

The ubiquitous email encryption schemes PGP and S/MIME are vulnerable to attack, according to a group of German and Belgian researchers who posted their findings on Monday. The weakness could allow a hacker to expose plaintext versions of encrypted messages—a nightmare scenario for users who rely on encrypted email to protect their privacy, security, and safety.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Earlier this week, the Democrats on the House Intelligence Committee released roughly 3,500 Facebook and Instagram ads purchased by the Internet Research Agency, a notorious Russian troll farm. Among them: Ads purchased in May of 2016 that promoted a suspicious Chrome extension that gained wide access to the Facebook accounts and web browsing behavior of those who installed it.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

This week, the United States officially backed out of the Iran nuclear deal. The geopolitical reverberations should continue to play out in a variety of fields, but make sure you count cybersecurity among them. Iran targeted the US frequently—particularly financial institutions before the deal went into place. Security experts warn that with the agreement no longer in place, the barrage could begin again. So, look out for that! We also took a look at facial recognition technology.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

For the last few years, police forces around China have invested heavily to build the world's largest video surveillance and facial recognition system, incorporating more than 170 million cameras so far. In a December test of the dragnet in Guiyang, a city of 4.3 million people in southwest China, a BBC reporter was flagged for arrest within seven minutes of police adding his headshot to a facial recognition database.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

When the US last tightened its sanctions against Iran in 2012, then-president Barack Obama boasted that they were "virtually grinding the Iranian economy to a halt." Iran fired back with one of the broadest series of cyberattacks ever to target the US, bombarding practically every major American bank with months intermittent distributed denial of service attacks that pummeled their websites with junk traffic, knocking them offline.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

The week started with a figurative bang, as a list of questions Robert Mueller's team have for Trump leaked to The New York Times. They all point to one inevitable conclusion: That Mueller almost certainly already knows how all of this ends.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

It's important to proactively secure your social media accounts, especially since you never know when an innocuous mistake could put you at risk. But it isn't just a theoretical threat. Pranksters, vandals, and malicious attackers all look for ways to get into any legitimate account they can. So while you don't need to hide in a hole, there are some worthwhile (and easy!) steps you can take to keep your accounts from being hijacked.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Learn more about your ad choices. Visit podcastchoices.com/adchoices

On Thursday, Twitter chief technology officer Parag Agrawal disclosed in a blog post that the company had inadvertently recorded user passwords, in plaintext, in an internal system. This is not how things are supposed to go! And while Twitter has fixed the bug, and doesn't think any of the exposed passwords were accessed in any way, you should still change your Twitter password right now to make sure your account is secure.

Learn more about your ad choices. Visit podcastchoices.com/adchoices

Nearly four years have passed since researchers began to experiment with a hacking technique known as "Rowhammer," which breaks practically every security model of a computer by manipulating the physical electric charge in memory chips to corrupt data in unexpected ways. Since that attack exploits the most fundamental properties of computer hardware, no software patch can fully fix it. And now, for the first time, hackers have found a way to use Rowhammer against Android phones over the internet.

Learn more about your ad choices. Visit podcastchoices.com/adchoices