NYT: Chinese and Russian spies routinely eavesdrop on Trump’s iPhone calls

An Apple iPhone lock screen is seen in this photo illustration on September 24, 2018.

Chinese and Russian spies routinely eavesdrop on personal phone calls President Trump makes on his iPhones, one of which is no different from the smartphone millions of other people use. The US president’s casual approach to electronic security has several current and former officials so frustrated they leaked the details to The New York Times, which reported on the phone interceptions Wednesday evening.

Trump, Wednesday’s article reported, has two official iPhones that have been altered by the National Security Agency to limit the types of hacks they’re susceptible to. The president has a third iPhone with no modifications that he uses as personal device, because unlike the official iPhones, he can store personal contacts on it. What’s more, while Trump is supposed to swap out his two official phones every 30 days for new ones, he rarely does. Trump did agree to give up his Android phone, which most security experts believe is more vulnerable than Apple’s iOS, and Trump has also agreed to the more cumbersome arrangement of having the two official iPhones. One is for Twitter and other apps, while the other handles calls.

Still, when Trump uses the cell phones to call friends, Chinese spies often listen in hopes of gaining insights about how to influence him on the long-simmering issue of trade. Russian spies also routinely eavesdrop on Trump’s calls, although the Russian spies don’t appear to be running as sophisticated an influence campaign as their Chinese counterparts. Aides have repeatedly warned the president that cell phone calls are especially susceptible to monitoring by adversaries. The aides have pressured him to use landlines instead, but he has refused to give up his devices.

Read 8 remaining paragraphs | Comments

https://arstechnica.com/?p=1399911

Firefox 63 Blocks Tracking Cookies

Firefox 63 was released on Tuesday with a new cookie policy meant to prevent cross-site tracking by effectively blocking cookies and other site data from third-party tracking resources.

http://feedproxy.google.com/~r/Securityweek/~3/dXf9QSWG2wc/firefox-63-blocks-tracking-cookies

Super Micro to Customers: Chinese Spy Chips Story Is Wrong

A Bloomberg article claiming that tiny chips were inserted in Super Micro Computer Inc. equipment “is wrong,” the California-based server manufacturer says.

http://feedproxy.google.com/~r/Securityweek/~3/nME0laZeecA/super-micro-customers-chinese-spy-chips-story-wrong

Mozilla Offers VPN Service to Firefox Users

Mozilla and ProtonVPN this week announced a partnership aimed at keeping users safe while navigating the Internet.

http://feedproxy.google.com/~r/Securityweek/~3/JZCKCGuNQC0/mozilla-offers-vpn-service-firefox-users

Phishing in crescita. Microsoft. PayPal e Netflix tra i principali obiettivi

Nel report di Vade Secure la classifica dei servizi maggiormente presi di mira dai cyber-criminali. I servizi online si piazzano anche prima delle banche. Gli attacchi di phishing continuano a crescere e prendono di mira (ma non è una grossa sorpresa) i servizi più popolari e diffusi in circolazione. La ricerca Phisher’s Favorites commissionata da […]

L’articolo Phishing in crescita. Microsoft. PayPal e Netflix tra i principali obiettivi proviene da Securityinfo.it.

https://www.securityinfo.it/2018/10/23/phishing-in-crescita-microsoft-paypal-e-netflix-tra-i-principali-obiettivi/

Japan Orders Facebook to Improve Data Protection

The Japanese government on Monday ordered Facebook to improve protection of users’ personal information following data breaches affecting tens of millions of people worldwide.

http://feedproxy.google.com/~r/Securityweek/~3/1R4CNrbivuE/japan-orders-facebook-improve-data-protection

Cosa ci ha regalato il GDPR? Per gli utenti Apple la possibilità di scaricare i loro dati

Il portale introdotto a maggio consente di ottenere (ma soprattutto di conoscere) tutti i dati conservati sui sistemi Apple relativi al nostro account. Una dei grandi misteri per gli utenti Apple è quello relativo alle informazioni che ci riguardano conservate sui sistemi di Cupertino. L’ecosistema della mela, infatti, è (a dir poco) pervasivo e capire […]

L’articolo Cosa ci ha regalato il GDPR? Per gli utenti Apple la possibilità di scaricare i loro dati proviene da Securityinfo.it.

https://www.securityinfo.it/2018/10/19/cosa-ci-ha-regalato-il-gdpr-per-gli-utenti-apple-la-possibilita-di-scaricare-i-loro-dati/

Mozilla Brings Encrypted SNI to Firefox Nightly

Mozilla says Firefox Nightly now supports encrypting the Transport Layer Security (TLS) Server Name Indication (SNI) extension, several weeks after Cloudflare announced it turned on Encrypted SNI (ESNI) across all of its network.

http://feedproxy.google.com/~r/Securityweek/~3/4ixDYrbNOuc/mozilla-brings-encrypted-sni-firefox-nightly

Apple’s Revamped Privacy Website Offers Users Access to Their Data

Apple users can now get a copy of the data the tech giant has on them, directly from a refreshed and expanded privacy website rolled out this week.

http://feedproxy.google.com/~r/Securityweek/~3/q4dDTMtUI_8/apples-revamped-privacy-website-offers-users-access-their-data

Tumblr Vulnerability Exposed User Account Information

Tumblr on Wednesday disclosed a vulnerability that could have been exploited to obtain user account information, including email addresses and protected passwords.

http://feedproxy.google.com/~r/Securityweek/~3/XJewBjs–oM/tumblr-vulnerability-exposed-user-account-information