You’ve got no shortage of options sharing documents and more with friends, family, and colleagues. These are your best bets.If you need to share documents and files with other people over the internet, you want to be able to do it quickly, securely, and with as little friction as possible. Thankfully, plenty of apps and services meet those three criteria.

Whether it’s tapping into the tools included with the cloud storage app you already use, or simply dragging files into an open browser window, you’ve got several options to weigh up.

All these services encrypt files in transit and when stored, stopping hackers and third parties from getting at them. However, only Firefox Send uses end-to-end encryption, which means not even Firefox can see the files. The others retain the right to access your data if compelled by law enforcement, or if it’s needed to manage the cloud services themselves. It’s also important to make sure the sharing links you generate are closely guarded, as these act as decryption keys giving access to your files.

With that said, here are your best file-sharing options—and the features that set them apart.

…

filed https://www.wired.com/category/security/

RSS https://www.wired.com/category/security/feed/

Security researchers discovered a vulnerability in the Philips Hue smart bulbs that may allow hackers to infiltrate a home’s network.Cybersecurity firm Check Point revealed the exploit through a blog post, where it detailed the method of attack that hackers may use to take advantage of the bug.

The first step in the hack, which is made possible by a remote exploit in the ZigBee low-power wireless protocol that is used on many smart home devices, is for the hacker to take control of one Philips Hue smart bulbs. By adjusting the bulb’s color and brightness, the victim will be tricked into thinking that it is glitching out.

The study concludes that since 2017 — the year President Donald Trump threatened “fire and fury like the world has never seen” against the country — the North’s use of the internet has surged about 300%. Nearly half that traffic now flows through a new connection in Russia, avoiding the North’s longtime dependency on a single digital pipeline through China.

The surge has a clear purpose, according to the report released Sunday by Recorded Future, a Cambridge, Massachusetts, group known for its deep examinations of how nations use digital weaponry: circumventing financial pressure and sanctions by the West. Over the past three years, the study concluded, North Korea has improved its ability to both steal and “mine” cryptocurrencies, hide its footprints in gaining technology for its nuclear program and cyberoperations, and use the internet for day-to-day control of its government.

“What this tells you is that our entire concept of how to control the North’s financial engagement with the world is based on an image of the North that is fixed in the past,” said Priscilla Moriuchi, a former National Security Agency analyst who directed the study and has long focused on North Korea and Iran. “They have succeeded at an easy-to-replicate model of how to move large amounts of money around the world, and do it in a way our sanctions do not touch.”

“Our sanctions system needs a radical update,” she concluded.

Moreover, the report, titled “How North Korea Revolutionized the Internet as a Tool for Rogue Regimes,” concludes that other nations are watching the North Korean model, and beginning to replicate it.

“Iran has begun to pursue cryptocurrencies as a method for facilitating international payments and circumventing U.S. financial controls,” it notes.

…

This article originally appeared in The New York Times. NB 31-pages

Click here to download the complete analysis as a PDF.

The Equifax data breach that compromised the personal data of almost 150 million Americans in 2017 unfolded like a classic robbery.The criminals identified a flaw in the credit agency’s security system, executed a plan of attack to penetrate it and devised a scheme to cover their tracks on their way out, according to a criminal indictment unsealed Monday.

Those alleged criminals, four members of the Chinese military, exploited a flaw in software that allowed U.S. consumers to dispute problems with their Equifax credit reports. That gave the hackers access to Americans’ personal information, according to the indictment.

The breach occurred after Equifax security officials failed to install a software upgrade that had been recommended to seal off digital intruders from obtaining access to the names, birthdates and Social Security numbers of the victims, the indictment says.

…

filed:

https://www.usatoday.com/tech/

(Newser) – A fascinating story in the Washington Post sounds like the far-fetched plot of a spy thriller. But it’s all true: The piece details how the CIA, with help from West Germany, was able to read the secret communications of other nations with surprising ease for more than 50 years. It seems these nations paid a Swiss firm called Crypto AG for equipment used to safeguard the communications of spies and diplomats. The company got its start with code-breaking machines in World War II, then evolved to remain on top of the field. Here is the takeaway in the Post: What “none of its customers ever knew was that Crypto AG was secretly owned by the CIA in a highly classified partnership with West German intelligence,” writes Greg Miller. “These spy agencies rigged the company’s devices so they could easily break the codes that countries used to send encrypted messages.”