Britain’s Huawei oversight board has said the Chinese company is a threat to British national security after all – and some existing mobile network equipment will have to be ripped out and replaced to get rid of said threat.

“The work of HCSEC [Huawei Cyber Security Evaluation Centre]… reveals serious and systematic defects in Huawei’s software engineering and cyber security competence,” said the HCSEC oversight board in its annual report, published this morning.

By combining data pools and platforms, the companies hope to find more insights, build better predictive models and manage customer experiences better.

This is an interesting story of a serious vulnerability in a Huawei driver that Microsoft found. The vulnerability is similar in style to the NSA’s DOUBLEPULSAR that was leaked by the Shadow Brokers — believed to be the Russian government — and it’s obvious that this attack copied that technique.

Bezos Investigation Finds the Saudis Obtained His Private Data
https://www.thedailybeast.com/jeff-bezos-investigation-finds-the-saudis-obtained-his-private-information

The National Enquirer’s lawyer tried to get me to say there was no hacking.

“Our investigators and several experts concluded with high confidence that the Saudis had access to Bezos’ phone, and gained private information.”

Experts with whom we consulted confirmed New York Times reports on the Saudi capability to “collect vast amounts of previously inaccessible data from smartphones in the air without leaving a trace—including phone calls, texts, emails”—and confirmed that hacking was a key part of the Saudis’ “extensive surveillance efforts that ultimately led to the killing of [Washington Post] journalist Jamal Khashoggi.”

Some Americans will be surprised to learn that the Saudi government has been intent on harming Jeff Bezos since last October, when the Post began its relentless coverage of Khashoggi’s murder. The Saudi campaign against Bezos has already been reported by CNN International, Bloomberg, The Daily Beast, and others.

Saudi Arabia attacks people in many ways, obviously, including through their elaborate social media program that uses sophisticated technology and paid surrogates to create artificially trending hashtags

Brace yourselves: Exploit published for serious Magento bug allowing card skimming [Updated]
Magento admins: Beware of SQL flaw that requires no authentication.
https://arstechnica.com/information-technology/2019/03/severe-magento-bug-opens-300k-commerce-sites-to-card-skimming-attacks/

Tesla cars keep more data than you think, including this video of a crash that totaled a Model 3
https://www.cnbc.com/2019/03/29/tesla-model-3-keeps-data-like-crash-videos-location-phone-contacts.html

Crashed Tesla vehicles, sold at junk yards and auctions, contain deeply personal and unencrypted data including info from drivers’ paired mobile devices, and video showing what happened just before the accident.
Security researcher GreenTheOnly extracted unencrypted video, phonebooks, calendar items and other data from Model S, Model X and Model 3 vehicles purchased for testing and research at salvage.
Hackers who test or modify the systems in their own Tesla vehicles are flagged internally, ensuring that they are not among the first to receive over-the-air software updates first.

A hacker is responding to the New Zealand mosque shooting by booby-trapping the attacker’s manifesto with malware.

Russian security firm Kaspersky last week didn’t release the full list all MAC addresses that hackers hardcoded into their malware to surgically target a specific pool of users.

offline tool and launched an online web page where ASUS PC users can search for their MAC addresses to check whether they were in the hit list.

ASUS Hack: Operation ShadowHammer
It was revealed last week that a group of state-sponsored hackers managed to hijack ASUS Live automatic software update server last year and pushed malicious updates to over one million Windows computers worldwide in order to infect them with backdoors.

Though the second stage malware was only pushed to nearly 600 targeted users, it doesn’t mean that millions of ASUS computers which received the malicious software update are not compromised