{"id":290202,"date":"2018-12-29T07:03:21","date_gmt":"2018-12-29T05:03:21","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=290202"},"modified":"2018-12-29T07:06:54","modified_gmt":"2018-12-29T05:06:54","slug":"top-it-security-stories-in-2018","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/290202-top-it-security-stories-in-2018.html","title":{"rendered":"Top IT security stories in 2018"},"content":{"rendered":"<p>The computer security world started the year off at a sprint when security researchers disclosed details about processor-level vulnerabilities they dubbed Meltdown and Spectre.<\/p>\n<p>Later in South Africa, Liberty became the victim of a data breach and extortion attempt in 2018, which dominated headlines.<\/p>\n<p>Here are the top security stories of 2018.<\/p>\n<hr \/>\n<h3 class=\"my-4\"><a href=\"https:\/\/mybroadband.co.za\/news\/security\/256625-96000-south-africans-affected-by-facebook-data-leak.html\">Facebook and Cambridge Analytica<\/a><\/h3>\n<p>Cambridge University academic Aleksandr Kogan developed an online personality test as a Facebook app called \u201cYourDigitalLife\u201d.<\/p>\n<p>The app allowed Cambridge Analytica to collect data on Facebook users who took the test.<\/p>\n<p>Facebook confirmed that 80 million users were affected, including 96,121 people in South Africa.<\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2017\/07\/Facebook-Logo.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-221973\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2017\/07\/Facebook-Logo.jpg\" alt=\"Facebook Logo\" width=\"640\" height=\"430\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2017\/07\/Facebook-Logo.jpg 640w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2017\/07\/Facebook-Logo-300x202.jpg 300w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2017\/07\/Facebook-Logo-595x400.jpg 595w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/a><\/p>\n<hr \/>\n<h3 class=\"my-4\"><a href=\"https:\/\/mybroadband.co.za\/news\/security\/278525-apple-and-amazon-deny-report-of-tiny-chinese-spy-chip-infiltrating-us-networks.html\">Allegations that China infiltrated Supermicro<\/a><\/h3>\n<p>Bloomberg reported that <a href=\"https:\/\/mybroadband.co.za\/news\/security\/278525-apple-and-amazon-deny-report-of-tiny-chinese-spy-chip-infiltrating-us-networks.html\"><strong>China had developed a chip<\/strong><\/a>\u00a0it implanted on Supermicro motherboards used in Amazon, Apple, and US Department of Defence servers.<\/p>\n<p>Security experts have questioned the accuracy of the report, and Supermicro stated that an independent test found no malicious hardware in its motherboards.<\/p>\n<p>Apple, Amazon, and Supermicro denied the story.<\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2013\/10\/microchip-in-hand.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-89981\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2013\/10\/microchip-in-hand.jpg\" alt=\"microchip in hand\" width=\"600\" height=\"400\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2013\/10\/microchip-in-hand.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2013\/10\/microchip-in-hand-250x166.jpg 250w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<hr \/>\n<h3 class=\"my-4\"><a href=\"https:\/\/mybroadband.co.za\/news\/hardware\/243486-meltdown-vs-spectre-what-you-need-to-know.html\">Spectre and Meltdown<\/a><\/h3>\n<p>Google Project Zero researcher Jann Horn identified three types of attacks on CPUs which other researchers classified into two types of attacks &#8211; Meltdown and Spectre.<\/p>\n<p>At the start of December, researchers released information on a new variation of the Spectre vulnerability which they said was easier to exploit. It was called\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/security\/288602-new-spectre-like-cpu-vulnerability-discovered.html\"><strong>SplitSpectre.<\/strong><\/a><\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/01\/Meltdown-and-spectre.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-243648\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/01\/Meltdown-and-spectre.jpg\" alt=\"Meltdown and spectre\" width=\"640\" height=\"430\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/01\/Meltdown-and-spectre.jpg 640w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/01\/Meltdown-and-spectre-300x202.jpg 300w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/01\/Meltdown-and-spectre-595x400.jpg 595w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/a><\/p>\n<hr \/>\n<h3 class=\"my-4\">More data leaks<\/h3>\n<p>While the Facebook\/Cambridge Analytica scandal dominated headlines for months, there were several other significant data leaks in 2018:<\/p>\n<ul>\n<li><a href=\"https:\/\/mybroadband.co.za\/news\/security\/289128-google-data-bug-exposes-info-of-52-5-million-users.html\"><strong>Google+ data bug exposes info of 52.5 million users<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/mybroadband.co.za\/news\/security\/288212-massive-data-breach-at-quora.html\"><strong>Massive data breach at Quora<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/mybroadband.co.za\/news\/security\/286192-amazon-mistakenly-leaks-customer-data.html\"><strong>Amazon mistakenly leaks customer data<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/mybroadband.co.za\/news\/security\/285222-instagram-security-flaw-exposed-some-users-passwords.html\"><strong>Instagram security flaw exposed some users\u2019 passwords<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/mybroadband.co.za\/news\/security\/281679-9-4-million-customers-affected-by-cathay-pacific-security-breach.html\"><strong>9.4 million customers affected by Cathay Pacific security breach<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/mybroadband.co.za\/news\/security\/279725-hackers-accessed-intimate-information-of-14-million-facebook-users.html\"><strong>Hackers accessed intimate information of 14 million Facebook users<\/strong><\/a><\/li>\n<li><a href=\"https:\/\/mybroadband.co.za\/news\/security\/278745-check-if-your-email-address-is-in-the-massive-apollo-database-leak.html\"><strong>126 million unique e-mail addresses exposed by Apollo data leak<\/strong><\/a><\/li>\n<\/ul>\n<hr \/>\n<h3 class=\"my-4\"><a href=\"https:\/\/mybroadband.co.za\/news\/security\/264799-hackers-want-millions-from-liberty-or-will-start-releasing-sensitive-data-report.html\">Liberty hacked and extorted<\/a><\/h3>\n<p>Financial services provider Liberty informed clients in June that it had been hit by hackers who were demanding payment for their \u201cservices.\u201d<\/p>\n<p>Subsequent reports revealed that the attackers were demanding millions under the threat that they would release sensitive client data unless they were paid.<\/p>\n<p>Liberty later confirmed that an email server had been <a href=\"https:\/\/mybroadband.co.za\/news\/security\/264831-what-hackers-took-in-the-liberty-attack.html\"><strong>compromised<\/strong><\/a> and that the attackers were trying to extort the company.<\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/04\/Malicious-email-hack.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-256777\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/04\/Malicious-email-hack.jpg\" alt=\"Malicious email hack\" width=\"640\" height=\"430\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/04\/Malicious-email-hack.jpg 640w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/04\/Malicious-email-hack-300x202.jpg 300w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/04\/Malicious-email-hack-595x400.jpg 595w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/a><\/p>\n<hr \/>\n<h3 class=\"my-4\"><a href=\"https:\/\/mybroadband.co.za\/news\/security\/259019-how-telegram-and-signal-used-domain-fronting-to-beat-censors.html\">Amazon and Google crack down on domain fronting<\/a><\/h3>\n<p>For nearly two years, messaging app Signal <a href=\"https:\/\/mybroadband.co.za\/news\/security\/258231-signal-loses-anti-censorship-tool-as-amazon-blocks-domain-fronting.html\"><strong>beat censors<\/strong><\/a> in Egypt, Qatar, and the UAE through a technique known as domain fronting.<\/p>\n<p>Telegram has used a similar approach to ensure its app remains accessible in Russia, despite the <a href=\"https:\/\/mybroadband.co.za\/news\/security\/258829-russian-crackdown-on-telegram-blocks-50-vpns-and-anonymisers.html\"><strong>regulator\u2019s shotgun approach<\/strong><\/a> to block it.<\/p>\n<p>Google and Amazon said they never intended for domain fronting to be possible on their platforms.<\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2014\/04\/Censorship-lips-sealed-zip.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-100496 size-full\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2014\/04\/Censorship-lips-sealed-zip.jpg\" alt=\"Censorship lips sealed zip\" width=\"600\" height=\"400\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2014\/04\/Censorship-lips-sealed-zip.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2014\/04\/Censorship-lips-sealed-zip-250x166.jpg 250w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<hr \/>\n<h3 class=\"my-4\"><a href=\"https:\/\/mybroadband.co.za\/news\/security\/269015-south-african-developer-finds-pizza-hut-security-flaw-which-affected-hundreds-of-websites.html\">South African developer finds Pizza Hut security flaw<\/a><\/h3>\n<p>South African developer Lionel Chetty discovered a security flaw in Pizza Hut\u2019s website which allowed users to view the information of clients who used it to place an order.<\/p>\n<p>The flaw allowed an attacker to get a list of order numbers, then retrieve the information relating to that order \u2013 such as the client\u2019s name, delivery address, and contact information.<\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2016\/05\/Pizza.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-163755\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2016\/05\/Pizza.jpg\" alt=\"Pizza\" width=\"640\" height=\"430\" \/><\/a><\/p>\n<hr \/>\n<h3 class=\"my-4\"><a href=\"https:\/\/mybroadband.co.za\/news\/security\/282531-china-reportedly-hijacking-internet-traffic-to-spy-on-western-countries.html\">China reportedly hijacking Internet traffic<\/a><\/h3>\n<p>Researchers at the US Naval War College and Tel Aviv University found evidence to suggest that China Telecom is using Border Gateway Protocol (BGP) to hijack Internet traffic and route it through computers under its control.<\/p>\n<p>The BGP hijacking conducted by China Telecom involved traffic to a \u201clarge Anglo-American bank headquarters\u201d in Italy from the United States, as well as traffic from Canada to Korean government sites.<\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2016\/01\/Africa-internet-connectivity.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-152773 size-full\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2016\/01\/Africa-internet-connectivity.jpg\" alt=\"Africa internet connectivity\" width=\"600\" height=\"400\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2016\/01\/Africa-internet-connectivity.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2016\/01\/Africa-internet-connectivity-250x166.jpg 250w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<hr \/>\n<h3 class=\"my-4\">Now read: <a href=\"https:\/\/mybroadband.co.za\/news\/technology\/289882-biggest-south-african-tech-stories-of-2018.html\">Biggest South African tech stories of 2018<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>The computer security world started the year off at a sprint when researchers disclosed details about processor-level vulnerabilities.<\/p>\n","protected":false},"author":15,"featured_media":89863,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[35,18524],"class_list":["post-290202","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-headline","tag-information-security-infosec"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/290202"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=290202"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/290202\/revisions"}],"predecessor-version":[{"id":290402,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/290202\/revisions\/290402"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/89863"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=290202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=290202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=290202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}