Insider threats are one of the most significant security concerns for all businesses. Many companies do not recognize the dangers that may exist within their own staff. This can quickly become apparent when an employee with a grudge is terminated. This employee was with the company for just 6 months, but was able to cause over $100,000 in damage within two days of her termination.
Researchers at Ben Gurion University have demonstrated a new class of TEMPEST attack for intercepting confidential information. Their technique involves recovering sound by analyzing optical emanations from a device’s power indicator LED, specifically in the circuits providing power to various speaker systems. Could your conversations be vulnerable?
Interview with Jonna Mendez, former CIA Chief of Disguise from Wired Magazine. Being a spy has always been difficult. During the Cold War, being a spy in Moscow was especially hard...
Here is an in depth review of the MESA, the Mobility Enhanced Spectrum Analyzer for TSCM, from Research Electronics International. We put the MESA through its paces and provide the results of our tests as well as our thoughts and experiences using the unit on the job.
Lessons learned. An eavesdropper planted listening devices in a neighbor's home. She finds multiple devices then catches the stalker on video when he comes back to retrieve the devices. Some of the steps she takes provide good lessons and are worth paying attention to.
Recently revealed at the RSA security conference and reported in TechTarget, researchers from security firm Guardicore were able to successfully turn Comcast TV voice remotes into eavesdropping tools, covertly recording conversations via the remote's microphone.
2021 update: originally posted in April of 2020, a year later this article is still very significant. Empty offices and increased work from home creates privacy and information security problems. Meetings once contained in a secure board room have now spread out to executive homes in multiple locations, each one with it's own inherent security vulnerabilities. The need for TSCM sweeps has moved to a new level.
A loner installed a listening device to eavesdrop on neighbors before launching a “carefully planned, premeditated” attack, where he used a crossbow to kill a council worker and seriously injured his girlfriend. This helps demonstrate the importance of TSCM for personal protection.
Cloud CCTV company Verkada suffers a breach exposing almost 150,000 cameras. Security measures in one area may just move the target to a different area. Click to read more.
I was happy to be on the Circuit Magazine podcast with Phelim Rowe and Elijah Shaw discussing TSCM and related security concerns. Click to learn more.
Morse code used to hide malicious URLs in a novel phishing attack.
CCTV cameras in your facility can be very important for security. At the same time, though, it is important to consider the privacy concerns of employees.
A courthouse in Jackson County, Alabama, had security cameras installed in 2019 after an incident involving firearms. This sounds quite appropriate, although one of the cameras later caused concern that it may have been used for inappropriate surveillance of a female employee. News reports did not discuss the actual location of the camera though.
In December of 2020, the camera of concern was brought to the attention of authorities. There was enough concern for the State Bureau of Investigation to look into the matter.
The camera in question was promptly removed, but the concern prompted them to hire a professional sweep of the facility.
From WHNT News19
One day after the investigation was made public, Commission Chairman Tim […]
I've been away from the keyboard for a while, so I thought I would post a few updates as we begin the new year. - hidden cameras, recording devices, horses on the loose, and the passing of two spy genre greats in 2020.
Smart appliances have been sought after since long before the Jetson’s and Disney’s Tomorrowland. With the Internet of Things and cloud connected devices, there is even more of a concern as so many dreams of the past come to reality. Here are some recent developments that may cause you to double check your firewall.
Two recent security podcasts discuss Technical Surveillance Countermeasures with Charles Patterson. "Conversations in Close Protection" is geared toward the executive protection professional and "The Risk Advisor" podcast is oriented more toward the corporate security director and business owner. Grab a cup of coffee and enjoy.
When you move into new facilities or new offices, and when previous executives move out, get transferred, or (especially) fired, that is an important time to have your offices swept for possible surveillance devices.
The former president of the Fraternal Order of Police in Chicago conveniently left behind a live covert video camera with remote access.
When Graham lost his bid for reelection, he promptly cleared out of his office. Three weeks later, after the new boss, John Catanzara, took over, the camera was found, still working.
A sweep of the entire building was then conducted.
“The issue was when I took over, he had an obligation to tell me, and he didn’t. It’s really that simple,” Catanzara said. “We’re talking about a past president of this lodge. This isn’t just an average policeman doing something silly and facing charges for this lodge. You’d expect someone who’s been and member […]
MLB General Manager caught on open mic creates an embarrassing situation. Once information has "left the building" it's difficult to get it back!
Where do you store your passwords? Recent blunders on TV reveal passwords in plain view of the camera.