Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

2/28/2020
11:50 AM
Jai Vijayan
Jai Vijayan
Slideshows
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
100%
0%

6 Truths About Disinformation Campaigns

Disinformation goes far beyond just influencing election outcomes. Here's what security pros need to know.
Previous
1 of 7
Next

Exploding social media use and the growing availability of software bots and tools for manipulating video and other online content have made it easier than ever for bad actors to conduct broad disinformation campaigns.

While many tend to think of these campaigns as being mostly aimed at influencing election outcomes, the reality is that disinformation impacts a lot more than just politics and political leaders.

Recently, governments, hacktivists, and other threat actors have begun using disinformation and propaganda to push various partisan agendas, including those tied to health emergencies like the Coronavirus, religious beliefs, and financial markets. Security experts expect those with malintent to increasingly use disinformation campaigns to try and harm companies' brands and reputations, spread rumors about business leaders, and hurt organizations financially.

"Disinformation is as old as communication. It just happens to take a new form," says Chris Morales, head of security analytics at Vectra. "Fighting disinformation is hard and comes down to what people will and will not believe."

Following are six things to know about disinformation campaigns.

 

Jai Vijayan is a seasoned technology reporter with over 20 years of experience in IT trade journalism. He was most recently a Senior Editor at Computerworld, where he covered information security and data privacy issues for the publication. Over the course of his 20-year ... View Full Bio

Previous
1 of 7
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
boholuxe
50%
50%
boholuxe,
User Rank: Apprentice
3/1/2020 | 5:52:47 AM
Corona desinformation
In my small country 4-5 days people were talking that we already have corona in our country. Everyone has a friend doctor who said him that we already have corona case in our country
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
2/29/2020 | 11:34:41 AM
Mudslinging and Disinformation
Though it is different, the aim is the same effect as mudslinging. You are using information that you would deem unfavorable to paint your opponent in that light. True or False it can be difficult to sway public opinion once information has been so readily thrust into your brain.
COVID-19: Latest Security News & Commentary
Dark Reading Staff 6/3/2020
Stay-at-Home Orders Coincide With Massive DNS Surge
Robert Lemos, Contributing Writer,  5/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-4177
PUBLISHED: 2020-06-03
IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174732.
CVE-2020-4180
PUBLISHED: 2020-06-03
IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 174735.
CVE-2020-4182
PUBLISHED: 2020-06-03
IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174738.
CVE-2020-4187
PUBLISHED: 2020-06-03
IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174805.
CVE-2020-4190
PUBLISHED: 2020-06-03
IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174851.