Threat Intelligence

4/14/2017
10:50 AM
50%
50%

Microsoft: Foreign Surveillance Requests Under FISA Shot Up in 2016

The company received 1,000-1,499 surveillance requests from January0- toJune 2016, the highest since 2011.

Microsoft said that from January- to June 2016, it received between 1,000 and 1,499 tracking orders under the Foreign Intelligence Surveillance Act (FISA) for revealing user content, the highest request to the company since 2011, Reuters reports. The report further says user accounts fell from 17,500-17,999 to 12,000-12,499 during this period.

The FISA request data was included in a recent biannual transparency report published by Microsoft, along with a national security letter under the USA Freedom Act.

FISA orders are tightly guarded secrets and issued by judges of Foreign Intelligence Surveillance Court, but the Trump administration is currently scrutinizing the scope of such orders following the president's "unsubstantiated allegations" of spying by the Obama administration, Reuters said.

FISA will partly expire by year end unless renewed. Efforts are under way by several members of the Congress to define the transparency of such a rule as well as usage limits of data collected.

Read full story here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
'Hidden Tunnels' Help Hackers Launch Financial Services Attacks
Kelly Sheridan, Staff Editor, Dark Reading,  6/20/2018
Inside a SamSam Ransomware Attack
Ajit Sancheti, CEO and Co-Founder, Preempt,  6/20/2018
Tesla Employee Steals, Sabotages Company Data
Jai Vijayan, Freelance writer,  6/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-12697
PUBLISHED: 2018-06-23
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.
CVE-2018-12698
PUBLISHED: 2018-06-23
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
CVE-2018-12699
PUBLISHED: 2018-06-23
finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.
CVE-2018-12700
PUBLISHED: 2018-06-23
A Stack Exhaustion issue was discovered in debug_write_type in debug.c in GNU Binutils 2.30 because of DEBUG_KIND_INDIRECT infinite recursion.
CVE-2018-11560
PUBLISHED: 2018-06-23
The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100.