Threat Note – Page 1855 – Aggregating Cyber Insights

From Schneier on Security – Political Disinformation and AI

Elections around the world are facing an evolving threat from foreign actors, one that involves artificial intelligence. Countries trying to influence each other’s elections entered a new era in 2016,…

Samir K October 5, 2023

Vulnerabilities

From Cybersecurity Help – North Korean hackers target S.Korea’s shipbuilders

The attacks were part of North Korea's strategy to strengthen its naval military power. Read More

Samir K October 5, 2023

Vulnerabilities

From Cybersecurity Help – Apple, Atlassian ship patches for iOS, Confluence zero-days

Cisco has also released security updates to patch a backdoor in its CER software. Read More

Samir K October 5, 2023

Podcast

Smashing Security – Royal family attacked, keyless car theft, and a deepfake Tom Hanks

Is a deepfake Tom Hanks better than the real thing? Who has been attacking the British Royal Family's website, and why? And how can you protect your vehicle from the…

Samir K October 4, 2023

Vulnerabilities

From Cybersecurity Help – Mobile operator Lyca Mobile confirms cyberattack

The cyberattack “impacted some national and international calling.” Read More

Samir K October 4, 2023

Articles

From Schneier on Security – Malicious Ads in Bing Chat

Malicious ads are creeping into chatbots. Read More

Samir K October 4, 2023

Vulnerabilities

Recap of 0 Day Vulnerabilities from 2022

Zero-day vulnerabilities, in the realm of cybersecurity, refer to software or hardware vulnerabilities that are unknown to the vendor or developer and have not been patched or mitigated yet. These…

Samir K October 4, 2023

Articles

From Schneier on Security – Hacking Gas Pumps via Bluetooth

Turns out pumps at gas stations are controlled via Bluetooth, and that the connections are insecure. No details in the article, but it seems that it’s easy to take control…

Samir K October 3, 2023

Podcast

Darknet Diaries – 138: The Mimics of Punjab

This episode is about scammers in the Punjab region. Tarun (twitter.com/taruns21) comes on the show to tell us a story of what happened to him. Naomi Brockwell (twitter.com/naomibrockwell) makes an…

Samir K October 3, 2023

Articles

From Schneier on Security – NSA AI Security Center

The NSA is starting a new artificial intelligence security center: The AI security center’s establishment follows an NSA study that identified securing AI models from theft and sabotage as a…

Samir K October 2, 2023

Articles

From Krebs on Security – Don’t Let Zombie Zoom Links Drag You Down

Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. These…

Samir K October 2, 2023

News

From Cybercrime Magazine – Hacking Before The Internet

Phone phreaks manipulated the world’s largest machine, and company – David Braue Melbourne, Australia – Sep. 30, 2023 For a generation of today’s youths raised on smartphones, multi megabit downloads…

Samir K October 1, 2023

Articles

From Krebs on Security – A Closer Look at the Snatch Data Ransom Group

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang's internal operations. Today, we'll take a…

Samir K September 30, 2023

Research

From Schneier on Security – Friday Squid Blogging: Protecting Cephalopods in Medical Research

From Nature: Cephalopods such as octopuses and squid could soon receive the same legal protection as mice and monkeys do when they are used in research. On 7 September, the…

Samir K September 29, 2023

Research

From Cybercrime Magazine – Who’s Who In Ransomware

Gangs and strains to beware of in 2023 Sponsored by Conceal – Charlie Osborne, Cybercrime Magazine Editor-at-Large London – Sep. 29, 2023 Ransomware is one of the most virulent and…

Samir K September 29, 2023

From Security Week – Cisco Patches High-Severity Vulnerabilities in Enterprise Products

From Cyber Security News – Hackers Abuse Google Ads to Steal Users GoDaddy ManageWP login Credentials

From Schneier on Security – Smart Glasses for the Authorities

From Security Week – Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack

From Cyber Security News – 28 Fake Call History Apps on Google Play with 7.3M+ Downloads Trick Users to Steal Payments

From Cyber Security News – Malicious NuGet Packages Target Browser Credentials, SSH Keys, and Crypto Wallets

From The Hacker News – PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

From Cyber Security News – Critical vm2 Node.js Library Vulnerabilities Enables Arbitrary Code Execution Attacks

From Cyber Security News – Hackers Used Claude AI to Attack on Water and Drainage Utility Systems

From Cyber Security News – Critical Ollama Memory Leak Vulnerability Exposes 300,000 Servers Globally

From Security Week – Cisco Patches High-Severity Vulnerabilities in Enterprise Products

From Cyber Security News – Hackers Abuse Google Ads to Steal Users GoDaddy ManageWP login Credentials

From Schneier on Security – Smart Glasses for the Authorities

From Security Week – Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack

From Cyber Security News – 28 Fake Call History Apps on Google Play with 7.3M+ Downloads Trick Users to Steal Payments

From Cyber Security News – Malicious NuGet Packages Target Browser Credentials, SSH Keys, and Crypto Wallets

From Schneier on Security – Political Disinformation and AI

From Cybersecurity Help – North Korean hackers target S.Korea’s shipbuilders

From Cybersecurity Help – Apple, Atlassian ship patches for iOS, Confluence zero-days

Smashing Security – Royal family attacked, keyless car theft, and a deepfake Tom Hanks

From Cybersecurity Help – Mobile operator Lyca Mobile confirms cyberattack

From Schneier on Security – Malicious Ads in Bing Chat

Recap of 0 Day Vulnerabilities from 2022

From Schneier on Security – Hacking Gas Pumps via Bluetooth

Darknet Diaries – 138: The Mimics of Punjab

From Schneier on Security – NSA AI Security Center

From Krebs on Security – Don’t Let Zombie Zoom Links Drag You Down

From Cybercrime Magazine – Hacking Before The Internet

From Krebs on Security – A Closer Look at the Snatch Data Ransom Group

From Schneier on Security – Friday Squid Blogging: Protecting Cephalopods in Medical Research

From Cybercrime Magazine – Who’s Who In Ransomware

From Security Week – Cisco Patches High-Severity Vulnerabilities in Enterprise Products

From Cyber Security News – Hackers Abuse Google Ads to Steal Users GoDaddy ManageWP login Credentials

From Schneier on Security – Smart Glasses for the Authorities

From Security Week – Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack