Risky Bulletin
Risky Bulletin: India bans app used to hack e-rickshaws in viral videos
In other news: NSA TAO is back; Accenture has another data breach; leak exposes another suspected Chinese cyber contractor.
Catalin Cimpanu
Risky Bulletin
Risky Bulletin: All new cars to include a camera aimed at the driver's face
In other news: Canada hacked a ransomware gang; Taiwan charges two execs with helping Chinese hackers; new vulnerabilities can bork Hoymiles solar panels.
Risky Bulletin
Risky Bulletin: Android drops PIN guessing limit from 1,800 attempts to just 20
In other news: EU MP targeted with Pegasus; Alibaba bans employees from using Claude; new Bad Epoll vulnerability in Linux.
Risky Bulletin
Risky Bulletin: FatFs bugs enable physical access attacks on a load of devices
In other news: Password spray attack targets M365 and bypasses MFA; AI agent caught deploying ransomware in live hacks; webinar platform sues security firms over bad IOCs.
Risky Bulletin
Risky Bulletin: Researcher drops giant cache of zero-day exploits
In other news: Breach at a sensitive DHS network; US Supreme Court restricts geofence warrants; Huntress denies malicious insider threat accusations.
Risky Bulletin
Risky Bulletin: Microsoft disrupts StegoAd operation
In other news: US government takes more control of frontier AI model releases; AMD reintroduces CPU security feature after backlash; Iranian APT member arrested in Montenegro.
Risky Bulletin
Risky Bulletin: Law enforcement agencies and security firms take down Amadey and StealerC
In other news: Japan's army used infected USB drives; Anthropic accuses Alibaba of distillation attacks; Australia finds "digital dynamite" on critical networks.
Risky Bulletin
Risky Bulletin: The FortiBleed incident is so much worse than a simple credentials leak
In other news: White House EO sets out 2031 PQC deadline; Meta leaks employee keystroke data; a third of Samsung and LG TVs act as proxies.
Risky Bulletin
Risky Bulletin: Klue breach impacts security firms
In other news: Hacker breaches Brazil's national alert system; North Korean hackers are behind the Mastra supply chain attack; new unfixable exploit in Apple's A12/A13 chips.
Risky Bulletin
Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices
In other news: A bunch of Fortinet creds leak online; supply chain attack hits Mastra AI framework; Europol disrupts SocGolish.
Risky Bulletin
Risky Bulletin: China arrests members of Silver Fox cybercrime group
In other news: EU to help Ukraine in major cyberattacks; MS-ISAC loses 70% of members; SBOM still not widely adopted.
Risky Bulletin
Risky Bulletin: Arch Linux supply chain attack spreads to 1,900+ AUR packages
In other news: FISA S702 expires for the first time since 2008; FBI takes down Chinese phishing service; major supply chain attack hits WordPress ecosystem.