Catalin Cimpanu

Risky Bulletin

Risky Biz News: SLP protocol can be abused for large-scale DDoS attacks with huge 2,200x amp factor

In other news: Israel to investigate police use of NSO spyware; VirusTotal gets an AI assistant to analyze and explain malware; Google Authenticator can now sync data to Google accounts.

Risky Bulletin

Risky Biz News: UK GovAssure program to run annual security audits on government departments

In other news: CISA picks up abandoned NCSC security tool; China is developing cyber-weapons to hijack enemy satellites; Google Cloud patches GhostToken and Asset Key Thief vulnerabilities.

Risky Bulletin

Risky Biz News: EU prepares continent-wide IR plan, complete with private sector cybersecurity reserves

In other news: FSB raids Moscow police departments following major leaks; first Pegasus infection found in Israel; 3CX was a supply chain attack in another supply chain attack.

Risky Bulletin

Risky Biz News: Apple's Lockdown Mode scores first major win against iOS zero-days

In other news: Microsoft overhauls APT naming scheme; Iranian APT goes after US critical infrastructure; RedLine Stealer malware servers temporarily disrupted.

Risky Bulletin

Risky Biz News: Israeli spyware vendor QuaDream has allegedly shut down

In other news: NCR gets ransomwared; India passes online "fact-checking" law; and Russian hackers broke into Ukrainian security cameras to track western aid convoys.

Risky Bulletin

Risky Biz News: Microsoft and Fortra go after cracked Cobalt Strike versions

In other news: EU prosecutors to investigate Predatorgate scandal; Samsung employees upload proprietary code to ChatGPT; new car hacking technique exploited in the wild.

Risky Bulletin

Risky Biz News: UK government confirms NCF offensive cyber operations

In other news: Authorities take down Genesis Market; Western Digital discloses hack; Australia and NATO ban TikTok.

Risky Bulletin

Risky Biz News: Microsoft addresses OneNote malspam problem, promises fixes through the year

In other news: China to audit Micron chips; India searches for NSO replacement; major breaches in Thailand, the UK, and the Netherlands.

Risky Bulletin

Risky Biz News: North Korean hackers behind supply chain attack on 3CX

In other news: Lumen discloses two security breaches; UAE users targeted with zero-days from Spanish vendor; VulkanFiles leak exposes Russian military hacking tools.

Risky Bulletin

Risky Biz News: White House bars federal agencies from using rogue commercial spyware

In other news: France bans recreational apps from government smartphones; Twitter source code leaked on GitHub for months; new WiFi attack disclosed.

Risky Bulletin

Risky Biz News: Team Synacktiv wins a Tesla and a cool half mil at Pwn2Own 2023

In other news: CISA rolls out pre-ransomware notification system; NCA runs fake DDoS-for-hire websites; GitHub leaks private RSA key.

Risky Bulletin

Risky Biz News: FTC looks at cloud providers, their business practices, and data security

In other news: DPRK tries to hijack stolen Euler funds; ChatGPT bug leaked user chats; China to supply Russia with "test firewall system."