Risky Bulletin
Risky Biz News: Explosive whistleblower report exposes Twitter's shoddy security
In other news: Oracle sued in the US in privacy case; two new air-gap exfiltration channels disclosed; and Windows Dirty Pipe vulnerability.
Catalin Cimpanu
Risky Bulletin
Risky Biz News: Bitcoin ATMs hacked
In other news: VIASAT hack impacted French emergency services; LockBit gang gets DDOSed; and Tox sees usage as C&C channel.
Risky Bulletin
Risky Biz News: Clarifying the "DOD can't use software with vulnerabilities" misunderstanding
In other news: Estonia reports record DDoS attacks; Brazil police conduct raids in Lapsus$ investigation; and Ryuk money launderer arrested.
Risky Bulletin
Risky Biz News: Programmers will need to learn to love MFA, even if they like it or not
In other news: Almost $2 billion worth of crypto lost in H1 2022; a look into the BraZZZerSFF cybercrime service; and Signal and DigitalOcean impacted by third-party breaches.
Risky Bulletin
Risky Biz News: Is ransomware going after the Global South? Sure looks like it!
In other news: Another major Chinese user data leak; PAN bug abused in DDoS attacks; and SIDH broken for the third time.
Risky Bulletin
Risky Biz News: FIRST releases TLP v2.0
In other news: Hacktivists leak LatAm mining data; GitHub users attacked with phony repos; and academics find new eavesdropping method via fiber optics cables.
Risky Bulletin
Risky Biz News: Would a tax relief for SMBs improve cybersecurity postures and ransomware defenses?
In other news: Nomad crypto platform robbed for all it has (had); Robinhood fined $30 million; and Samsung debuts "Repair Mode" security feature.
Risky Bulletin
Risky Biz News: Confluence servers under attack due to hardcoded password
In other news: Russian postal service data leaked; new Rowhammer technique disclosed; and new post-quantum cryptography attack.
Risky Bulletin
Risky Biz News: Microsoft puts the limelight on another spyware maker—DSIRF from Austria
In other news: Rostelecom hijacks Apple traffic; new Cytrox and NSO incidents discovered in the EU; and fewer ransomware victims are paying.
Risky Bulletin
Risky Biz News: Microsoft mitigates PPL exploit after four years
In other news: Dutch government fears China might turn off its solar panels; new UEFI rootkit targets ASUS and Gigabyte motherboards; and WebAssembly used for crypto-mining in the wild.
Risky Bulletin
Risky Biz News: Google removes app permissions from the Play Store
In other news: Denmark bans Google Workspace; Tor Browser gets built-in HTTPS-Only Mode; WatchDog botnet still going strong.
Risky Bulletin
Risky Biz News: Chinese APT targeted White House reporters ahead of Jan. 6 insurrection
In other news: Vault7 leaker found guilty at retrial; DoT is coming to Windows; and Iran puts the entire country in Safe Search mode.