Risky Bulletin
Risky Bulletin: npm attack uses AI prompts to steal creds, crypto-wallet keys
In other news: Google establishes "disruption unit"; ransomware attack disrupts Swedish municipalities; Salt Typhoon attacks have hit over 80 countries.
Latest
Seriously Risky Business
America Wants to Hack the Planet
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray. It's supported by Lawfare with help from the William and Flora Hewlett Foundation. This week's edition is sponsored by Okta. You can hear a podcast discussion of this
Risky Bulletin
Risky Bulletin: FCC removes 1,200 voice providers from US phone network
In other news: Nevada government agencies close after cyberattack; hackers breach Salesloft to pivot to Salesforce accounts; new Citrix zero-day (yawn).
Risky Bulletin
Risky Bulletin: Hackers sabotage Iranian ships at sea, again
In other news: Major cybercrime arrests across Africa; Chinese man extradited to South Korea for celebrity hacks; Auchan discloses data breach.
Risky Bulletin
Risky Bulletin: A decade later, Russian hackers are still using SYNful Knock, and it's still working
In other news: Apple patches zero-day used in "extremely sophisticated attack"; Scattered Spider member gets 10 years in prison; Microsoft restricts Chinese firms from MAPP.
Seriously Risky Business
When the Chips Were Down, Russian Cyber Security Picked a Side
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray. It's supported by Lawfare with help from the William and Flora Hewlett Foundation. This week's edition is sponsored by Kroll. You can hear a podcast discussion of this
Risky Bulletin
Risky Bulletin: NIST releases face-morphing detection guideline
In other news: Oracle CSO departs after 37 years; Europol offers reward for Qilin admins; UK drops Apple backdoor request.
Risky Bulletin
Risky Bulletin: Academics pull off novel 5G attack
In other news: Ransomware hits car recyclers across North America; VPN apps share the same hardcoded password; Bangladesh spent $190 million on surveillance tools.
Risky Bulletin
Risky Bulletin: MadeYouReset vulnerability enables unlimited HTTP/2 DDoS attacks
In other news: Russia blocks Telegram and WhatsApp calls; N-able zero-days exploited in the wild; Norway blames dam hack on Russia.
Seriously Risky Business
Drug Cartels Are the New APTs
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray. It's supported by Lawfare with help from the William and Flora Hewlett Foundation. This week's edition is sponsored by Yubico. You can hear a podcast discussion of this
Risky Bulletin
Risky Bulletin: Crypto-thieves turn their sights to Open VSX
In other news: Russia suspected of US Courts hack; DarkBit ransomware decrypted; new Heracles attack against AMD processors.
Risky Bulletin
Risky Bulletin: Researcher scores $250,000 for Chrome bug
In other news: WinRAR patches zero-day; new TETRA comms protocol vulnerabilities; researcher gains access to Microsoft's internal network for fun and no profit.