Apple M1 Malware Found, Brave Browser Leaked DNS Queries - ThreatWire

Clubhouse uses Agora, and audio data was leaked by a user, Apple’s new M1 Chip already has malware designed for it, and the Brave Browser Leaked Tor Addresses! All that coming up now on ThreatWire.

 #threatwire #hak5

Links:

Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

Watch this on youtube: https://youtu.be/yu4ujL-7G6Q 

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode 

Support ThreatWire!  https://www.patreon.com/threatwire 

Links:

0:00 Welcome!

Agora SDK Bug & Clubhouse

https://www.mcafee.com/blogs/other-blogs/mcafee-labs/dont-call-us-well-call-you-mcafee-atr-finds-vulnerability-in-agora-video-sdk/

https://threatpost.com/sdk-bug-spy-calls-dating-healthcare-apps/164068/

https://thehackernews.com/2021/02/agora-sdk-bug-left-several-video.html

https://www.cyberscoop.com/flaw-agora-video-calling-software-eavesdroppers/

https://docs.agora.io/en/Agora%20Platform/security_practice?platform=Android

https://www.theverge.com/2021/2/14/22282772/clubhouse-improve-security-stanford-researchers-china-security

https://twitter.com/stanfordio/status/1360423156356325377

https://www.theverge.com/2021/2/22/22294938/clubhouse-audio-data-siphon-vulnerability-ios-app

https://www.bloomberg.com/news/articles/2021-02-22/clubhouse-chats-are-breached-raising-concerns-over-security

Apple M1 Malware

https://objective-see.com/blog/blog_0x62.html

https://www.virustotal.com/gui/file/b94e5666d0afc1fa49923c7a7faaa664f51f0581ec0192a08218d68fb079f3cf/detection

https://9to5mac.com/2021/02/17/first-apple-silicon-optimized-malware/

https://threatpost.com/macos-malware-apple-m1-processor/164075/

https://support.apple.com/guide/security/welcome/web

https://threatpost.com/apple-2021-platform-security-guide/164094/

Brave Browser

https://www.bleepingcomputer.com/news/security/brave-privacy-bug-exposes-tor-onion-urls-to-your-dns-provider/

https://github.com/brave/brave-core/pull/7769

https://www.zdnet.com/article/brave-browser-leaks-onion-addresses-in-dns-traffic/

https://twitter.com/bcrypt/status/1362796915063021569 v

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Our Site → https://www.hak5.org

Shop →  http://hakshop.myshopify.com/

Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1

Support → https://www.patreon.com/threatwire

Contact Us → http://www.twitter.com/hak5

Threat Wire RSS → https://shannonmorse.podbean.com/feed/

Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubs

Host: Darren Kitchen → https://www.twitter.com/hak5darren

Host: Mubix → http://www.twitter.com/mubix

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆