Tesla was targeted in a failed cyberattack, an Autodesk Exploit was Used In The Wild, and Bypassing PINs on contactless VISA Cards! All that coming up now on ThreatWire. #threatwire #hak5

Links:
Support me on alternative platforms! https://snubsie.com/support

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/shannons-store-24

http://www.youtube.com/ShannonMorse?sub_confirmation=1  --  subscribe to my tech channel!

ThreatWire is only possible because of our Patreon patrons! Sign up now for ACTION ALERTS! Help me reach our next ThreatWire goal to unlock merch tiers and an audio podcast! https://www.patreon.com/threatwire 

Links:
Tesla targeted in cyberattack
https://www.cnet.com/roadshow/news/tesla-cyberattack-elon-musk/
https://www.justice.gov/opa/press-release/file/1308766/download
https://www.teslarati.com/tesla-employee-fbi-thwarts-russian-cybersecurity-attack
https://threatpost.com/elon-musk-confirms-tesla-factory-a-target-of-foiled-cyberattack/158762/
https://www.cyberscoop.com/tesla-ransomware-attempt-elon-musk-russia/


Autodesk vulnerability targeted in industrial espionage campaign
https://www.bitdefender.com/files/News/CaseStudies/study/365/Bitdefender-PR-Whitepaper-APTHackers-creat4740-en-EN-GenericUse.pdf
https://threatpost.com/hackers-exploit-autodesk-flaw-in-recent-cyberespionage-attack/158669/
https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0005
https://thehackernews.com/2020/08/autodesk-malware-attack.html
https://www.cyberscoop.com/autodesk-plugin-bitdefender-real-estate-hack/


Bypassing PINs for Visa Contactless Payments
https://www.zdnet.com/article/academics-bypass-pins-for-visa-contactless-payments/
https://arxiv.org/pdf/2006.08249.pdf
https://www.youtube.com/watch?v=JyUsMLxCCt8


Photo credit:
https://upload.wikimedia.org/wikipedia/commons/8/8d/Tesla_Gigafactory_1_-_December_2019.jpg


-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  https://www.hakshop.com
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darren
Host: Mubix → http://www.twitter.com/mubix
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Bypassing PINs on Contactless VISA Cards; Tesla Targeted Cyberattack Fail - ThreatWire

Threat Wire by Hak5 is a quick weekly dose of news about security, privacy, and what is threatening the freedom of our Internet.

Technology

Tech News

Podcasting

Gadgets

Software How-To

News

Click for links and more info ⬇️⬇️⬇️

OpenSea had a malicious NFT problem, a twitch hack update, and whatsapp officially adds end to end encrypted backups! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/Qx-PHk2cgqM

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Opensea
https://research.checkpoint.com/2021/check-point-research-prevents-theft-of-crypto-wallets-on-opensea-the-worlds-largest-nft-marketplace/ 
https://thehackernews.com/2021/10/critical-flaw-in-opensea-could-have-let.html
https://threatpost.com/opensea-nfts-cryptowallet-balances/175453/

Twitch
https://blog.twitch.tv/en/2021/10/15/updates-on-the-twitch-security-incident/?utm_referrer=https://t.co/ 
https://www.bleepingcomputer.com/news/security/twitch-downplays-this-months-hack-says-it-had-minimal-impact/
https://threatpost.com/twitch-leak-emails-passwords/175390/ 
https://www.zdnet.com/article/twitch-downplays-massive-breach-says-no-passwords-or-login-credentials-leaked/

Whatsapp
https://about.fb.com/news/2021/10/end-to-end-encrypted-backups-on-whatsapp/ 
https://www.bleepingcomputer.com/news/security/whatsapp-rolls-out-ios-android-end-to-end-encrypted-chat-backups/
https://www.zdnet.com/article/whatsapp-starts-slowly-rolling-out-encrypted-backups/

 

Thumbnail Credit:
https://cryptoslate.com/wp-content/uploads/2021/03/opensea-sea-1024x538.jpg


Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

OpenSea Had A Malicious NFT Problem  - ThreatWire

 Click for links and more info ⬇️⬇️⬇️

Fraudsters stole millions from veterans, SMS infrastructure was hacked, and Facebook is having a worst week ever! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/roznl90rljU

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Fraudsters Stole From Veterans:
https://www.bleepingcomputer.com/news/security/transnational-fraud-ring-stole-millions-from-army-members-veterans/
https://threatpost.com/transnational-fraud-military-members/175298/
https://www.zdnet.com/article/fraudster-jailed-for-stealing-us-military-health-records-millions-in-benefits/
https://www.zdnet.com/article/army-contractor-sentenced-for-stealing-1-5-million-from-veterans-through-dod-benefit-sites/

SMS Infrastructure Was Hacked:
https://www.syniverse.com/products/operator-messaging
https://www.businessinsider.com/syniverse-hackers-access-billions-of-texts-through-breach-2021-10
https://www.sec.gov/Archives/edgar/data/1839175/000119312521284329/d234831dprem14a.htm
https://www.vice.com/en/article/z3xpm8/company-that-routes-billions-of-text-messages-quietly-says-it-was-hacked

Facebook Down:
https://arstechnica.com/information-technology/2021/10/facebook-instagram-whatsapp-and-oculus-are-down-heres-what-we-know/
https://www.bleepingcomputer.com/news/technology/facebook-whatsapp-and-instagram-down-due-to-dns-outage/
https://www.cbsnews.com/news/facebook-whistleblower-frances-haugen-misinformation-public-60-minutes-2021-10-03/
https://arstechnica.com/tech-policy/2021/09/facebooks-latest-apology-reveals-security-and-safety-disarray/
https://www.wsj.com/articles/facebook-whistleblower-frances-haugen-says-she-wants-to-fix-the-company-not-harm-it-11633304122?mod=djemalertNEWS
https://www.cnet.com/news/facebook-whistleblower-to-testify-before-congress-how-to-watch/?ftag=COS-05-10aaa0b&PostType;=link&ServiceType;=twitter&UniqueID;=ACA16F60-2556-11EC-B5CD-A6BE4744363C&TheTime;=2021-10-04T21%3A04%3A33
https://www.vice.com/en/article/4avjqb/conspiracy-theories-about-facebook-outage-spread-even-without-facebook
https://9to5mac.com/2021/10/04/instagram-facebook-whatsapp-down/
https://krebsonsecurity.com/2021/10/what-happened-to-facebook-instagram-whatsapp/

Thumbnail Credit:
https://cdn.pixabay.com/photo/2015/09/26/13/38/facebook-959060_1280.jpg 


Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

Facebook Was Down?! Facebook Outage Causes Conspiracies  - ThreatWire

Click for links and more info ⬇️⬇️⬇️

100,000 credentials leaked due to an autodiscover flaw, 3 Apple zero days were published online, and the FBI secretly held a ransomware decryptor key! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/2XZqx6Coa2Y

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Links:
100k windows exchange emails
https://www.bleepingcomputer.com/news/microsoft/microsoft-rushes-to-register-autodiscover-domains-leaking-credentials/
https://www.guardicore.com/labs/autodiscovering-the-great-leak/
https://thehackernews.com/2021/09/microsoft-exchange-bug-exposes-100000.html
https://arstechnica.com/information-technology/2021/09/exchange-outlook-autodiscover-bug-exposed-100000-email-passwords/
https://www.bleepingcomputer.com/news/microsoft/microsoft-rushes-to-register-autodiscover-domains-leaking-credentials/
https://www.blackhat.com/asia-17/briefings/schedule/#all-your-emails-belong-to-us-exploiting-vulnerable-email-clients-via-domain-name-collision-5301
https://github.com/guardicore/labs_campaigns/tree/master/Autodiscover

Apple Stuff:
https://arstechnica.com/information-technology/2021/09/three-ios-0-days-revealed-by-researcher-frustrated-with-apples-bug-bounty/
https://www.bleepingcomputer.com/news/security/researcher-drops-three-ios-zero-days-that-apple-refused-to-fix/
https://habr.com/en/post/579714/
https://www.vice.com/en/article/k78dpx/researcher-publishes-source-code-for-three-unpatched-iphone-exploits
https://habr.com/en/post/580272/
https://www.reddit.com/r/jailbreak/comments/pvaztb/free_release_entitlementfix_workaround_for_the_3/

Ransomware Key
https://arstechnica.com/gadgets/2021/07/kaseya-gets-master-decryptor-to-help-customers-still-suffering-from-revil-attack/
https://arstechnica.com/information-technology/2021/09/ransomware-victims-panicked-while-fbi-secretly-held-revil-decryption-key/
https://www.cnet.com/tech/services-and-software/fbi-reportedly-withheld-ransomware-key-from-business-for-3-weeks-in-failed-sting/
https://twitter.com/BitdefenderLabs/status/1438489191491440646?s=20
https://www.washingtonpost.com/national-security/ransomware-fbi-revil-decryption-key/2021/09/21/4a9417d0-f15f-11eb-a452-4da5fe48582d_story.html

 

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

3 Apple Zero Days Publicly Released; FBI Withholds Ransomware Decryptor Key  - ThreatWire

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

An Epic Hack of Epik Customer Data, Apple Patches Exploit Used By Pegasus Spyware, and ExpressVPN Comes Under Fire! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/W5YDss-olvA

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Epik:
https://arstechnica.com/information-technology/2021/09/anonymous-leaks-gigabytes-of-data-from-epik-web-host-of-gab-and-parler/
https://twitter.com/stevanzetti/status/1437482759241469958
https://twitter.com/stevanzetti/status/1437818671712329748
https://arstechnica.com/information-technology/2021/09/epik-data-breach-impacts-15-million-users-including-non-customers/
https://haveibeenpwned.com/

Apple:
https://www.vice.com/en/article/3aq9q3/apple-patches-zero-click-imessage-hack-used-by-nso
https://citizenlab.ca/2021/09/forcedentry-nso-group-imessage-zero-click-exploit-captured-in-the-wild/
https://thehackernews.com/2021/09/apple-issues-urgent-updates-to-fix-new.html
https://arstechnica.com/information-technology/2021/09/apple-fixes-imessage-zero-day-exploited-by-pegasus-spyware/
https://www.cnet.com/tech/services-and-software/apples-ios-14-8-security-fix-protect-your-iphone-from-pegasus-now/

ExpressVPN:
https://www.zdnet.com/article/expressvpn-sells-to-kape-technologies-for-936-million/
https://www.expressvpn.com/blog/expressvpn-joining-kape/
https://www.vice.com/en/article/3aq9a5/us-company-sold-zero-click-exploit-project-raven-uae
https://www.reuters.com/investigates/special-report/usa-spying-raven
https://www.expressvpn.com/blog/daniel-gericke-expressvpn/
https://www.documentcloud.org/documents/21062379-raven_charge

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

What Does ExpressVPN Have To Do With The UAE’s Project Raven? - ThreatWire

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

60 Million+ Fitness Records Exposed, A record breaking botnet hit Yandex, and WhatsApp Rolls Out E2EE Backups! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/s2QFPS5Bqd8

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
60 Million+ Fitness Records Exposed
https://www.macobserver.com/news/gethealth-data-leak/
https://www.zdnet.com/article/over-60-million-records-exposed-in-wearable-fitness-tracking-data-breachover-60-million-wearable-fitness-tracking-records-exposed-via-unsecured-database/
https://www.websiteplanet.com/blog/gethealth-leak-report/
https://www.programmableweb.com/api/gethealth-rest-api

Record Breaking Botnet
https://www.bleepingcomputer.com/news/security/new-m-ris-botnet-breaks-ddos-record-with-218-million-rps-attack/
https://www.bleepingcomputer.com/news/security/mikrotik-patches-zero-day-flaw-under-attack-in-record-time/
https://thehackernews.com/2021/09/meris-botnet-hit-russias-yandex-with.html
https://www.reuters.com/technology/russias-yandex-says-it-repelled-biggest-ddos-attack-history-2021-09-09/
https://threatpost.com/yandex-meris-botnet/169368/
https://blog.qrator.net/en/meris-botnet-climbing-to-the-record_142/

WhatsApp Rolls Out E2EE Backups
https://engineering.fb.com/2021/09/10/security/whatsapp-e2ee-backups/
https://thehackernews.com/2021/09/whatsapp-to-finally-let-users-encrypt.html
https://www.zdnet.com/article/whatsapp-details-plans-to-offer-encrypted-backups/
https://arstechnica.com/gadgets/2021/09/whatsapp-end-to-end-encrypted-messages-arent-that-private-after-all/
https://www.propublica.org/article/how-facebook-undermines-privacy-protections-for-its-2-billion-whatsapp-users

 

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

Bypassing PINs on Contactless VISA Cards; Tesla Targeted Cyberattack Fail - ThreatWire

Download our free app to listen on your phone