Swiss Text Messaging Firm's COO Departs amidst Surveillance Allegation, Facebook Takes Down Accounts belonging to 7 "Cyber-Mercenary" Firms

Thank you for listening.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments, and suggestions via voice message on the Anchor app or email to [email protected]

Swiss Company, Mitto AG is said to have operated a service that ultimately helped governments secretly surveil and track mobile phones. A hacking group known as Strongpity has made an infected version of the Notepad++ text editor app that installs malware on a victim's computer. Poor implementation of popular OAuth2.0 leads to redirection attacks that bypass most phishing detection solutions and email security solutions. Thank you for listening.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments, and suggestions via voice message on the Anchor app or email to [email protected]

LINKS:

North Korean linked Zinc hacker group sent fake job offers to employees at South Korean security companies that sell anti-malware solutions and more. A  DNA testing Firm in Ohio has disclosed a data breach where Hackers have had access to 2.1M people's CVV code, account passwords. IKEA is fighting a phishing email system attack where threat actors are targeting employees in internal phishing attacks using stolen reply-chain emails.

Thank you for listening. Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments, and suggestions via voice message on the Anchor app or email to [email protected]

LINKS:

Heating systems(HVAC) Hacks, GoDaddy Data Breach Impacts 1M, Hikvision cameras Exposed to Remote Code Execution

The PerSwaysion phishing campaign, a new malware hitting e-commerce sites, & something new about ransomware gangs

A kit, named PerSwaysion, can give cybercriminals a way to launch a phishing campaign relatively easily and with little up-front effort. A new malware is hitting e-commerce sites. Security researchers found attackers found a vulnerability in a website plug-in and used that to upload a backdoor. This allows sites' code alteration in order to allow interception of payment card data for purchases. Ransomware gangs compete in auction sessions on cybercriminal forums for zero-day vulnerabilities in software applications.  Thank you for listening.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments, and suggestions via voice message on the Anchor app or email to [email protected]

LINKS:

1.'PerSwaysion' Phishing Campaign Still Ongoing, and Pervasive

2. Linux malware agent hits eCommerce sites

3. Vulnerability Intelligence: What’s The Word In Dark Web Forums?

Another Medical Data Processing Firm involved data Breach. A Security researcher cracked 70% of sampled WiFi networks goes on to explain why phone numbers are bad WiFi passwords and Beware of phishing sites disguising as outlook Web access to get stolen credentials.

LINKS: 

Olympus, medical imaging firm suspends data systems in the US Canada and Latin America due to cyber attacks. In Microsoft's second annual digital defense report, the company provides insight into the changing cyber-crime landscape. Ranging from phishing to ransomware as a service. Also, beware of so-called free sites offering free downloads of recent blockbuster movies.

LINKS:

In this episode, the task of protecting legacy systems by organizations are discussed. Dumpster diving is a popular term in cybersecurity today. Learning how to treat data differently is crucial, whether in transit, at rest or when data is considered obsolete. Also, how we treat trash can be the difference between being a victim of identity theft or blackmail and ensuring useful info from a "dumpster" is never used against us. And Electronic Arts were in a massive data breach that resulted in source code for FIFA 21 and the Frostbite engine stolen by Hackers.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or email to [email protected].

1. Prevention Is the Only Cure: The Dangers of Legacy Systems https://beta.darkreading.com/vulnerabilities-threats/prevention-is-the-only-cure-the-dangers-of-legacy-systems

2. Hackers Steal Wealth of Data from Game Giant EA - The data includes source code for FIFA 21 and the Frostbite engine.

3. Hackers steal source code and more from Electronic Arts in massive data breach - EA falls victim to hackers in new data breach

In this episode, Start good cyber-hygiene now; the need to fix bad passwords with a password manager such as Chrome's built-in manager.  The average cost of ransomware has increased, and beware of fake browser extensions. Good cyber hygiene includes user practices such as inspecting file extensions, routine checks, self-auditing and being cautious.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments and suggestions via voice message on the Anchor app or email to [email protected].

LINKS: 

1. Fix your passwords in Chrome with a single tap 

2. Manage passwords Now 

3. FBI's IC3 Logs 6 Million Complaints 

4. One of the US's largest insurance companies reportedly paid $40 million to ransomware hackers

5. Fake Microsoft Authenticator extension discovered in Chrome Store