A daily look at the relevant information security news from overnight.

Episode 201 - 21 November 2019

Jetpack urgent update - https://www.bleepingcomputer.com/news/security/millions-of-sites-exposed-by-flaw-in-jetpack-wordpress-plugin/

Phoenix rising - https://www.zdnet.com/article/new-phoenix-keylogger-tries-to-stop-over-80-security-products-to-avoid-detection/

Gaming and crypto dump - https://threatpost.com/hackers-dump-2-2m-gaming-cryptocurrency-passwords-online/150451/

Video-no - https://www.theregister.co.uk/2019/11/20/veed_io_unsecured_aws_bucket_user_videos_exposed/

Jigsaw decrypted - https://www.zdnet.com/article/ransomware-this-free-tool-decrypts-85-variants-of-the-horror-tinged-jigsaw-malware/

A daily look at the relevant information security news from overnight.

Episode 200 - 20 November 2019

D-Link duds - https://threatpost.com/d-link-wont-fix-router-bugs/150438/

Android I see you - https://www.zdnet.com/article/android-vulnerability-lets-rogue-apps-take-photos-record-video-even-if-your-phone-is-locked/

Vets bit - https://threatpost.com/400-vet-locations-ryuk-ransomware/150443/

Ransom fail - https://www.bleepingcomputer.com/news/security/critical-windows-update-spam-fails-at-delivering-ransomware/

McTrojan - https://threatpost.com/mcdonalds-facebook-ads-banking-trojans/150425/

A daily look at the relevant information security news from overnight.

Episode 199 - 19 November 2019

Backdoor two fer - https://www.bleepingcomputer.com/news/security/linux-windows-users-targeted-with-new-acbackdoor-malware/

Macy’s MageCart - https://www.scmagazine.com/home/security-news/macys-com-magecart-attack-yields-payment-personal-info/

Mouse house hack - https://threatpost.com/disney-accounts-hacked-hijacked/150366/

ProtonMail bombed out - https://www.zdnet.com/article/protonmail-blocked-in-belarus-following-wave-of-bomb-threats-across-the-country/

Magic: The Gathering your data - https://techcrunch.com/2019/11/16/magic-the-gathering-wizards-data-exposure/

A daily look at the relevant information security news from overnight.

Episode 198 - 18 November 2019

NextCry undetectable - https://www.bleepingcomputer.com/news/security/new-nextcry-ransomware-encrypts-data-on-nextcloud-linux-servers/

Sacm sites explode - https://threatpost.com/holiday-shoppers-malicious-sites-posing-retailers/150326/

RAT two-fer - https://www.zdnet.com/article/when-one-isnt-enough-this-shady-malware-will-infect-your-pc-with-two-trojans/

End-around the endpoint - https://threatpost.com/malware-steals-info-with-advanced-obfuscation/150280/

Ad non blocker - https://www.zdnet.com/article/android-malware-disguises-as-ad-blocker-but-then-pesters-users-with-ads/

A daily look at the relevant information security news from overnight.

Episode 197 - 15 November 2019

Government phish - https://www.bleepingcomputer.com/news/security/new-threat-actor-impersonates-govt-agencies-to-deliver-malware/

Zombieload workaround - https://www.zdnet.com/article/windows-linux-get-options-to-disable-intel-tsx-to-prevent-zombieload-v2-attacks/

Patient data breach - https://www.scmagazine.com/home/health-care/open-database-exposes-93m-files-on-patients-of-substance-abuse-facilities/

Pranks exposed - https://www.technadu.com/prankdial-com-exposes-138-million-records/84939/

Healthcare breaches - https://www.bleepingcomputer.com/news/security/us-health-network-supplier-expose-pii-phi-data-in-breaches/

A daily look at the relevant information security news from overnight.

Episode 196 - 14 November 2019

Multi purpose ransomware - https://www.bleepingcomputer.com/news/security/purelocker-ransomware-can-lock-files-on-windows-linux-and-macos/

FLawed 5G - https://techcrunch.com/2019/11/12/5g-flaws-locations-spoof-alerts/

VMWare patches - https://www.scmagazine.com/home/security-news/vulnerabilities/vmware-patches-five-security-vulnerabilities/

Securing iOS - https://www.technadu.com/ios-13-3-enable-safari-hardware-security-keys/84840/

AnteFrigus odd ransomware - https://www.bleepingcomputer.com/news/security/strange-antefrigus-ransomware-only-targets-specific-drives/

A daily look at the relevant information security news from overnight.

Episode 195 - 13 November 2019

Intel Zombieload - https://techcrunch.com/2019/11/12/intel-cascade-lake-zombieload/

IE zero-day patch - https://threatpost.com/microsoft-patches-rce-bug/150136/

Orvis.com oops oops - https://www.technadu.com/orvis-com-exposed-hundreds-internal-passwords-pastebin/84732/

Adobe critical patches - https://threatpost.com/adobe-critical-bugs-illustrator-media-encoder/150114/

Pemex huge ransom - https://www.bleepingcomputer.com/news/security/mexicos-pemex-oil-suffers-ransomware-attack-49-million-demanded/

A daily look at the relevant information security news from overnight.

Episode 194 - 12 November 2019

SmarterASP downed - https://threatpost.com/ransomware-attack-downs-hosting-service-smarterasp-net/150072/

VegaLocker RaaS - https://www.zdnet.com/article/vegalocker-evolves-into-buran-ransomware-as-a-service/

ZoneAlarm leak - https://www.securityweek.com/data-zonealarm-forum-users-leaked-following-breach

TrickBot harassment scam - https://www.bleepingcomputer.com/news/security/trickbot-malware-uses-fake-sexual-harassment-complaints-as-bait/

Dharma decrypt scam - https://www.theregister.co.uk/2019/11/11/dharma_decryption_promises_data_recovery/

A daily look at the relevant information security news from overnight.

Episode 193 - 11 November 2019

Titanium backdoor - https://threatpost.com/platinum-apt-titanium-backdoor/150062/

ConnectWise warning - https://www.zdnet.com/article/connectwise-warns-of-ongoing-ransomware-attacks-targeting-its-customers/

Cisco spam RAT - https://www.bleepingcomputer.com/news/security/clever-webex-spam-use-cisco-redirect-to-deliver-rat-malware/

Ring up wifi codes - https://threatpost.com/amazon-fixes-ring-video-doorbell-flaw-that-leaked-wi-fi-credentials/150029/

Boardriders wipeout - https://www.bleepingcomputer.com/news/security/quiksilver-and-billabong-affected-by-ransomware-attack/

A daily look at the relevant information security news from overnight.

Episode 192 - 08 November 2019

ZIP right by - https://www.bleepingcomputer.com/news/security/specially-crafted-zip-files-used-to-bypass-secure-email-gateways/

InterMed PHI breach - https://www.scmagazine.com/home/security-news/data-breach/maines-intermed-suffers-data-breach-30000-affected/

Nvidia patches - https://www.zdnet.com/article/nvidia-patches-severe-geforce-gpu-vulnerabilities/

TDS tweak - https://www.bleepingcomputer.com/news/security/legitimate-tds-platform-abused-to-push-malware-via-exploit-kits/

Cisco slip-up - https://www.zdnet.com/article/cisco-all-these-routers-have-the-same-embedded-crypto-keys-so-update-firmware/