A daily look at the relevant information security news from overnight.

Episode 171 - 10 October 2019


Microsoft NTLM vuln - https://www.bleepingcomputer.com/news/security/new-microsoft-ntlm-flaws-may-allow-full-domain-compromise/

Gamer patches - https://threatpost.com/gamers-high-severity-intel-nvidia-flaws/149034/

Border Gateway Protocol work - https://www.zdnet.com/article/mit-weve-created-ai-to-detect-serial-internet-address-hijackers/

AWS phish - https://www.bleepingcomputer.com/news/security/beware-of-fake-amazon-aws-suspension-emails-for-unpaid-bills/

Security awareness fail - https://www.zdnet.com/article/most-americans-cant-recognize-2fa-https-or-private-browsing/

A daily look at the relevant information security news from overnight.

Episode 170 - 09 October 2019


Volusion breached - https://www.zdnet.com/article/hackers-breach-volusion-and-start-collecting-card-details-from-thousands-of-sites/

LokiBot spear phish - https://www.bleepingcomputer.com/news/security/microsoft-blocks-credential-theft-attack-targeting-dozens-of-orgs/

Quiet Patch Tuesday - https://www.scmagazine.com/home/security-news/vulnerabilities/microsoft-repairs-59-software-bugs-on-a-quiet-patch-tuesday/

Catalina patches - https://threatpost.com/apple-tackles-a-dozen-bugs-in-catalina/148988/

Joomla zero-day - https://www.zdnet.com/article/zero-day-published-for-old-joomla-cms-versions/

A daily look at the relevant information security news from overnight.

Million exposed - https://www.bleepingcomputer.com/news/security/1-million-people-had-their-medical-data-exposed-in-t-ora-breach/

TwitterKit - https://threatpost.com/vulnerable-twitter-api-leaves-millions-open-to-attack/148945/

Mushtik hacked - https://www.zdnet.com/article/white-hat-hacks-muhstik-ransomware-gang-and-releases-decryption-keys/

HildaCrypt keys - https://www.bleepingcomputer.com/news/security/hildacrypt-ransomware-developer-releases-decryption-keys/

DCH Pays ransom - https://www.scmagazine.com/home/security-news/ransomware/dch-health-system-pays-ransomware-attackers-in-bid-to-restore-operations/

VPNs vulnerable - https://www.technadu.com/british-spy-agency-vulnerabilities-three-vpns/81976/

A daily look at the relevant information security news from overnight.

Episode 168 - 07 October 2019

HTTPS vuln - https://threatpost.com/new-reductor-malware-hijacks-https-traffic/148904/

Brazilian info auction - https://www.bleepingcomputer.com/news/security/details-of-92-million-brazilians-auctioned-on-underground-forums/

VoIP targeted -https://threatpost.com/voip-espionage-campaign-utilities-supplier/148916/

UAB phished - https://www.bleepingcomputer.com/news/security/uab-medicine-data-breach-exposes-patient-info-in-phishing-attack/

Iran picking targets - https://www.scmagazine.com/home/security-news/iran-hackers-targeted-presidential-campaign-journalists/

A daily look at the relevant information security news from overnight.

Episode 167 - 04 October 2019

MacOS DDoS - https://www.zdnet.com/article/macos-systems-abused-in-ddos-attacks/

Ransomware wiper - https://www.bleepingcomputer.com/news/security/lost-files-data-wiper-poses-as-a-windows-security-scanner/

WhatsApp GIF - https://www.scmagazine.com/home/security-news/vulnerabilities/whatsapp-bug-allows-access-to-content-users-should-update/

Foxit flaws - https://threatpost.com/foxit-pdf-reader-vulnerable-to-8-high-severity-flaws/148897/

Android zero-day - https://www.zdnet.com/article/google-finds-android-zero-day-impacting-pixel-samsung-huawei-xiaomi-devices/

A daily look at the relevant information security news from overnight.

Episode 166 - 03 October 2019

Vendor email compromise - https://www.bleepingcomputer.com/news/security/new-silent-starling-gang-targets-500-vendors-in-bec-scam-twist/

Ghostcat - https://www.scmagazine.com/website-web-server-security/browser-hijacking-ghostcat-malware-haunts-online-publishers/

Zendesk alerted to breach - https://www.zdnet.com/article/zendesk-discloses-2016-data-breach/

Geost banking bot - https://threatpost.com/virus-bulletin-geost-android-botnet/148864/

GandCrab to Sodinokibi - https://www.bleepingcomputer.com/news/security/sodinokibi-ransomware-builds-an-all-star-team-of-affiliates/

A daily look at the relevant information security news from overnight.

Episode 165 - 02 October 2019

Adwind rat updated - https://www.bleepingcomputer.com/news/security/new-adwind-rat-variant-used-against-the-us-petroleum-sector/

Ukraine exposes Russians - https://www.technadu.com/20-million-russians-tax-records-exposed/81520/

Emotet the wizard - https://www.bleepingcomputer.com/news/security/fake-office-activation-wizard-docs-used-to-spread-emotet-trojan/

VoIP vulns - https://www.zdnet.com/article/academics-find-eight-vulnerabilities-in-androids-voip-components/

Hospitals ransomed - https://threatpost.com/ransomware-attacks-leave-u-s-hospitals-turning-away-patients/148823/

A daily look at the relevant information security news from overnight.

Episode 164 - 01 October 2019

Ba-Zynga - https://www.scmagazine.com/home/security-news/data-breach/the-word-is-out-zynga-was-breached/

ODT piggyback - https://www.bleepingcomputer.com/news/security/under-detected-odt-files-deliver-common-remote-access-trojans/

Locking Linux - https://www.zdnet.com/article/linux-to-get-kernel-lockdown-feature/
One biiiillion ads - https://www.bleepingcomputer.com/news/security/egobbler-malvertiser-uses-webkit-exploit-to-infect-over-1-billion-ads/

PDF’ed up - https://www.zdnet.com/article/new-pdfex-attack-can-exfiltrate-data-from-encrypted-pdf-files/

A daily look at the relevant information security news from overnight.

Episode 163 - 30 September 2019

Rheinmetall hit - https://www.zdnet.com/article/malware-infection-disrupts-production-at-defence-contractor-plants-in-three-countries/

Masad spyware - https://threatpost.com/masad-spyware-telegram-bots/148759/

SMells like MageCart - https://www.theregister.co.uk/2019/09/27/online_perfume_merchant_hacked/

Spyware on the cheap - https://threatpost.com/arcane-stealer-low-end-dark-web/148741/

New SMS attack - https://www.zdnet.com/article/new-sim-card-attack-disclosed-similar-to-simjacker/

A daily look at the relevant information security news from overnight.

Episode 162 - 27 September 2019

The WhiteShadow knows - https://www.bleepingcomputer.com/news/security/new-whiteshadow-downloader-uses-mssql-servers-for-malware-delivery/

DoorDash breach - https://threatpost.com/doordash-data-breach-impacts-personal-data-of-almost-5m-users/148724/

New fileless zombie maker - https://www.bleepingcomputer.com/news/security/microsoft-spots-nodersok-malware-campaign-that-zombifies-pcs/

Banned extensions - https://www.zdnet.com/article/microsoft-bans-38-file-extensions-in-outlook-for-the-web/

Rich Review poor - https://www.scmagazine.com/home/security-news/vulnerabilities/wordpress-rich-review-plugin-vulnerable-to-malvertising/