A daily look at the relevant information security news from overnight.

Episode 211 - 06 December 2019

VPN hijack - https://www.bleepingcomputer.com/news/security/new-linux-vulnerability-lets-attackers-hijack-vpn-connections/

CyrusOne ransomed - https://www.zdnet.com/article/ransomware-attack-hits-major-us-data-center-provider/

HackerOne pays bounty - https://www.scmagazine.com/home/security-news/vulnerabilities/cookie-leak-allows-white-hat-researcher-to-access-hackerone-vulnerability-reports/

OpenBSD quick patch - https://www.zdnet.com/article/openbsd-patches-severe-authentication-bypass-privilege-escalation-vulnerabilities/

VC BEC SOL - https://www.theregister.co.uk/2019/12/05/vcs_tricked_mitm/

A daily look at the relevant information security news from overnight.

Episode 210 - 05 December 2019

Buer a best buy - https://threatpost.com/buer-loader-underground-markets/150807/

Sprint slip - https://techcrunch.com/2019/12/04/sprint-contractor-cell-phone-bills-exposed/

Salesforce skimmers - https://www.bleepingcomputer.com/news/security/salesforce-s-heroku-used-to-host-magecart-skimmers-stolen-cards/

Python pirates - https://www.zdnet.com/article/two-malicious-python-libraries-removed-from-pypi/

Sweaty Betty sweatin’ - https://www.bleepingcomputer.com/news/security/uk-retailer-sweaty-betty-hacked-to-steal-customer-payment-info/

A daily look at the relevant information security news from overnight.

Episode 209 - 04 December 2019

MageCart shoots - https://www.scmagazine.com/web-services-security-e-commerce-security/magecart-skimmer-group-guns-for-smith-wessons-black-friday-sales/

No ‘Droid perma-DoS - https://threatpost.com/google-critical-android-permanent-dos-flaw/150764/

Extensions snipped - https://www.bleepingcomputer.com/news/software/avast-and-avg-firefox-extensions-pulled-from-mozilla-addons-site/

Bad chat - https://www.zdnet.com/article/this-new-android-malware-comes-disguised-as-a-chat-app/

FTC fake - https://www.bleepingcomputer.com/news/security/ftc-warns-of-ongoing-scam-spreading-scary-terrorism-allegations/

A daily look at the relevant information security news from overnight.

Episode 208 - 03 December 2019

PyXie dusted - https://www.zdnet.com/article/this-trojan-malware-is-being-used-to-steal-passwords-and-spread-ransomware/

Azure (N)OAuth - https://threatpost.com/microsoft-oauth-flaw-azure-takeover/150737/

Cookie monster - https://www.bleepingcomputer.com/news/security/facebook-ads-manager-targeted-by-new-info-stealing-trojan/

TrueDialog insecure - https://threatpost.com/insecure-database-exposes-millions-of-private-sms-messages/150706/

StrandHogg gone wild - https://www.zdnet.com/article/android-new-strandhogg-vulnerability-is-being-exploited-in-the-wild/

A daily look at the relevant information security news from overnight.

Episode 207 - 02 December 2019

All Steamed up - https://www.bleepingcomputer.com/news/security/fake-steam-skin-giveaway-site-steals-your-login-credentials/

Mixcloud mess - https://techcrunch.com/2019/11/29/mixcloud-data-breach/

Datrix fast phish - https://www.theregister.co.uk/2019/11/28/datrix_phishing_attack/

Oyster shucked - https://www.zdnet.com/article/got-an-oyster-card-tfl-just-locked-your-account-to-make-you-reset-your-password/

Mongo CStealer - https://www.bleepingcomputer.com/news/security/new-chrome-password-stealer-sends-stolen-data-to-a-mongodb-database/

A daily look at the relevant information security news from overnight.

Episode 206 - 29 November 2019

Prosegur crippled - https://www.zdnet.com/article/security-firm-prosegur-weve-shut-our-it-network-after-ryuk-ransomware-attack/

Magento exposed - https://www.infosecurity-magazine.com/news/magento-marketplace-breach-exposes/

imminent Monitor crushed - https://www.bleepingcomputer.com/news/security/law-enforcement-shuts-down-imminent-monitor-malware-makes-arrests/


Dexphot spreads - https://threatpost.com/dexphot-malware-cryptocurrency/150634/

Phishing season - https://www.bleepingcomputer.com/news/security/beware-of-thanksgiving-ecard-emails-distributing-malware/

A daily look at the relevant information security news from overnight.

Episode 205 - 27 November 2019

DeathRansom emerges - https://www.bleepingcomputer.com/news/security/new-deathransom-ransomware-begins-to-make-a-name-for-itself/

New MageCart moves - https://threatpost.com/magecart-variant-tactics-mitm-phishing/150628/

Media too social - https://www.theregister.co.uk/2019/11/26/facebook_twitter_data_loss/

French jobs site open - https://www.technadu.com/french-job-seeking-platform-exposes-14-million-records-online/85861/

Y2K? Why not - https://www.bleepingcomputer.com/news/security/splunk-faces-y2k-bug-like-problem-unless-patched/

A daily look at the relevant information security news from overnight.

Episode 204 - 26 November 2019

Bots new Tricks - https://threatpost.com/trickbot-evolves-ssh-keys/150617/

Fortinet finally fixed - https://www.zdnet.com/article/some-fortinet-products-shipped-with-hardcoded-encryption-keys/

Database an open vista - https://techcrunch.com/2019/11/25/vistaprint-security-lapse/

Crooks caught Catch - https://threatpost.com/pos-malware-customer-data-catch-restaurants/150581/

Ginp grows up - https://www.bleepingcomputer.com/news/security/ginp-android-banker-sets-as-default-sms-app-steals-all-text/

A daily look at the relevant information security news from overnight.

Episode 203 - 25 November 2019

Raccoon info stealer - https://threatpost.com/raccoon-stealer-malware-scurries-past-microsoft-messaging-gateways/150545/

Clop CryptoMix trick - https://www.bleepingcomputer.com/news/security/clop-ransomware-tries-to-disable-windows-defender-malwarebytes/

VNC Project flaws - https://threatpost.com/critical-flaws-vnc-industrial/150568/

Ryuk cripples nursing homes - https://securityboulevard.com/2019/11/110-nursing-homes-cut-off-from-health-records-in-ransomware-attack/

Allied in a Maze - https://www.bleepingcomputer.com/news/security/allied-universal-breached-by-maze-ransomware-stolen-data-leaked/

A daily look at the relevant information security news from overnight.

Episode 202 - 22 November 2019

Port (monitor) Lambert - https://www.zdnet.com/article/deprimon-downloader-uses-novel-ways-to-infect-your-pc-with-coloredlambert-malware/

Payment page perp - https://www.bleepingcomputer.com/news/security/card-skimmer-group-replaces-checkout-page-to-steal-payment-info/

Hakbit decryptor - https://www.zdnet.com/article/ransomware-a-free-tool-can-decrypt-this-malware-variant-that-puts-a-ransom-note-on-you-desktop-wallpaper/

Gekko Group goof - https://www.scmagazine.com/home/security-news/data-breach/leaky-gekko-group-database-exposes-info-on-hotel-brands-travelers/

SecTopRAT - https://www.zdnet.com/article/new-sectoprat-malware-creates-hidden-second-desktop-to-control-browser-sessions/