Technado

A $14 million crypto heist, a breach exposing over 2 billion records, and an AMD deal worth nearly $5 billion: this week’s news cycle is putting up some big numbers! Plus, a cyberattack disrupts Microchip Technology’s manufacturing facilities, McAfee unveils a tool to sniff out deep fakes, and SteamOS may offer support for rival systems. Catch all this and more on this week’s episode of Technado!

Consider it Patch Thursday, because this Technado has flaw fixes galore! Microsoft fixed 9 zero-days this week and 80 other security vulnerabilities, and 1Password has released an urgent patch for Mac users. We also talk decades-old vulnerabilities (that still have no fix), new cryptography standards released by NIST, and ChatGPT’s new tendency to…steal your voice? All this and more on this week’s Technado!

This week’s episode is a special edition of Technado! Our hosts try their hand at a few video games - some from Daniel’s generation, some from Sophie’s. Tune in to see how they fare, and how games have changed over the years.

Beware of new ServiceNow critical RCE bugs, a massive phishing campaign, and more outages from Microsoft! This episode is chock full of the good, bad, and ugly of AI: video game voice actors on strike, Big Tech using your data to train its chatbots, and nation-state actors using deepfake tech to snag jobs. We also have some Deja News updates featuring Kaspersky and Crowdstrike. All this and more on this week’s Technado!

After the events of last week, there’s only one way to start this episode of Technado: Crowdstrike Update! After Daniel and Sophie go over the aftermath of the worldwide outage, we’ve got even more security news in store. The alleged hacker behind the 2023 MGM attack has been arrested, the FTC is pushing back on Xbox Game Pass price hikes, and some big companies may be using AI to price gouge consumers. All this and more in this week’s episode of Technado!

Breaking news: 126 updates from Google Chrome and many more patches abound! On this week's Technado, Sophie and Daniel get into hot topics like hactivism, AI, and banning Russian/Chinese companies from the states. In gaming news, CFB25 isn't even out yet, and its servers are already in shambles. All this and more await in this week's episode!

It's Leak Week on Technado: Ticketmaster barcodes and Roblox customer data abound! Almost 10 billion passwords were leaked as well as part of the RockYou2024 compilation of data. In other news, European vishing fraudsters are turning up at victims' homes and Samsung workers are on strike indefinitely. All this and more on this week's episode of Technado!

Check out the articles below for more on this week's stories:

https://thehackernews.com/2024/07/microsofts-july-update-patches-143.html

https://www.theverge.com/2024/7/10/24195541/samsung-union-launch-indefinite-strike-ai-chips-pay

https://securityaffairs.com/165460/data-breach/rockyou2024-compilation-10b-passwords.html

https://www.securityweek.com/ransomware-gang-leaks-data-allegedly-stolen-from-florida-department-of-...

https://cybernews.com/security/amazon-prime-day-2024-phishing-attacks/

https://www.bleepingcomputer.com/news/security/hackers-leak-39-000-print-at-home-ticketmaster-ticket...

https://www.darkreading.com/remote-workforce/euro-vishing-fraudsters-add-physical-intimidation-to-ar...

https://www.bleepingcomputer.com/news/technology/russia-forces-apple-to-remove-dozens-of-vpn-apps-fr...

https://www.cisa.gov/news-events/alerts/2024/07/08/cisa-and-partners-join-asds-acsc-release-advisory...

https://gbhackers.com/roblox-data-breach/

Gamers rejoice: we've got news on Xbox, Nintendo, and Apple retro game emulators on this week's Technado!

In some of our biggest stories this week, there's a new Google Chrome 0-day, Temu's getting sued, and millions of OpenSSH servers may be vulnerable to an attack. We also cover PortSwigger's very first outside investment, a biometric MFA token that doubles as a ring, and Grasshopper: a group of hackers...or pentesters...or hackers pretending to be pentesters.

In other news, an Australian man was caught red-handed harvesting credentials while on a flight (yes, DURING the flight), Kadokawa Group got hit with a ransomeware attack, and Sophie and Daniel have some strong opinions on AI-generated commentator Al Michaels.

For more on this week's stories, check out the articles below:

https://gbhackers.com/claiming-sandboxrce-0-day/
https://www.ign.com/articles/xbox-live-suffers-widespread-outage-xbox-support-investigating
https://arstechnica.com/tech-policy/2024/06/shopping-app-temu-is-dangerous-malware-spying-on-your-texts-lawsuit-claims/
https://thehackernews.com/2024/07/how-mfa-failures-are-fueling-500-surge.html
https://www.techspot.com/news/103636-nintendo-sues-two-switch-hardware-software-modders.html
https://securityaffairs.com/165108/cyber-crime/evil-twin-wifi-attack-plane.html
https://arstechnica.com/information-technology/2024/06/ai-generated-al-michaels-to-provide-daily-recaps-during-2024-summer-olympics/
https://gbhackers.com/grasshopper-hackers-penetration-testing-malware-deployment/
https://www.ign.com/articles/fromsoftware-parent-company-hacked-by-ransomware-gang-threatening-to-release-internal-data
https://www.securityweek.com/millions-of-openssh-servers-potentially-vulnerable-to-remote-regresshion-attack/
https://www.theverge.com/2024/6/24/24185066/apple-pc-dos-emulators-ios-rejection
https://techcrunch.com/2024/06/27/portswigger-the-company-behind-the-burp-suite-of-security-testing-tools-swallows-112m/

This week on Technado, we've got breaking news: there's a new MOVEit bug, Apple released a firmware update for AirPods, and we've got robot skin to fuel your nightmares.

In one of this week's biggest stories, Julian Assange has been released and is homeward bound. SolarWinds is back in the headlines, this time with an exploited Serv-U bug. Apple, Microsoft, and several other big tech companies are in hot water for violating the EU's Digital Markets Act. Hackers are using a Windows XXS flaw to execute arbitrary commands. And to wrap the first half of the show, we take a look at the alleged breach of the US Federal Reserve and the group that's supposedly behind it.

After the break, it's time for Deja News: NVIDIA's short-lived time at the top has come to an end as they suffer the biggest short-term loss in history. We may finally have an answer to the Apple-Kaspersky debacle: the Biden administration has banned the software in the US and sanctioned a dozen Kaspersky execs. Then, Google's Project Naptime is using AI to let engineers take more siestas. The ever-litigious Nintendo has officially shut down Yuzu and Citra, two big Nintendo emulators. And the CDK hack affecting car dealerships nationwide is still ongoing - and recovery may take years.

Like what you heard? Check out these articles for more:

https://www.darkreading.com/remote-workforce/fresh-moveit-bug-under-attack-disclosure
https://thehackernews.com/2024/06/apple-patches-airpods-bluetooth.html
https://techcrunch.com/2024/06/25/this-smiling-robot-face-made-of-living-skin-is-absolute-nightmare-fuel/
https://gbhackers.com/wikileaks-founder-julian-assange-released/
https://securityaffairs.com/164806/hacking/solarwinds-serv-u-cve-2024-28995-exploit.html
https://www.ign.com/articles/apple-becomes-the-first-tech-company-charged-with-violating-eus-digital-markets-act-rules
https://arstechnica.com/gaming/2024/06/apple-intelligence-and-other-features-wont-launch-in-the-eu-this-year/
https://www.pcgamer.com/softwa

This week's Technado starts strong with some breaking news: Nvidia has surpassed Apple and Microsoft to become the most valuable company in the world! Of course, we had to talk about Nintendo Direct, and we even took a look at the upcoming Spaceballs sequel.

After our breaking news segment, Daniel warns us of a Wi-Fi takeover attack affecting Windows Users. Then, the feds are suing Adobe for some sneaky cancellation fees that are costing users hundreds. CISA conducted its first AI IR tabletop exercise, and we take a look at not one, not two, but THREE cybercriminals in Behind Bars.

Following a quick break, we take a look at a bug that lets users spoof MS security team emails. Then, it's patches on patches on patches: VMWare fixed some RCE and privesc bugs, ASUS corrected a critical auth bypass flaw, and Apple dealt with their very first visionOS-exclusive vulnerability.

To wrap up the show, Daniel and Sophie learn about a new mandatory program at First Horizon Bank that forces stressed employees to stop work and...look at family pictures.

Check out the articles below to read more about today's stories:

https://www.washingtonpost.com/technology/2024/06/18/nvidia-most-valuable-company-microsoft-ai/
https://www.engadget.com/the-morning-after-the-biggest-announcements-from-nintendo-direct-111547910.html
https://www.ign.com/articles/spaceballs-sequel-in-the-works-with-josh-gad-starring-mel-brooks-producing
https://www.forbes.com/sites/daveywinder/2024/06/14/new-wi-fi-takeover-attack-all-windows-users-warned-to-update-now/
https://www.theregister.com/2024/06/17/adobe_sued_cancel_fees/
https://www.securityweek.com/cisa-conducts-first-ai-cyber-incident-response-exercise/
https://www.darkreading.com/cyberattacks-data-breaches/scattered-spider-boss-cuffed
https://www.justice.gov/usao-edny/pr/two-men-charged-breaching-federal-law-enforcement-database-and-posing-police-officers
https://techcrunch.com/2024/06/18/security-bug-allows-anyone-to-spoof-microsoft-employee-emails