The Insecurity Brief

The Insecurity Brief

By Trip ElixNewsTech News
Download on the App Store

The Insecurity Brief episodes

  • Tech Giants Respond to Zero-Day Exploits Emergency Update for Google And Apple

    Trip and Honey discuss tech like no one else

    Join our community!!
    Subscribe to the Insecurity Brief podcast now on every platform we can findFollow us on Twitter
    @HoneyBeez0x
    @trip_elix
    links
    Israeli malware companyNSO GROUP
    https://en.wikipedia.org/wiki/NSO_Group
    Our Website:https://www.tripelix.com/insecurity/tech-giants-respond-to-zero-day-exploits-emergency-update-for-google-and-apple/
    Youtube : https://youtu.be/KSuBbSQBTsI
    Itunes: https://podcasts.apple.com/us/podcast/tech-giants-respond-to-zero-day-exploits-emergency/id1583788677?i=1000535504275
    Spoify:https://open.spotify.com/episode/0f6fDRLZpvXiFvss83ngRU
    Soundcloud:https://soundcloud.com/user-841713900/insecurity-bried-ep4-tech-giants-respond-to-zero-day-exploits-emergency-update
    Trip’s books
    https://www.tripelix.com/merch
    Honey’s books
    https://beedefense.net
    #windows #hack #zeroday #apple #google #malware #update #ddost

    Private Israeli spyware used

    to hack cellphones of
    journalists, activists worldwide
    NSO Group’s Pegasus spyware, licensed to governments
    around the globe, can infect phones without a click
    https://www.washingtonpost.com/investigations/interactive/2021/nso-spyware-pegasus-cellphones/

    Update now! Chrome fix patches in-the-wild zero-day

    The Microsoft Browser Vulnerability Research team has found and reported a vulnerability in the audio component of Google Chrome. Google has fixed this high-severity vulnerabilityhttps://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/03/update-now-chrome-fix-patches-in-the-wild-zero-day/

    About the security content of iOS 14.8 and iPadOS 14.8

    For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.https://support.apple.com/en-us/HT212807

    New Mēris botnet breaks DDoS record with 21.8 million RPS attack

    A new distributed denial-of-service (DDoS) botnet that kept growing over the summer has been hammering Russian internet giant Yandex for the past month, the attack peaking at the unprecedented rate of 21.8 million requests per second.https://www.bleepingcomputer.com/news/security/new-m-ris-botnet-breaks-ddos-record-with-218-million-rps-attack/

    Microsoft fixes bug letting hackers take over Azure containers

    Microsoft has fixed a vulnerability in Azure Container Instances called Azurescape that allowed a malici

    20 min
  • Millions of WIFI devices made vulnerable from Realteks SDK

    Episode 3

    Millions of WIFI devices made vulnerable from Realteks SDK

    Trip and Honey discuss tech like no one else Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow us on Twitter @HoneyBeez0x @trip_elix 

    links

    Our Website:https://www.tripelix.com/insecurity/millions-of-wifi-devices-made-vulnerable-from-realteks-sdk 

    Youtube : https://www.youtube.com/watch?v=P6UpwSVD5BY

    Itunes: https://podcasts.apple.com/us/podcast/millions-of-wifi-devices-made-vulnerable-from-realteks-sdk/id1583788677?i=1000535386017

    Soundcloud: https://soundcloud.com/user-841713900/episode-3the-insecurity-brief-millions-of-wifi-devices-made-vulnerable-from-realteks-sdk

    Spotify : https://open.spotify.com/episode/6VBqEZYiwtYdRhS7iYqBoN

    Trip’s books https://www.tripelix.com/merch 

    Honey’s books https://beedefense.net  

    #realtek #Talos #zeroday #wifi # Bladehawk #android #facebook

    Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits (SDKs) accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors https://thehackernews.com/2021/08/multiple-flaws-affecting-realtek-wi-fi.html threatpost.comMultiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

    Talos release protection against zero-day vulnerability in Microsoft MSHTML

    Cisco Talos released new SNORT® rules Thursday to protect against the exploitation of a zero-day vulnerability in Microsoft MSHTML that the company warns is being actively exploited in the wild.
    https://blog.talosintelligence.com/2021/09/talos-release-protection-against-zero.html
    talosintelligence.com

    BladeHawk group: Android espionage against Kurdish ethnic group

    ESET researchers have investigated a targeted mobile espionage campaign against the Kurdish ethnic group. This campaign has been active since at least March 2020, distributing (via dedicated Facebook profiles) two Android backdoors known as 888 RAT and SpyNote, disguised as legitimate apps.
    https://www.welivesecurity.com/2021/09/07/bladehawk-android-espionage-kurdish/
    welivesecur

    15 min
  • Protronmail logs IP Addresses for French government targeting activists

    Protronmail logs IP Addresses for French government targeting activists

    Trip and Honey discuss tech like no one else 
    Join our community!!
    Subscribe to the Insecurity Brief podcast now on evey platform we can findFollow us on Twitter
    @HoneyBeez0x
    @trip_elixlinksOur Website: https://www.tripelix.com/insecurity/protronmail-logs-ip-addresses-for-french-government-targeting-activists
    Youtube : https://youtu.be/BRCWn1gTE1I
    the link to the podcast
    the link to soundcloudTrip’s books
    https://www.tripelix.com/merchHoney’s books
    https://beedefense.net#polynetwork #money #protonmail #french #swiss #secuirty

    The attacker returned the loot after being offered a gig as chief security advisor with Poly Network.

    A threat actor called “Mr. White Hat” has returned the $610 million they stole from the decentralized finance platform Poly Network. The breached company did everything from threaten to sic law enforcement on the attacker on up to its ultimate offer: the position of chief security officer in exchange for getting its money back
    https://threatpost.com/poly-network-recoups-610m-stolen-from-defi-platform/168906/
    threatpost.com

    ProtonMail Logs Activist’s IP Address With Authorities After Swiss Court OrderEnd-to-end encrypted email service provider ProtonMail has drawn criticism after it ceded to a legal request and shared the IP address of anti-gentrification activists with law enforcement authorities, leading to their arrests in France.

    https://thehackernews.com/2021/06/chinese-hackers-believed-to-be-behind.html
    thehackernews.com

    17 min
  • Windows Easily hacked by simply plugging in a mouse or keyboard

    Episode 1

    Windows Easily hacked by simply plugging in a mouse or keyboard

    Razer is a very popular computer peripherals manufacturer known for its gaming mice and keyboards.  A Razer Synapse zero-day vulnerability has been disclosed on Twitter, allowing you to gain Windows admin privileges simply by plugging in a Razer mouse or keyboard.


    Trip and Honey discuss tech like no one else 

    Join our community!!

    Subscribe to the Insecurity Brief podcast now on every platform we can find


    Follow us on Twitter

    @HoneyBeez0x

    @trip_elix


    link to the apt names

    https://docs.google.com/spreadsheets/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/htmlview#


     

    Links


    Our Website:

    https://www.tripelix.com/insecurity/windows-easily-hacked-by-simply-plugging-in-a-mouse-or-keyboard/


    Youtube:

    https://youtu.be/8Np8QKw7koI


    iTunes:

    https://podcasts.apple.com/us/podcast/windows-easily-hacked-by-simply-plugging-in-a-mouse/id1583788677?i=1000535137047


    Spotify:

    https://open.spotify.com/episode/0zaxX9x9ZpLQj9H3NJOnsD


    Trip’s books

    https://www.tripelix.com/merch


    Honey’s books

    https://beedefense.net


     #windows #hack #zeroday #keyboard #mouse #usb #exploit




    Razer bug lets you become a Windows 10 admin by plugging in a mouse

    A Razer Synapse zero-day vulnerability has been disclosed on Twitter, allowing you to gain Windows admin privileges simply by plugging in a Razer mouse or keyboard.

    https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/

    bleepingcomputer.com



    The SideWalk may be as dangerous as the CROSSWALK

    SideWalk is a modular backdoor that can dynamically load additional modules sent from its C&C server, makes use of Google Docs as a dead drop resolver, and uses Cloudflare workers as a C&C server. It can also properly handle communication behind a proxy.

    https://www.welivesecurity.com/2021/08/24/sidewalk-may-be-as-dangerous-as-crosswalk/

    welivesecurity.com



    New 0-Day Attack Targeting Windows Users With Microsoft Office Documents

    Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that’s being used to hijack vulnerable Windows systems by leveraging weaponized Office documents.

    https://thehackernews.com/2021/09/new-0-day-attack-targeting-windows.html

    thehackernews.com

    15 min

About The Insecurity Brief

From the publisher's feed

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us. Social media attempts to shape news and information by over-amplification of disinformation. This podcast hope to give information and provide insights from a different point of view.