Threat Wire

Threat Wire

By Shannon MorseNewsTechnologyTech News
Download on the App Store

Threat Wire episodes

  • Log4Shell & Log4j Explained - ThreatWire

    Log4Shell & Log4j Explained, Google Disrupts Major Botnet, and NPM Packages Steal Discord Creds! All that coming up now on ThreatWire.

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/ysFB6JKTs5U

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Follow Shannon on Social Media: https://snubsie.com/links 

    Links:

    https://arstechnica.com/information-technology/2021/12/minecraft-and-other-apps-face-serious-threat-from-new-code-execution-bug/
    https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce
    https://www.randori.com/blog/cve-2021-44228/
    https://arstechnica.com/information-technology/2021/12/the-log4shell-zeroday-4-days-on-what-is-it-and-how-bad-is-it-really/
    https://www.lunasec.io/docs/blog/log4j-zero-day/
    https://twitter.com/chvancooten/status/1469340927923826691
    https://twitter.com/AlyssaM_InfoSec/status/1470463098523955202
    https://twitter.com/llkkaT/status/1470411739829350407
    https://twitter.com/eastdakota/status/1469800951351427073
    https://github.com/YfryTchsGD/Log4jAttackSurface
    https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592
    https://www.bleepingcomputer.com/news/security/hackers-start-pushing-malware-in-worldwide-log4shell-attacks/

    https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/

    https://nakedsecurity.sophos.com/2021/12/13/log4shell-explained-how-it-works-why-you-need-to-know-and-how-to-fix-it/

    https://blog.google/technology/safety-security/new-action-combat-cyber-crime/

    https://blog.google/threat-analysis-group/disrupting-glupteba-operation/
    https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/1_Complaint.pdf
    https://www.cnet.com/tech/google-breaks-up-botnet-infecting-1-million-devices/

    https://arstechnica.com/information-technology/2021/12/malicious-packages-sneaked-into-npm-repository-stole-discord-tokens/

    https://jfrog.com/blog/malicious-npm-packages-are-after-your-discord-tokens-17-new-packages-disclosed/
    https://thehackernews.com/2021/12/over-dozen-malicious-npm-packages.html

     

     

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    11 min
  • YouTubers Targeted In Malware Attacks; REvil Goes Offline - ThreatWire

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/B1MjSqwXaTk

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Follow Shannon on Social Media: https://snubsie.com/links 

    Links:

    YT:

    https://www.bleepingcomputer.com/news/security/massive-campaign-uses-youtube-to-push-password-stealing-malware/

    https://www.bleepingcomputer.com/news/security/google-youtubers-accounts-hijacked-with-cookie-stealing-malware/

    https://thehackernews.com/2021/10/hackers-stealing-browser-cookies-to.html

    https://arstechnica.com/information-technology/2021/10/how-hackers-hijacked-thousands-of-high-profile-youtube-accounts/ 

    https://www.zdnet.com/article/google-disrupts-massive-phishing-and-malware-campaign/ 

    https://threatpost.com/google-youtube-channel-hijackers-cryptocurrency-scams/175617/ 

     

    Sim swapper:

    https://www.vice.com/en/article/jgmep7/sim-swapper-doxes-and-swats-his-accomplice

    https://www.justice.gov/usao-md/pr/defendant-who-stole-more-16000-cryptocurrency-and-orchestrated-swat-attack-his-accomplice 

     

    REvil:

    https://www.bleepingcomputer.com/news/security/revil-ransomware-shuts-down-again-after-tor-sites-were-hijacked/

    https://www.cnet.com/tech/services-and-software/notorious-ransomware-group-knocked-offline-according-to-report/

    https://thehackernews.com/2021/10/feds-reportedly-hacked-revil-ransomware.html

    https://www.zdnet.com/article/multiple-governments-involved-in-coordinated-takedown-of-revil-ransomware-group-reuters/

    https://threatpost.com/revil-servers-offline-governments/175675/ 

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    8 min
  • OpenSea Had A Malicious NFT Problem - ThreatWire

    Click for links and more info ⬇️⬇️⬇️

    OpenSea had a malicious NFT problem, a twitch hack update, and whatsapp officially adds end to end encrypted backups! All that coming up now on ThreatWire.

     
     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/Qx-PHk2cgqM

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Follow Shannon on Social Media: https://snubsie.com/links 

    Links:

    Opensea
    https://research.checkpoint.com/2021/check-point-research-prevents-theft-of-crypto-wallets-on-opensea-the-worlds-largest-nft-marketplace/ 
    https://thehackernews.com/2021/10/critical-flaw-in-opensea-could-have-let.html
    https://threatpost.com/opensea-nfts-cryptowallet-balances/175453/

    Twitch

    https://blog.twitch.tv/en/2021/10/15/updates-on-the-twitch-security-incident/?utm_referrer=https://t.co/ 
    https://www.bleepingcomputer.com/news/security/twitch-downplays-this-months-hack-says-it-had-minimal-impact/
    https://threatpost.com/twitch-leak-emails-passwords/175390/ 
    https://www.zdnet.com/article/twitch-downplays-massive-breach-says-no-passwords-or-login-credentials-leaked/

    Whatsapp

    https://about.fb.com/news/2021/10/end-to-end-encrypted-backups-on-whatsapp/ 
    https://www.bleepingcomputer.com/news/security/whatsapp-rolls-out-ios-android-end-to-end-encrypted-chat-backups/
    https://www.zdnet.com/article/whatsapp-starts-slowly-rolling-out-encrypted-backups/

     

    Thumbnail Credit:

    https://cryptoslate.com/wp-content/uploads/2021/03/opensea-sea-1024x538.jpg

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    10 min
  • Facebook Was Down?! Facebook Outage Causes Conspiracies - ThreatWire

     Click for links and more info ⬇️⬇️⬇️

    Fraudsters stole millions from veterans, SMS infrastructure was hacked, and Facebook is having a worst week ever! All that coming up now on ThreatWire.

     
     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/roznl90rljU

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Follow Shannon on Social Media: https://snubsie.com/links 

    Links:

    Fraudsters Stole From Veterans:
    https://www.bleepingcomputer.com/news/security/transnational-fraud-ring-stole-millions-from-army-members-veterans/
    https://threatpost.com/transnational-fraud-military-members/175298/
    https://www.zdnet.com/article/fraudster-jailed-for-stealing-us-military-health-records-millions-in-benefits/
    https://www.zdnet.com/article/army-contractor-sentenced-for-stealing-1-5-million-from-veterans-through-dod-benefit-sites/

    SMS Infrastructure Was Hacked:

    https://www.syniverse.com/products/operator-messaging
    https://www.businessinsider.com/syniverse-hackers-access-billions-of-texts-through-breach-2021-10
    https://www.sec.gov/Archives/edgar/data/1839175/000119312521284329/d234831dprem14a.htm
    https://www.vice.com/en/article/z3xpm8/company-that-routes-billions-of-text-messages-quietly-says-it-was-hacked

    Facebook Down:

    https://arstechnica.com/information-technology/2021/10/facebook-instagram-whatsapp-and-oculus-are-down-heres-what-we-know/
    https://www.bleepingcomputer.com/news/technology/facebook-whatsapp-and-instagram-down-due-to-dns-outage/
    https://www.cbsnews.com/news/facebook-whistleblower-frances-haugen-misinformation-public-60-minutes-2021-10-03/
    https://arstechnica.com/tech-policy/2021/09/facebooks-latest-apology-reveals-security-and-safety-disarray/
    https://www.wsj.com/articles/facebook-whistleblower-frances-haugen-says-she-wants-to-fix-the-company-not-harm-it-11633304122?mod=djemalertNEWS
    https://www.cnet.com/news/facebook-whistleblower-to-testify-before-congress-how-to-watch/?ftag=COS-05-10aaa0b&PostType=link&ServiceType=twitter&UniqueID=ACA16F60-2556-11EC-B5CD-A6BE4744363C&TheTime=2021-10-04T21%3A04%3A33
    https://www.vice.com/en/article/4avjqb/conspiracy-theories-about-facebook-outage-spread-even-without-facebook
    https://9to5mac.com/2021/10/04/instagram-facebook-whatsapp-down/
    https://krebsonsecurity.com/2021/10/what-happened-to-facebook-instagram-whatsapp/

    Thumbnail Credit:

    https://cdn.pixabay.com/photo/2015/09/26/13/38/facebook-959060_1280.jpg 

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    10 min
  • 3 Apple Zero Days Publicly Released; FBI Withholds Ransomware Decryptor Key - ThreatWire

    Click for links and more info ⬇️⬇️⬇️

    100,000 credentials leaked due to an autodiscover flaw, 3 Apple zero days were published online, and the FBI secretly held a ransomware decryptor key! All that coming up now on ThreatWire.

     
     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/2XZqx6Coa2Y

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Follow Shannon on Social Media: https://snubsie.com/links 

    Links:

    Links:
    100k windows exchange emails
    https://www.bleepingcomputer.com/news/microsoft/microsoft-rushes-to-register-autodiscover-domains-leaking-credentials/
    https://www.guardicore.com/labs/autodiscovering-the-great-leak/
    https://thehackernews.com/2021/09/microsoft-exchange-bug-exposes-100000.html
    https://arstechnica.com/information-technology/2021/09/exchange-outlook-autodiscover-bug-exposed-100000-email-passwords/
    https://www.bleepingcomputer.com/news/microsoft/microsoft-rushes-to-register-autodiscover-domains-leaking-credentials/
    https://www.blackhat.com/asia-17/briefings/schedule/#all-your-emails-belong-to-us-exploiting-vulnerable-email-clients-via-domain-name-collision-5301
    https://github.com/guardicore/labs_campaigns/tree/master/Autodiscover

    Apple Stuff:

    https://arstechnica.com/information-technology/2021/09/three-ios-0-days-revealed-by-researcher-frustrated-with-apples-bug-bounty/
    https://www.bleepingcomputer.com/news/security/researcher-drops-three-ios-zero-days-that-apple-refused-to-fix/
    https://habr.com/en/post/579714/
    https://www.vice.com/en/article/k78dpx/researcher-publishes-source-code-for-three-unpatched-iphone-exploits
    https://habr.com/en/post/580272/
    https://www.reddit.com/r/jailbreak/comments/pvaztb/free_release_entitlementfix_workaround_for_the_3/

    Ransomware Key

    https://arstechnica.com/gadgets/2021/07/kaseya-gets-master-decryptor-to-help-customers-still-suffering-from-revil-attack/
    https://arstechnica.com/information-technology/2021/09/ransomware-victims-panicked-while-fbi-secretly-held-revil-decryption-key/
    https://www.cnet.com/tech/services-and-software/fbi-reportedly-withheld-ransomware-key-from-business-for-3-weeks-in-failed-sting/
    https://twitter.com/BitdefenderLabs/status/1438489191491440646?s=20
    https://www.washingtonpost.com/national-security/ransomware-fbi-revil-decryption-key/2021/09/21/4a9417d0-f15f-11eb-a452-4da5fe48582d_story.html

     

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    11 min
  • What Does ExpressVPN Have To Do With The UAE’s Project Raven? - ThreatWire

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    An Epic Hack of Epik Customer Data, Apple Patches Exploit Used By Pegasus Spyware, and ExpressVPN Comes Under Fire! All that coming up now on ThreatWire.

     
     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/W5YDss-olvA

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Follow Shannon on Social Media: https://snubsie.com/links 

    Links:

    Epik:
    https://arstechnica.com/information-technology/2021/09/anonymous-leaks-gigabytes-of-data-from-epik-web-host-of-gab-and-parler/
    https://twitter.com/stevanzetti/status/1437482759241469958
    https://twitter.com/stevanzetti/status/1437818671712329748
    https://arstechnica.com/information-technology/2021/09/epik-data-breach-impacts-15-million-users-including-non-customers/
    https://haveibeenpwned.com/

    Apple:

    https://www.vice.com/en/article/3aq9q3/apple-patches-zero-click-imessage-hack-used-by-nso
    https://citizenlab.ca/2021/09/forcedentry-nso-group-imessage-zero-click-exploit-captured-in-the-wild/
    https://thehackernews.com/2021/09/apple-issues-urgent-updates-to-fix-new.html
    https://arstechnica.com/information-technology/2021/09/apple-fixes-imessage-zero-day-exploited-by-pegasus-spyware/
    https://www.cnet.com/tech/services-and-software/apples-ios-14-8-security-fix-protect-your-iphone-from-pegasus-now/

    ExpressVPN:

    https://www.zdnet.com/article/expressvpn-sells-to-kape-technologies-for-936-million/
    https://www.expressvpn.com/blog/expressvpn-joining-kape/
    https://www.vice.com/en/article/3aq9a5/us-company-sold-zero-click-exploit-project-raven-uae
    https://www.reuters.com/investigates/special-report/usa-spying-raven
    https://www.expressvpn.com/blog/daniel-gericke-expressvpn/
    https://www.documentcloud.org/documents/21062379-raven_charge

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    10 min
  • Record Breaking Botnet Hits Yandex, 60 Million+ Fitness Records Exposed - ThreatWire

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    60 Million+ Fitness Records Exposed, A record breaking botnet hit Yandex, and WhatsApp Rolls Out E2EE Backups! All that coming up now on ThreatWire.

     
     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/s2QFPS5Bqd8

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Follow Shannon on Social Media: https://snubsie.com/links 

    Links:

    60 Million+ Fitness Records Exposed
    https://www.macobserver.com/news/gethealth-data-leak/
    https://www.zdnet.com/article/over-60-million-records-exposed-in-wearable-fitness-tracking-data-breachover-60-million-wearable-fitness-tracking-records-exposed-via-unsecured-database/
    https://www.websiteplanet.com/blog/gethealth-leak-report/
    https://www.programmableweb.com/api/gethealth-rest-api

    Record Breaking Botnet

    https://www.bleepingcomputer.com/news/security/new-m-ris-botnet-breaks-ddos-record-with-218-million-rps-attack/
    https://www.bleepingcomputer.com/news/security/mikrotik-patches-zero-day-flaw-under-attack-in-record-time/
    https://thehackernews.com/2021/09/meris-botnet-hit-russias-yandex-with.html
    https://www.reuters.com/technology/russias-yandex-says-it-repelled-biggest-ddos-attack-history-2021-09-09/
    https://threatpost.com/yandex-meris-botnet/169368/
    https://blog.qrator.net/en/meris-botnet-climbing-to-the-record_142/

    WhatsApp Rolls Out E2EE Backups

    https://engineering.fb.com/2021/09/10/security/whatsapp-e2ee-backups/
    https://thehackernews.com/2021/09/whatsapp-to-finally-let-users-encrypt.html
    https://www.zdnet.com/article/whatsapp-details-plans-to-offer-encrypted-backups/
    https://arstechnica.com/gadgets/2021/09/whatsapp-end-to-end-encrypted-messages-arent-that-private-after-all/
    https://www.propublica.org/article/how-facebook-undermines-privacy-protections-for-its-2-billion-whatsapp-users

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    10 min
  • Cybersecurity Government Plans + Privilege Escalation with Razer, Steelseries, and OMG Cables! - ThreatWire

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

     A severe flaw was found in the RealTek SDK, national cybersecurity initiatives happen at a government meeting, and that Razer privilege escalation flaw? Yeah, it works with other devices too! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube (video may be “private” until the scheduled publish time): xxx

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Realtek
    https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain/
    https://www.bleepingcomputer.com/news/security/botnet-targets-hundreds-of-thousands-of-devices-using-realtek-sdk/
    https://securingsam.com/realtek-vulnerabilities-weaponized/
    https://www.bleepingcomputer.com/news/security/actively-exploited-bug-bypasses-authentication-on-millions-of-routers/

    Cybersecurity Initiatives
    https://www.whitehouse.gov/briefing-room/statements-releases/2021/08/25/fact-sheet-biden-administration-and-private-sector-leaders-announce-ambitious-initiatives-to-bolster-the-nations-cybersecurity/
    https://www.cnet.com/tech/services-and-software/apple-google-amazon-ceos-head-to-white-house-for-cybersecurity-meeting/
    https://www.zdnet.com/article/tech-giants-make-cybersecurity-commitments-after-white-house-meeting/
    https://www.bleepingcomputer.com/news/security/microsoft-and-google-to-invest-billions-to-bolster-us-cybersecurity/
    https://thehackernews.com/2021/08/microsoft-google-to-invest-30-billion.html

    Razer Peripheral Zero Day
    https://twitter.com/j0nh4t/status/1429049506021138437 
    https://www.bleepingcomputer.com/news/security/steelseries-bug-gives-windows-10-admin-rights-by-plugging-in-a-device/
    https://www.forbes.com/sites/daveywinder/2021/08/28/new-windows-10-hacking-warning-for-millions-of-users/?sh=60a1002b1bb7
    https://twitter.com/hak5darren/status/1429463473700888577
    https://twitter.com/_MG_/status/1431059999866843137

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    9 min
  • Razer Mice + Microsoft Windows = Privilege Escalation - ThreatWire

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

    Razer mice plus a windows machine can give you admin privileges, contact tracing data is exposed in a data leak, and a t-mobile hack followup - yes, it’s real! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/NA1ocWiAMVg

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Razer:
    https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/
    https://www.razer.com/synapse-3
    https://twitter.com/j0nh4t/status/1429049506021138437
    https://threatpost.com/windows-10-admin-rights-razer-devices-mouse-peripherals/168855/
    https://twitter.com/Lechatquirit/status/1429374730860208128

    Power Apps:

    https://www.upguard.com/breaches/power-apps
    https://www.wired.com/story/microsoft-power-apps-data-exposed/
    https://threatpost.com/covid-contact-tracing-exposed-fake-vax-cards/168821/
    https://apnews.com/article/technology-health-indiana-coronavirus-pandemic-557a7dce07a39bd0ec9b36140cc53219

    T-Mobile:

    https://threatpost.com/t-mobile-investigates-100m-records/168689/
    https://www.t-mobile.com/news/network/additional-information-regarding-2021-cyberattack-investigation
    https://arstechnica.com/gadgets/2021/08/hackers-who-breached-t-mobile-stole-personal-data-for-49-million-accounts/
    https://threatpost.com/t-mobile-40-million-customers-data-stolen/168778/
    https://www.cnet.com/tech/services-and-software/t-mobiles-2021-cyberattack-4-ways-to-protect-your-personal-data-after-a-breach/

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    9 min
  • The Biggest Cryptocurrency Hack Ever - Why Did It Happen? - ThreatWire

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

     Is this the biggest crypto hack ever? Print Spooler is an actual Nightmare, and a hacker claims t-mobile data was stolen in a server hack! All that coming up now on ThreatWire.  
     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/UW38I60EmX4

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Poly Network Hack: 
    https://arstechnica.com/information-technology/2021/08/hackers-siphon-600-million-in-digital-tokens-crypto-network-says/
    https://www.bleepingcomputer.com/news/security/over-600-million-reportedly-stolen-in-cryptocurrency-hack/
    https://www.zdnet.com/article/poly-network-hackers-potentially-stole-610-million-is-bitcoin-still-safe/
    https://twitter.com/PolyNetwork2/status/1425130017546149891
    https://www.reuters.com/technology/how-hackers-stole-613-million-crypto-tokens-poly-network-2021-08-12/
    https://twitter.com/PolyNetwork2/status/1425123153009803267/photo/1
    https://twitter.com/PolyNetwork2/status/1425870262067548163/photo/1
    https://www.bbc.com/news/business-58193396
    https://cointelegraph.com/news/poly-network-hacker-returns-258m-conducts-ama-on-how-it-went-down

    PrintNightmare: 

    https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-print-spooler-printnightmare-vulnerability/
    https://www.zdnet.com/article/microsoft-fixes-windows-10-printnightmare-flaw-with-this-update/
    https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-another-windows-print-spooler-zero-day-bug/
    https://twitter.com/gentilkiwi/status/1416429860566847490
    https://www.bleepingcomputer.com/news/security/ransomware-gang-uses-printnightmare-to-breach-windows-servers/
    https://blog.talosintelligence.com/2021/08/vice-society-ransomware-printnightmare.html

    T-Mobile Data: 

    https://www.vice.com/en/article/akg8wg/tmobile-investigating-customer-data-breach-100-million
    https://threatpost.com/t-mobile-investigates-100m-records/168689/
    https://twitter.com/UnderTheBreach/status/1426923538099970050
    https://www.cnet.com/tech/services-and-software/t-mobile-investigating-claim-of-stolen-personal-data-for-sale/
    https://www.bleepingcomputer.com/news/security/hacker-claims-to-steal-data-of-100-million-t-mobile-customers/

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    ____________________________________________

    Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

    10 min

About Threat Wire

From the publisher's feed

Threat Wire by Hak5 is a quick weekly dose of news about security, privacy, and what is threatening the freedom of our Internet.