Threat Wire

Our Site → https://www.hak5.org

Shop → https://www.hakshop.com

Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1

Support → https://www.patreon.com/threatwire

Contact Us → http://www.twitter.com/hak5

Threat Wire RSS → https://shannonmorse.podbean.com/feed/

Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Darren Kitchen → https://www.twitter.com/hak5darren

Host: Mubix → http://www.twitter.com/mubix

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

https://android-developers.googleblog.com/2019/02/android-security-improvement-update.html

https://www.cnet.com/news/android-security-program-has-helped-fix-over-1m-apps-in-google-play/

https://fidoalliance.org/android-now-fido2-certified-accelerating-global-migration-beyond-passwords/

https://thehackernews.com/2019/02/android-fido2-password-security.html

https://www.cnet.com/news/goodbye-passwords-webauthn-is-now-an-official-web-standard/

https://www.cnet.com/news/google-looks-to-leave-passwords-behind-for-a-billion-android-devices/

https://www.yubico.com/2018/08/10-things-youve-been-wondering-about-fido2-webauthn-and-a-passwordless-world/

https://www.zdnet.com/article/19-vulnerabilities-exposed-in-visitor-management-systems/

https://www.cyberscoop.com/ibm-interns-find-19-vulnerabilities-corporate-check-systems/

https://techcrunch.com/2019/03/03/facebook-phone-number-look-up/

https://www.cnet.com/news/facebooks-two-factor-authentication-with-phone-numbers-puts-security-and-privacy-at-odds/

https://twitter.com/jeremyburge/status/1101402001907372032?ref_src=twsrc%5Egoogle%7Ctwcamp%5Enews%7Ctwgr%5Etweet

https://motherboard.vice.com/en_us/article/kzdxjx/facebook-phone-number-two-factor-authentication

Photo credit:

https://www.saimgs.com/imglib/other_pages/visitor-management/sine-vms-kiosk.png

Password Managers have vulnerabilities, companies want us to chill out over their embedded recording devices in hardware, and WinRAR had a 19 year old bug! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → https://www.hakshop.comSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:Password Managers:https://www.securityevaluators.com/casestudies/password-manager-hacking/https://www.zdnet.com/article/critical-vulnerabilities-uncovered-in-popular-password-managers/https://keepass.info/help/base/security.html#secmemprothttps://lastpass.com/misc_download2.phphttps://threatpost.com/1password-dashlane-keepass-and-lastpass/142037/https://www.cyberscoop.com/bugcrowd-adrian-bednarek-lastpass/

Embedded Recording Devices:https://twitter.com/vkamluk/status/1097008518685573120https://www.cnet.com/news/airplane-seat-cameras-could-be-your-new-spy-in-the-sky/https://www.buzzfeednews.com/article/nicolenguyen/american-airlines-planes-entertainment-system-camerashttps://thehackernews.com/2016/12/hacking-in-flight-system.htmlhttps://www.cnet.com/news/google-calls-nests-hidden-microphone-an-error/https://www.zdnet.com/article/google-says-secret-microphones-in-nest-home-products-an-error/

WinRAR Vulnerability:https://research.checkpoint.com/extracting-code-execution-from-winrar/https://arstechnica.com/information-technology/2019/02/nasty-code-execution-bug-in-winrar-threatened-millions-of-users-for-14-years/https://threatpost.com/winrar-flaw-500-million-users/142080/https://www.zdnet.com/article/winrar-versions-released-in-the-last-19-years-impacted-by-severe-security-flaw/https://thehackernews.com/2019/02/winrar-malware-exploit.html

Photo credit:https://www.flickr.com/photos/bitsfrombytes/29731017407

Scooters are being hacked! Make sure you’re resetting your ad ID, but does it do anything? And Australia’s parliament has some hacks to deal with! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → https://www.hakshop.comSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:Scooter:https://blog.zimperium.com/dont-give-me-a-brake-xiaomi-scooter-hack-enables-dangerous-accelerations-and-stops-for-unsuspecting-riders/https://www.cyberscoop.com/scooter-hack-zimperium-bluetooth-bird-spin/https://thehackernews.com/2019/02/xiaomi-electric-scooter-hack.html

Android:https://arxiv.org/pdf/1901.04434.pdfhttps://www.zdnet.com/article/tor-traffic-from-individual-android-apps-detected-with-97-percent-accuracy/https://support.google.com/googleplay/android-developer/answer/6048248?hl=enhttps://blog.appcensus.mobi/2019/02/14/ad-ids-behaving-badly/https://www.cnet.com/news/these-android-apps-have-been-tracking-you-even-when-you-say-stop/https://www.zdnet.com/article/thousands-of-apps-bypass-android-privacy-protections-to-permanently-record-your-activities/

Australia:https://www.smh.com.au/politics/federal/australia-s-major-political-parties-hacked-in-sophisticated-attack-ahead-of-election-20190218-p50yi1.htmlhttps://www.zdnet.com/article/australian-political-parties-also-hit-by-state-actor-in-parliamentary-network-attack-pm/https://www.zdnet.com/article/australian-government-computing-network-reset-following-security-incident/https://www.cnet.com/news/australia-blames-sophisticated-state-actor-for-massive-government-hack/https://arstechnica.com/information-technology/2019/02/australian-political-parties-hacked-by-nation-state-attacker/https://www.abc.net.au/news/2019-02-18/someone-tried-to-hack-parliament-are-our-politicians-vulnerable/10822072

Photo credit:https://c1.staticflickr.com/7/6179/6180104944_56c7ce7e91_b.jpg

Apple Fixes their FaceTime Bug, and Finds More Issues in the process, airlines are found not encrypting your passenger data, and detailed and accurate GPS data was being sold off! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → https://www.hakshop.comSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:Apple Facetime Update:https://arstechnica.com/information-technology/2019/02/apple-pushes-fix-for-facepalm-possibly-its-creepiest-vulnerability-ever/https://support.apple.com/en-us/HT209520https://support.apple.com/en-us/HT209521https://www.zdnet.com/article/ios-12-1-4-fixes-iphone-facetime-spying-bug/https://www.businessinsider.com/apple-security-audit-on-group-facetime-bug-discovers-second-flaw-2019-2https://twitter.com/benhawkes/status/1093581737924259840https://techcrunch.com/2019/02/06/iphone-session-replay-screenshots/https://techcrunch.com/2019/02/07/apple-glassbox-apps/

Airline Systems:https://www.wandera.com/mobile-security/airline-check-in-risk/ https://threatpost.com/flaw-in-multiple-airline-systems-exposes-passenger-data/141596/https://www.cyberscoop.com/airlines-ticketing-email-hackers-wandera-southwest/

Cell Carriers:https://motherboard.vice.com/en_us/article/j575dg/what-a-gps-data-is-and-why-wireless-carriers-most-definitely-shouldnt-be-selling-ithttps://motherboard.vice.com/en_us/article/a3b3dg/big-telecom-sold-customer-gps-data-911-callshttps://motherboard.vice.com/en_us/article/43z3dn/hundreds-bounty-hunters-att-tmobile-sprint-customer-location-data-years

 

Photo credit:https://upload.wikimedia.org/wikipedia/commons/d/d5/N731SW_Southwest.jpg

A systemd vulnerability creates concern, DNS Hijacking goes worldwide, and major telcos are still selling location data for their users! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.org Shop → https://www.hakshop.com Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1 Support → https://www.patreon.com/threatwire Contact Us → http://www.twitter.com/hak5 Threat Wire RSS → https://shannonmorse.podbean.com/feed/ Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999 

Host: Shannon Morse → https://www.twitter.com/snubs Host: Darren Kitchen → https://www.twitter.com/hak5darren Host: Mubix → http://www.twitter.com/mubix -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:https://www.qualys.com/2019/01/09/system-down/system-down.txthttps://www.zdnet.com/article/new-linux-systemd-security-holes-uncovered/https://thehackernews.com/2019/01/linux-systemd-exploit.html

https://www.fireeye.com/blog/threat-research/2019/01/global-dns-hijacking-campaign-dns-record-manipulation-at-scale.htmlhttps://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS-Infrastructure-Hijacking-Campaignhttps://www.wired.com/story/iran-dns-hijacking/https://arstechnica.com/information-technology/2019/01/a-dns-hijacking-wave-is-targeting-companies-at-an-almost-unprecedented-scale/https://www.cyberscoop.com/fireeye-dns-hijacking-record-manipulation-iran/

https://motherboard.vice.com/en_us/article/nepxbz/i-gave-a-bounty-hunter-300-dollars-located-phone-microbilt-zumigo-tmobilehttps://www.wired.com/story/carriers-sell-location-data-third-parties-privacy/https://arstechnica.com/tech-policy/2019/01/after-broken-promise-att-says-itll-stop-selling-phone-location-data/https://motherboard.vice.com/en_us/article/d3bnyv/google-demanded-tmobile-sprint-to-not-sell-google-fi-customers-location-datahttps://motherboard.vice.com/en_us/article/j5z74d/senators-harris-warner-wyden-fcc-investigate-att-sprint-tmobile-bounty-huntershttps://www.cnet.com/news/congress-asks-fcc-for-emergency-briefing-on-ending-location-data-sales/https://energycommerce.house.gov/sites/democrats.energycommerce.house.gov/files/documents/FCC.2019.1.11.%20Letter%20to%20the%20FCC%20re%20unauthorized%20disclosures%20of%20consumer%20data.CAT_.pdf

 

Photo credit:https://cdn.pixabay.com/photo/2017/04/03/14/42/smartphone-2198559_960_720.jpg

It’s the 5 biggest and worst hacks of 2018! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.org Shop → https://www.hakshop.com Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1 Support → https://www.patreon.com/threatwire Contact Us → http://www.twitter.com/hak5 Threat Wire RSS → https://shannonmorse.podbean.com/feed/ Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999 

Host: Shannon Morse → https://www.twitter.com/snubs Host: Darren Kitchen → https://www.twitter.com/hak5darren Host: Mubix → http://www.twitter.com/mubix -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

MyHeritage and 23andMe:https://blog.myheritage.com/2018/06/myheritage-statement-about-a-cybersecurity-incident/#https://blog.23andme.com/news/a-note-on-23andmes-new-collaboration-with-gsk/

Exactis:https://www.wired.com/story/exactis-database-leak-340-million-records/

Facebook: https://www.recode.net/2018/3/17/17134072/facebook-cambridge-analytica-trump-explained-user-datahttps://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.htmlhttps://newsroom.fb.com/news/2018/09/security-update/https://developers.facebook.com/blog/post/2018/12/14/notifying-our-developer-ecosystem-about-a-photo-api-bug/

Marriott:http://news.marriott.com/2018/11/marriott-announces-starwood-guest-reservation-database-security-incident/

Aadharhttps://www.zdnet.com/article/another-data-leak-hits-india-aadhaar-biometric-database/

Photo credit:https://pixabay.com/p-3010443/?no_redirect

Shamoon malware is back, Facebook exposes private photos for millions of users, and SuperMicro did an audit to prove their innocence! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.org Shop → https://www.hakshop.com Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1 Support → https://www.patreon.com/threatwire Contact Us → http://www.twitter.com/hak5 Threat Wire RSS → https://shannonmorse.podbean.com/feed/ Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999 

Host: Shannon Morse → https://www.twitter.com/snubs Host: Darren Kitchen → https://www.twitter.com/hak5darren Host: Mubix → http://www.twitter.com/mubix -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:

Shamoon:

https://www.cyberscoop.com/shamoon-saipem-palo-alto-networks/

https://thehackernews.com/2018/12/shamoon-malware-attack.html

http://www.saipem.com/en_IT/static/documents/PR%20Saipem%2010_1_2018.pdf

http://www.saipem.com/sites/SAIPEM_en_IT/con-side-dx/Press%20releases/2018/Cyber%20attack%20update.page

https://threatpost.com/shamoon-new-wiper-attack/139881/

https://www.zdnet.com/article/shamoon-malware-destroys-data-at-italian-oil-and-gas-company/

 

Facebook:

https://developers.facebook.com/blog/post/2018/12/14/notifying-our-developer-ecosystem-about-a-photo-api-bug/

https://techcrunch.com/2018/12/14/facebook-photo-bug/

https://threatpost.com/facebook-photos-exposed/139940/

https://www.zdnet.com/article/facebook-bug-exposed-private-photos-of-6-8-million-users/

https://www.facebook.com/help/200632800873098?ref=photonotice

 

SuperMicro update:

https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies

https://www.supermicro.com/en/news/CEO-3rdPartySecurity-Update

https://arstechnica.com/information-technology/2018/12/supermicro-refutes-report-of-malicious-implants-with-audit/

https://www.supermicro.com/en/news/CEO-3rdPartySecurity-Update

Photo credit:

https://imagesvc.timeincapp.com/v3/mm/image?url=https%3A%2F%2Ffortunedotcom.files.wordpress.com%2F2018%2F04%2Ffacebook-screen.jpg&w=1000&q=85

Australia’s Anti-Encryption Bill Passes, Banks Get Hit With Old School Social Engineering and new school tech, and Huawei gets banned in multiple countries! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → https://www.hakshop.comSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:Australia’s new Anti-encryption bill:https://www.aph.gov.au/Parliamentary_Business/Bills_Legislation/Bills_Search_Results/Result?bId=r6195https://thehackernews.com/2018/12/australia-anti-encryption-bill.htmlhttps://www.zdnet.com/article/australia-now-has-encryption-busting-laws-as-labor-capitulates/https://www.zdnet.com/article/shorten-defends-process-of-passing-encryption-laws-and-reviewing-later/https://www.cnet.com/news/australia-passes-encryption-assistance-access-laws-facebook-google-twitter-apple-amazon/https://www.cyberscoop.com/australia-encryption-backdoors-law-passes/https://threatpost.com/australia-anti-encryption-law-triggers-sweeping-backlash/139697/

Banks hacked:https://www.kaspersky.com/blog/dark-vishnya-attack/24867/https://securelist.com/darkvishnya/89169/https://www.hak5.org/gear/bash-bunnyhttps://www.zdnet.com/article/eastern-european-banks-lose-tens-of-millions-of-dollars-in-hollywood-style-hacks/https://www.cyberscoop.com/darkvishnya-kaspersky-physical-devices-banks/

Huawei:https://www.businessinsider.com/huawei-meng-wanzhou-trump-china-trade-war-2018-12https://www.nytimes.com/2018/12/07/technology/huawei-meng-wanzhou-fraud.htmlhttps://www.zdnet.com/article/trudeau-denies-involvement-in-huawei-arrest/https://www.zdnet.com/article/japan-looking-at-banning-huawei-and-zte-from-government-deals/https://www.zdnet.com/article/bt-avoids-huawei-for-5g-after-stripping-tech-from-ee-mobile-network/

Photo credit:https://upload.wikimedia.org/wikipedia/commons/7/7a/Aus_Flag.jpg

Dunkin Donuts Got Hacked?! Not Necessarily, 500M Customers are Affected in a Huge Breach, and Thousands of Routers are infected with an NSA exploit! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → https://www.hakshop.comSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:Marriott Breach: via Joelhttp://news.marriott.com/2018/11/marriott-announces-starwood-guest-reservation-database-security-incident/https://answers.kroll.com/https://www.cyberscoop.com/marriott-data-breach-starwood-hotels-gdpr/https://www.zdnet.com/article/starwood-hotels-fall-prey-to-point-of-sale-malware/https://www.zdnet.com/article/20-top-us-hotels-hit-by-fresh-malware-attacks/https://arstechnica.com/information-technology/2018/11/marriott-breach-leaves-500-million-exposed-with-passport-card-numbers-stolen/https://threatpost.com/2014-marriott-data-breach-exposed-500m-guests-impacted/139507/https://twitter.com/NewYorkStateAG/status/1068510072396029952https://www.zdnet.com/article/marriott-faces-massive-data-breach-expenses-even-with-cybersecurity-insurance/https://www.wired.com/story/marriott-hack-protect-yourself/

Dunkin Donuts Breached:https://www.dunkindonuts.com/content/dam/dd/pdf/Security_Update.pdfhttps://www.cyberscoop.com/dunkin-donuts-struck-in-latest-credential-stuffing-attack/https://www.bostonglobe.com/business/2018/11/29/your-dunkin-donuts-account-may-have-been-hacked/8WWXZJzX3ZwAhKit2xavwL/story.htmlhttps://motherboard.vice.com/en_us/article/59v5d8/dunkin-donuts-loyalty-points-accounts-dark-web-buy-sell-cheap

NSA Malware Makes Its Way Onto Consumer Routers:https://blogs.akamai.com/sitr/2018/11/upnproxy-eternalsilence.htmlhttps://www.akamai.com/cn/zh/multimedia/documents/white-paper/upnproxy-blackhat-proxies-via-nat-injections-white-paper.pdfhttps://arstechnica.com/information-technology/2018/11/mass-router-hack-exposes-millions-of-devices-to-potent-nsa-exploit/

Photo credit:https://upload.wikimedia.org/wikipedia/commons/7/7e/Hotel_Marriott_Vienna.jpg

Amazon quietly discloses a security incident, USPS finally fixes a vulnerability they knew about a year ago, and rowhammer is back with a vengeance ! All that coming up now on ThreatWire. #threatwire #hak5

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → https://www.hakshop.comSubscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Links:Amazonhttps://www.cyberscoop.com/amazon-keeps-tight-lipped-pre-black-friday-security-incident/https://www.zdnet.com/article/amazon-leaks-users-email-addresses-due-to-technical-error/https://arstechnica.com/information-technology/2018/11/amazon-customers-names-and-email-addresses-disclosed-by-website-error/https://betanews.com/2018/11/21/amazon-discloses-names-and-addreses/

USPShttps://www.zdnet.com/article/usps-finally-fixes-website-flaw-that-exposed-60-million-users-data/https://krebsonsecurity.com/2018/11/usps-site-exposed-data-on-60-million-users/https://www.cnet.com/news/usps-reportedly-fixes-website-bug-that-exposed-data-of-60m-users/https://thehackernews.com/2018/11/usps-data-breach.htmlhttps://www.uspsoig.gov/sites/default/files/document-library-files/2018/IT-AR-19-001.pdf

Rowhammerhttps://www.zdnet.com/article/rowhammer-attacks-can-now-bypass-ecc-memory-protections/https://arstechnica.com/information-technology/2018/11/potentially-disastrous-rowhammer-bitflips-can-bypass-ecc-protections/https://www.wired.com/story/rowhammer-ecc-memory-data-hack/ https://www.vusec.net/projects/eccploit/

Photo credit:https://upload.wikimedia.org/wikipedia/commons/0/02/USPS-Mail-Truck.jpg