Threat Wire

Pwned Passwords version 2 is launched, Intel releases a new firmware update for Spectre, and the net neutrality repeal was published, but the fight is far from over. All that coming up now on ThreatWire.

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Shop → http://www.hakshop.comSubscribe → http://www.youtube.com/hak5RSS Feeds → https://www.hak5.org/subscribeSupport → http://www.patreon.com/threatwire

Our Site → http://www.hak5.orgContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Help us with Translations! → http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ

For Business Inquiries, please use our contact forms → https://www.hak5.org/contact

Producer: Shannon Morse → https://www.youtube.com/shannonmorseEditor: Colleen CavoloHost: Shannon Morse → https://www.twitter.com/snubsHost: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/https://haveibeenpwned.com/Passwordshttps://twitter.com/cynoprimehttps://passwordsecurity.info/https://arstechnica.com/information-technology/2018/02/new-tool-safely-checks-your-passwords-against-a-half-billion-pwned-passwords/

https://newsroom.intel.com/news/latest-intel-security-news-updated-firmware-available/https://arstechnica.com/gadgets/2018/02/intel-ships-hopefully-stable-microcode-for-skylake-kaby-lake-coffee-lake/https://threatpost.com/intel-issues-updated-spectre-firmware-fixes-for-newer-processors/130025/https://threatpost.com/intel-expands-bug-bounty-program-post-spectre-and-meltdown/129980/https://software.intel.com/sites/default/files/managed/1d/46/Retpoline-A-Branch-Target-Injection-Mitigation.pdfhttps://arstechnica.com/gadgets/2018/02/32-class-action-suits-filed-against-intel-over-spectre-and-meltdown-flaws/

https://transition.fcc.gov/Daily_Releases/Daily_Business/2018/db0222/FCC-18-22A1.pdfhttps://www.securityweek.com/us-enters-final-stage-net-neutrality-debatehttps://ag.ny.gov/sites/default/files/petition.pdfhttps://www.battleforthenet.com/onemorevote/https://threatpost.com/supporters-of-net-neutrality-vow-to-fight-rule-changes/130052/https://motherboard.vice.com/en_us/article/59kjmn/fcc-net-neutrality-repeal-published-lawsuits

From Joel:https://patreon.zendesk.com/hc/en-us/articles/206538086-How-Do-I-Set-Up-Two-Factor-Authentication-

 

Youtube Thumbnail credit:https://pixabay.com/en/password-app-application-business-2781614/

Amazon’s Key has another vulnerability, Apple’s source code gets leaked, and cryptomining hits government sites. All that coming up now on ThreatWire.

Special thanks to MG for contributing to this episode! https://twitter.com/_MG_/ 

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Shop → http://www.hakshop.com Subscribe → http://www.youtube.com/hak5 RSS Feeds → https://www.hak5.org/subscribe Support → http://www.patreon.com/threatwire 

Our Site → http://www.hak5.org Contact Us → http://www.twitter.com/hak5 Threat Wire RSS → https://shannonmorse.podbean.com/feed/ Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999 

Help us with Translations! → http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ 

For Business Inquiries, please use our contact forms → https://www.hak5.org/contact 

Producer: Shannon Morse → https://www.youtube.com/shannonmorse Editor: Colleen CavoloHost: Shannon Morse → https://www.twitter.com/snubs Host: Darren Kitchen → https://www.twitter.com/hak5darren Host: Mubix → http://www.twitter.com/mubix -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

https://twitter.com/_MG_/status/960269383774842881https://medium.com/@_MG_/amazon-key-burglary-as-a-service-b296820a20d0http://www.zdnet.com/article/after-dismissing-security-flaw-amazon-patches-key-smart-lock-anyway/

https://motherboard.vice.com/en_us/article/a34g9j/iphone-source-code-iboot-ios-leakhttps://github.com/github/dmca/blob/master/2018/2018-02-07-Apple.mdhttps://www.cnet.com/news/apple-calls-leaked-iphone-source-code-outdated/

https://scotthelme.co.uk/protect-site-from-cryptojacking-csp-sri/https://twitter.com/Scott_Helme/status/962684239975272450https://publicwww.com/websites/browsealoud.com%2Fplus%2Fscripts%2Fba.js/https://www.texthelp.com/en-gb/company/corporate-blog/february-2018/data-security-investigation-underway-at-texthelp/https://www.troyhunt.com/the-javascript-supply-chain-paradox-sri-csp-and-trust-in-third-party-libraries/

Youtube Thumbnail credit:https://medium.com/@_MG_/amazon-key-burglary-as-a-service-b296820a20d0

Adobe Flash has got a 0-Day Remote Code Execution problem, that jackpotting thing? Yeah, it officially happened in the US. And is autosploit just for noobs? All that coming up now on ThreatWire.

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Shop → http://www.hakshop.com Subscribe → http://www.youtube.com/hak5 RSS Feeds → https://www.hak5.org/subscribe Support → http://www.patreon.com/threatwire 

Our Site → http://www.hak5.org Contact Us → http://www.twitter.com/hak5 Threat Wire RSS → https://shannonmorse.podbean.com/feed/ Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999 

Help us with Translations! → http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ 

For Business Inquiries, please use our contact forms → https://www.hak5.org/contact 

Producer: Shannon Morse → https://www.youtube.com/shannonmorse Editor: Colleen CavoloHost: Shannon Morse → https://www.twitter.com/snubs Host: Darren Kitchen → https://www.twitter.com/hak5darren Host: Mubix → http://www.twitter.com/mubix -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Flash:https://www.krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=26998https://helpx.adobe.com/security/products/flash-player/apsa18-01.htmlhttp://blog.talosintelligence.com/2018/02/group-123-goes-wild.htmlhttps://www.fireeye.com/blog/threat-research/2018/02/attacks-leveraging-adobe-zero-day.htmlhttp://www.zdnet.com/article/south-korea-identifies-flash-0-day-in-the-wild/

AutoSploithttps://twitter.com/Real__Vector/status/958412549044801536https://github.com/NullArray/AutoSploithttps://arstechnica.com/information-technology/2018/02/threat-or-menace-autosploit-tool-sparks-fears-of-empowered-script-kiddies/https://twitter.com/taosecurity/status/958670200357998592

Jackpotting:https://krebsonsecurity.com/2018/01/drug-charges-tripped-up-suspects-in-first-known-atm-jackpotting-attacks-in-the-us/https://krebsonsecurity.com/wp-content/uploads/2018/01/romeroetal-jackpotting.pdf

Youtube Thumbnail credit:https://pixabay.com/p-731198/?no_redirect

Over half a billion dollars worth of cryptocurrency is stolen, jackpotting his the states, and net neutrality is still in the news but why? All that coming up now on ThreatWire.

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Shop → http://www.hakshop.com Subscribe → http://www.youtube.com/hak5 RSS Feeds → https://www.hak5.org/subscribe Support → http://www.patreon.com/threatwire 

Our Site → http://www.hak5.org Contact Us → http://www.twitter.com/hak5 Threat Wire RSS → https://shannonmorse.podbean.com/feed/ Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999 

Help us with Translations! → http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ 

For Business Inquiries, please use our contact forms → https://www.hak5.org/contact 

Producer: Shannon Morse → https://www.youtube.com/shannonmorse Editor: Colleen CavoloHost: Shannon Morse → https://www.twitter.com/snubs Host: Darren Kitchen → https://www.twitter.com/hak5darren Host: Mubix → http://www.twitter.com/mubix -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Cryptocurrency:https://motherboard.vice.com/en_us/article/ne4pvg/police-in-ottawa-canada-charged-a-teen-with-armed-bitcoin-robbery-are-hunting-two-suspectshttps://www.canadianbitcoins.com/index.phphttps://twitter.com/OttawaPolice/status/956206413235310592/photo/1?ref_src=twsrc%5Etfw&ref_url=https%3A%2F%2Ftwitter.com%2FOttawaPolice%2Fstatus%2F956206413235310592https://arstechnica.com/information-technology/2018/01/two-new-cryptocurrency-heists-make-off-with-over-400m-worth-of-blockchange/https://coincheck.com/en/blog/4673http://www.securityweek.com/cryptocurrencies-fall-after-hack-hits-japans-coincheckhttps://motherboard.vice.com/en_us/article/ne4xdk/a-cryptocurrency-theft-bigger-than-mt-gox-just-happened-in-japan-coincheck-nemhttp://www.securityweek.com/japans-crypto-exchange-refund-customers-after-thefthttps://arstechnica.com/information-technology/2018/01/now-even-youtube-serves-ads-with-cpu-draining-cryptocurrency-miners/https://diegobetto.com/crypto-miner-coinhive-youtube-ads/

ATMs:https://www.cnet.com/news/jackpotting-hack-makes-its-way-to-atms-in-us-krebs-diebold-nixdorf-ncr/https://krebsonsecurity.com/wp-content/uploads/2018/01/20180126-GLOBAL-SECURITY-ALERT-018-04-0005-Potential-Jackpotting-US-Update-on-017-34-0002-smaller.pdfhttps://krebsonsecurity.com/2018/01/first-jackpotting-attacks-hit-u-s-atms/

Net Neutrality and the FCC:https://arstechnica.com/tech-policy/2018/01/analysis-shows-majority-of-anti-net-neutrality-comments-came-from-bots/https://arstechnica.com/tech-policy/2018/01/fcc-broadband-committee-wants-to-restrict-publicly-owned-networks/http://www.sanjoseca.gov/DocumentCenter/View/74464https://www.fcc.gov/sites/default/files/bdac-modelcode-012018.pdfhttps://arstechnica.com/tech-policy/2018/01/net-neutrality-will-be-enforced-in-new-york-under-orders-from-governor/https://www.governor.ny.gov/news/governor-cuomo-signs-executive-order-protect-and-strengthen-net-neutrality-new-york

Youtube Thumbnail credit:https://pxhere.com/en/photo/1372063

The NSA can legally monitor some communications, some google chrome extensions were found to be malicious, and OnePlus had a credit card hack. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ

Edited by: Colleen Cavolo------------------------------

Links:https://en.wikipedia.org/wiki/Foreign_Intelligence_Surveillance_Acthttps://theintercept.com/2018/01/19/voice-recognition-technology-nsa/http://www.zdnet.com/article/congress-demanded-nsa-spying-reform-instead-they-let-you-down/https://motherboard.vice.com/en_us/article/a3n83g/senate-fisa-702-warrantless-surveillance-nsahttps://www.cnet.com/news/nsa-surveillance-programs-prism-upstream-live-on-snowden/https://motherboard.vice.com/en_us/article/ne45jd/rand-paul-filibuster-fisa-702-senate

https://threatpost.com/google-chrome-once-again-target-of-malicious-extensions/129443/https://www.icebrg.io/blog/malicious-chrome-extensions-enable-criminals-to-impact-over-half-a-million-users-and-global-businesseshttps://arstechnica.com/information-technology/2018/01/500000-chrome-users-fall-prey-to-malicious-extensions-in-google-web-store/https://arstechnica.com/information-technology/2018/01/malicious-chrome-extension-is-next-to-impossible-to-manually-remove/https://blog.malwarebytes.com/threat-analysis/2018/01/new-chrome-and-firefox-extensions-block-their-removal-to-hijack-browsers/

https://threatpost.com/oneplus-confirms-credit-card-breach-impacted-up-to-40000-customers/129569/https://forums.oneplus.net/threads/jan-19-update-an-update-on-credit-card-security.752415/http://www.zdnet.com/article/oneplus-confirms-hack-exposed-credit-cards-of-phone-buyers/https://twitter.com/PeterSmallbone/status/954358839570255872

 

Youtube Thumbnail credit:https://upload.wikimedia.org/wikipedia/commons/8/84/National_Security_Agency_headquarters%2C_Fort_Meade%2C_Maryland.jpg

Everything you need to know about Spectre and Meltdown. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.comSupport: http://www.patreon.com/threatwireSubscribe: http://www.youtube.com/hak5Our Site: http://www.hak5.orgContact Us: http://www.twitter.com/hak5Threat Wire RSS: https://shannonmorse.podbean.com/feed/Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ------------------------------

Links:https://c-5uwzmx78pmca09x24umtblwevibbiksx2ekwu.g00.cnet.com/g00/3_c-5eee.kvmb.kwu_/c-5UWZMXPMCA09x24pbbx78ax3ax2fx2fumtblwevibbiks.kwux2fumtblwev.x78ln_$/$?i10c.ua=1https://c-5uwzmx78pmca09x24ax78mkbzmibbiksx2ekwu.g00.cnet.com/g00/3_c-5eee.kvmb.kwu_/c-5UWZMXPMCA09x24pbbx78ax3ax2fx2fax78mkbzmibbiks.kwux2fax78mkbzm.x78ln_$/$?i10c.ua=1https://www.cnet.com/news/chips-exploit-meltdown-spectre-security-flaws-afflict-arm-phones-and-intel-pcs/https://meltdownattack.com/https://www.cnet.com/how-to/how-to-fix-meltdown-spectre-intel-amd-arm-windows-mac-android-ios/https://arstechnica.com/information-technology/2018/01/intel-ceos-sale-of-stock-just-before-security-bug-reveal-raises-questions/https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlchrome://flags/#enable-site-per-processhttp://www.zdnet.com/article/meltdown-spectre-ibm-preps-firmware-and-os-fixes-for-vulnerable-power-cpus/http://www.zdnet.com/article/spectre-mitigations-arrive-in-latest-nvidia-gpu-drivers/http://www.zdnet.com/article/major-linux-distros-have-meltdown-patches-but-thats-only-part-of-the-fix/http://www.zdnet.com/article/linux-vs-meltdown-ubuntu-gets-second-update-after-first-one-fails-to-boot/https://www.cnet.com/news/apple-iphone-ipad-mac-ios-safari-processor-flaw-meltdown-spectre-intel-arm/http://www.zdnet.com/article/meltdown-spectre-firmware-glitch-intel-warns-of-risk-of-sudden-reboots/https://support.microsoft.com/en-us/help/4073707/windows-os-security-update-block-for-some-amd-based-deviceshttps://doublepulsar.com/important-information-about-microsoft-meltdown-cpu-security-fixes-antivirus-vendors-and-you-a852ba0292echttp://www.securityweek.com/fake-meltdownspectre-patch-installs-malwarehttps://www.bleepingcomputer.com/news/security/list-of-meltdown-and-spectre-vulnerability-advisories-patches-and-updates/https://c-5uwzmx78pmca09x24vmeazwwux2eqvbmtx2ekwu.g00.cnet.com/g00/3_c-5eee.kvmb.kwu_/c-5UWZMXPMCA09x24pbbx78ax3ax2fx2fvmeazwwu.qvbmt.kwux2fex78-kwvbmvbx2fcx78twilax2faqbmax2f99x2f0896x2f89x2fJtwo-Jmvkpuizs-Bijtm.x78ln_$/$/$/$/$/$/$/$?i10c.ua=1https://www.techspot.com/article/1556-meltdown-and-spectre-cpu-performance-windows/https://support.google.com/faqs/answer/7625886Youtube Thumbnail credit:https://www.windowscentral.com/sites/wpcentral.com/files/styles/larger/public/field/image/2018/01/meltdown-spectre-logos.jpg?itok=4tmk0piF

Your browsing data could be tracked by login forms, Forever21 got hacked, and Snowden released his very own mobile security system. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Las Vegas CES Meetup details! https://twitter.com/Snubs/status/948252554017652736 

Links:https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/ https://www.theverge.com/2017/12/30/16829804/browser-password-manager-adthink-princeton-research https://webtransparency.cs.princeton.edu/no_boundaries/autofill_sites.html 

https://www.cnet.com/news/forever-21-confirms-hack-payment-system/ https://newsroom.forever21.com/releases/notice-of-payment-card-security-incident https://www.forever21.com/protecting_our_customers/default.aspx 

https://guardianproject.github.io/haven/ https://twitter.com/Snubs/status/944229264856985601 https://www.wired.com/story/snowden-haven-app-turns-phone-into-home-security-system/  https://freedom.press/news/introducing-haven-open-source-security-system-your-pocket/ 

Youtube Thumbnail credit:https://c2.staticflickr.com/4/3870/14977198417_7fcd885fdd_b.jpg

The biggest, baddest, worst hacks and vulnerabilities of 2017! All that coming up now on ThreatWire.-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Yahoo:https://motherboard.vice.com/en_us/article/8x8b4x/whoops-yahoo-says-2013-hack-actually-hit-3-billion-users https://www.oath.com/press/yahoo-provides-notice-to-additional-users-affected-by-previously/ https://krebsonsecurity.com/2017/10/fear-not-you-too-are-a-cybercrime-victim/ 

WannaCry:https://www.troyhunt.com/everything-you-need-to-know-about-the-wannacrypt-ransomware/ http://blog.talosintelligence.com/2017/05/wannacry.html https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html https://www.documentcloud.org/documents/3912524-Kronos-Indictment-R.html https://www.wsj.com/articles/its-official-north-korea-is-behind-wannacry-1513642537?shareToken=st2d38565d59c24132b421a4b03edb68b5&reflink=article_email_share https://www.washingtonpost.com/world/national-security/us-set-to-declare-north-korea-carried-out-massive-wannacry-cyber-attack/2017/12/18/509deb1c-e446-11e7-a65d-1ac0fd7f097e_story.html?utm_term=.7c8cb1e154dd 

KRACK:https://www.krackattacks.com/ https://www.kb.cert.org/vuls/byvendor?searchview&Query=FIELD+Reference=228519&SearchOrder=4 https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/ 

198 Million Voter Data: http://www.securityweek.com/republican-contractor-exposes-details-198-million-american-voters https://www.upguard.com/breaches/the-rnc-files https://gizmodo.com/gop-data-firm-accidentally-leaks-personal-details-of-ne-1796211612 

Equifax:https://arstechnica.com/information-technology/2017/09/equifax-website-hack-exposes-data-for-143-million-us-consumers/ https://threatpost.com/equifax-confirms-march-struts-vulnerability-behind-breach/127975/ https://arstechnica.com/information-technology/2017/09/massive-equifax-breach-caused-by-failure-to-patch-two-month-old-bug/ https://www.bloomberg.com/news/articles/2017-09-07/three-equifax-executives-sold-stock-before-revealing-cyber-hack https://www.equifaxsecurity2017.com/ https://arstechnica.com/information-technology/2017/09/equifax-directs-breach-victims-to-fake-notification-site/ 

Youtube Thumbnail credit:https://www.simplilearn.com/ice9/free_resources_article_thumb/roles-of-ethical-hacker-article.jpg

A history of ISP regulations, new malware is infecting industrial control systems, and three men plead guilty in the Mirai botnet case. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:Net Neutrality Is Cannedhttp://www.zdnet.com/article/fcc-votes-to-repeal-obama-era-net-neutrality-rules/ https://thehackernews.com/2017/12/fcc-net-neutrality-rules.html https://www.king.senate.gov/imo/media/doc/NN%2012-14.pdf https://www.doj.state.or.us/wp-content/uploads/2017/12/ag_letter_12-13-2017.pdf http://phrack.org/issues/7/3.html https://www.internetvoices.org/blog/2017/04/25/net-neutrality-violations-brief-history https://arstechnica.com/information-technology/2017/05/title-ii-hasnt-hurt-network-investment-according-to-the-isps-themselves/ https://arstechnica.com/tech-policy/2017/12/dead-people-among-millions-impersonated-in-fake-net-neutrality-comments/ https://arstechnica.com/tech-policy/2017/11/comcast-deleted-net-neutrality-pledge-the-same-day-fcc-announced-repeal/ http://www.nytimes.com/2005/06/28/technology/cable-wins-internetaccess-ruling.html?_r=1 

TRITON:https://www.fireeye.com/blog/threat-research/2017/12/attackers-deploy-new-ics-attack-framework-triton.html https://www.wired.com/story/triton-malware-targets-industrial-safety-systems-in-the-middle-east/ https://thehackernews.com/2017/12/triton-ics-scada-malware.html https://arstechnica.com/information-technology/2017/12/game-changing-attack-on-critical-infrastructure-site-causes-outage/   https://dragos.com/blog/trisis/TRISIS-01.pdf 

Mirai:https://thehackernews.com/2017/12/hacker-ddos-mirai-botnet.html https://www.cnet.com/news/mirai-botnet-hacker-behind-2016-web-outage-pleads-guilty/ https://www.justice.gov/opa/pr/justice-department-announces-charges-and-guilty-pleas-three-computer-crime-cases-involving https://krebsonsecurity.com/2017/12/mirai-iot-botnet-co-authors-plead-guilty/ 

Youtube Thumbnail credit:https://cdn.pixabay.com/photo/2017/06/17/11/39/power-plant-2411932_960_720.jpg

Keyloggers were found in Wordpress and HP, mobile apps have all sorts of vulnerabilities, and Uber is hiding behind bug bounties? All that coming up now on ThreatWire. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:

 

Keyloggers:

https://thehackernews.com/2017/12/hp-laptop-keylogger.html

https://twitter.com/zwclose/status/938354516285706240

http://www.zdnet.com/article/keylogger-uncovered-on-hundreds-of-hp-pcs/

https://zwclose.github.io/HP-keylogger/

https://support.hp.com/us-en/document/c05827409

https://www.virustotal.com/#/file/706d3dbe8c7f217e3bb10c359bfa8b69c8ab107e3be69e3c00acaaf0a4c32e5d/detection

http://www.securityweek.com/dormant-keylogging-functionality-found-hp-laptops

https://www.hackread.com/more-than-5000-wordpress-website-plagued-with-keylogger/

https://blog.sucuri.net/2017/12/cloudflare-solutions-keylogger-on-thousands-of-infected-wordpress-sites.html

 

Mobile Apps:

https://thehackernews.com/2017/12/android-malware-signature.html

http://www.securityweek.com/vulnerability-allows-modification-signed-android-apps

https://threatpost.com/android-flaw-poisons-signed-apps-with-malicious-code/129118/

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13156

https://www.guardsquare.com/en/blog/new-android-vulnerability-allows-attackers-modify-apps-without-affecting-their-signatures

https://thehackernews.com/2017/12/mitm-ssl-pinning-hostname.html

http://www.cs.bham.ac.uk/~garciaf/publications/spinner.pdf

https://threatpost.com/banking-apps-found-vulnerable-to-mitm-attacks/129105/

 

Uber:

https://thehackernews.com/2017/12/uber-hacker.html

https://www.cnet.com/news/florida-man-20-reportedly-behind-massive-hack-at-uber/

https://www.cnet.com/news/uber-hack-ftc-settlement-data-privacy-security/

https://arstechnica.com/information-technology/2017/12/uber-used-bug-bounty-program-to-launder-blackmail-payment-to-hacker/

https://www.reuters.com/article/us-uber-cyber-payment-exclusive/exclusive-uber-paid-20-year-old-florida-man-to-keep-data-breach-secret-sources-idUSKBN1E101C?feedType=RSS&feedName=technologyNews&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+reuters%2FtechnologyNews+%28Reuters+Technology+News%29

Youtube Thumbnail credit:

https://static.pexels.com/photos/230324/pexels-photo-230324.jpeg