Threat Wire

Threat Wire

By Shannon MorseNewsTechnologyTech News
Download on the App Store

Threat Wire episodes

  • Is Apple’s New CSAM Scanning Tech Privacy Invasive? - ThreatWire

    Stealing audio through LEDs, is Apple’s new CSAM scanning tech privacy invasive? and Synology warns of botnet malware! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/75XYa3dKals

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Read all the links via the RSS feed: https://shannonmorse.podbean.com/ 

    Stealing Audio from LEDs

    https://arstechnica.com/gadgets/2021/08/new-glowworm-attack-recovers-audio-from-devices-power-leds/
    https://www.nassiben.com/glowworm-attack
    https://www.youtube.com/watch?v=z4-OFLTHtiw&t=7s

     

    Apple Scans for Sensitive Imagery

    https://www.apple.com/child-safety/
    https://www.zdnet.com/article/apple-child-abuse-material-scanning-in-ios-15-draws-fire/
    https://www.cnet.com/tech/services-and-software/apples-plan-to-scan-phones-for-child-abuse-worries-privacy-advocates/
    https://www.apple.com/child-safety/pdf/Expanded_Protections_for_Children_Technology_Summary.pdf
    https://www.apple.com/child-safety/pdf/CSAM_Detection_Technical_Summary.pdf
    https://www.apple.com/child-safety/pdf/Expanded_Protections_for_Children_Frequently_Asked_Questions.pdf
    https://www.eff.org/deeplinks/2021/08/apples-plan-think-different-about-encryption-opens-backdoor-your-private-life
    https://www.wired.com/story/apple-csam-detection-icloud-photos-encryption-privacy/
    https://appleprivacyletter.com/

     

    Synology Warns of Botnet

    https://www.howtogeek.com/746871/synology-nas-devices-under-attack-from-stealthworker-botnet/
    https://www.bleepingcomputer.com/news/security/synology-warns-of-malware-infecting-nas-devices-with-ransomware/
    https://www.synology.com/en-global/company/news/article/BruteForce/Synology%C2%AE%20Investigates%20Ongoing%20Brute-Force%20Attacks%20From%20Botnet
    https://kb.synology.com/en-us/DSM/tutorial/How_to_add_extra_security_to_your_Synology_NAS
    https://blog.malwarebytes.com/threat-analysis/2019/02/new-golang-brute-forcer-discovered-amid-rise-e-commerce-attacks/

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    14 min
  • Meteor Malware Disrupts Trains, PwnedPiper Targets Hospital Systems, DarkSide is Back! - ThreatWire

    PwnedPiper Threatens Hospitals, Meteor Malware Causes a Train Disruption, and BlackMatter is the new DarkSide! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/5ofYqjC1s40

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    https://www.armis.com/research/pwnedpiper
    https://info.armis.com/rs/645-PDC-047/images/Armis-PwnedPiper-WP.pdf
    https://www.wired.com/story/pneumatic-tubes-hospitals-hacking/
    https://www.bleepingcomputer.com/news/security/pwnedpiper-critical-bug-set-impacts-major-hospitals-in-north-america/
    https://thehackernews.com/2021/08/pwnedpiper-pts-security-flaws-threaten.html
    https://www.swisslog-healthcare.com/en-us/company/news/2021/07/translogic-firmware-vulnerabilities
    https://www.theguardian.com/world/2021/jul/11/cyber-attack-hits-irans-transport-ministry-and-railways
    https://labs.sentinelone.com/meteorexpress-mysterious-wiper-paralyzes-iranian-trains-with-epic-troll/
    https://www.bleepingcomputer.com/news/security/new-destructive-meteor-wiper-malware-used-in-iranian-railway-attack/
    https://thehackernews.com/2021/07/a-new-wiper-malware-was-behind-recent.html
    https://threatpost.com/novel-meteor-wiper-used-in-attack-that-crippled-iranian-train-system/168262/
    https://www.bleepingcomputer.com/news/security/darkside-ransomware-gang-returns-as-new-blackmatter-operation/
    https://thehackernews.com/2021/05/us-pipeline-ransomware-attackers-go.html
    https://www.bleepingcomputer.com/news/security/blackmatter-ransomware-gang-rises-from-the-ashes-of-darkside-revil/
    https://thehackernews.com/2021/07/new-ransomware-gangs-haron-and.html

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    4 hr 12 min
  • Pegasus Project Reveals Phone Spyware Targets - ThreatWire

    The REvil Decryption Key is Obtained, Windows & Linux are Vulnerable to Privilege Escalation Attacks, and the Pegasus Project Reveals Phone Spyware Targeting! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/mJfCTJRs1io

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    https://krebsonsecurity.com/2021/07/kaseya-left-customer-portal-vulnerable-to-2015-flaw-in-its-own-software/
    https://csirt.divd.nl/2021/07/04/Kaseya-Case-Update-2/
    https://www.bleepingcomputer.com/news/security/kaseya-obtains-universal-decryptor-for-revil-ransomware-victims/
    https://arstechnica.com/gadgets/2021/07/kaseya-gets-master-decryptor-to-help-customers-still-suffering-from-revil-attack/
    https://www.bleepingcomputer.com/news/security/biden-asks-putin-to-crack-down-on-russian-based-ransomware-gangs/
    https://threatpost.com/kaseya-universal-decryptor-revil-ransomware/168070/
    https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-workaround-for-windows-10-serioussam-vulnerability/
    https://twitter.com/jonasLyk
    https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934
    https://thehackernews.com/2021/07/how-to-mitigate-microsoft-windows-10-11.html
    https://www.zdnet.com/article/microsoft-just-published-a-workaround-for-this-important-windows-10-flaw/
    https://thehackernews.com/2021/07/new-windows-and-linux-flaws-give.html
    https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/sequoia-a-local-privilege-escalation-vulnerability-in-linuxs-filesystem-layer-cve-2021-33909
    https://www.washingtonpost.com/investigations/interactive/2021/nso-spyware-pegasus-cellphones/
    https://www.theguardian.com/world/2021/jul/18/revealed-leak-uncovers-global-abuse-of-cyber-surveillance-weapon-nso-group-pegasus
    https://threatpost.com/nso-group-data-pegasus/167897/
    https://www.zdnet.com/article/whatsapp-chief-says-government-officials-us-allies-targeted-by-nso-groups-pegasus-spyware/
    https://www.cnet.com/news/amazon-kicks-nso-group-off-its-cloud-service-after-spying-reports/
    https://threatpost.com/apple-iphone-pegasus-zero-day/168040/

     

    Photo credit:

    https://p1.pxfuel.com/preview/325/241/266/horse-with-wings-pegasus-myth-sunset.jpg 

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    10 min
  • PrintNightmare Hits Windows, REvil Kaseya Ransomware Hits Businesses Worldwide - ThreatWire

    3 Vulnerabilities were Found In Netgear Routers, Ransomware Hits Businesses Worldwide, and PrintNightmare Leads to remote code execution attacks! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/iCGuqW7NL9U

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    https://www.zdnet.com/article/microsoft-reveals-firmware-vulnerabilities-in-netgear-routers-leading-to-full-system-hijacking/

    https://threatpost.com/netgear-authentication-bypass-router-takeover/167469/

    https://www.microsoft.com/security/blog/2021/06/30/microsoft-finds-new-netgear-firmware-vulnerabilities-that-could-lead-to-identity-theft-and-full-system-compromise/

    https://kb.netgear.com/000062646/Security-Advisory-for-Multiple-HTTPd-Authentication-Vulnerabilities-on-DGN2200v1

    https://www.cnet.com/news/ransomware-attack-on-kaseya-a-software-firm-threatens-businesses-worldwide/

    https://www.bleepingcomputer.com/news/security/revil-ransomware-hits-1-000-plus-companies-in-msp-supply-chain-attack/

    https://therecord.media/revil-gang-asks-70-million-to-decrypt-systems-locked-in-kaseya-attack/

    https://news.sophos.com/en-us/2021/07/04/independence-day-revil-uses-supply-chain-exploit-to-attack-hundreds-of-businesses/

    https://us-cert.cisa.gov/ncas/current-activity/2021/07/04/cisa-fbi-guidance-msps-and-their-customers-affected-kaseya-vsa

    https://threatpost.com/poc-exploit-windows-print-spooler-bug/167430/

    https://www.bleepingcomputer.com/news/security/public-windows-printnightmare-0-day-exploit-allows-domain-takeover/

    https://www.zdnet.com/article/microsoft-adds-second-cve-for-printnightmare-remote-code-execution/

    https://threatpost.com/cisa-mitigation-printnightmare-bug/167515/

    https://www.bleepingcomputer.com/news/security/microsoft-shares-mitigations-for-windows-printnightmare-zero-day-bug/

    https://www.bleepingcomputer.com/news/security/actively-exploited-printnightmare-zero-day-gets-unofficial-patch/

    Photo credit:

    https://media.threatpost.com/wp-content/uploads/sites/103/2021/06/03084327/ransomware-e1622724224226.jpeg 

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    10 min
  • Millions of Dell PCs Are At Risk of Exploit, RIP John McAfee, WD MyBooks Are Being Wiped! ThreatWire - ThreatWire

    Dude, Millions of Dell PCs are at risk of RCEs, disconnect your Western Digital My Book, and RIP John McAfee! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/27QQUHbOtVw

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Dell: https://www.bleepingcomputer.com/news/security/dell-supportassist-bugs-put-over-30-million-pcs-at-risk/
    https://eclypsium.com/2021/06/24/biosdisconnect/
    https://arstechnica.com/information-technology/2021/06/a-well-meaning-feature-leaves-millions-of-dell-pcs-vulnerable/
    https://threatpost.com/dell-bios-attacks-rce/167195/
    https://www.dell.com/support/kbdoc/en-us/000188682/dsa-2021-106-dell-client-platform-security-update-for-multiple-vulnerabilities-in-the-supportassist-biosconnect-feature-and-https-boot-feature

    WD My Book

    https://www.bleepingcomputer.com/news/security/wd-my-book-nas-devices-are-being-remotely-wiped-clean-worldwide/
    https://arstechnica.com/gadgets/2021/06/mass-data-wipe-in-my-book-devices-prompts-warning-from-western-digital/
    https://community.wd.com/t/help-all-data-in-mybook-live-gone-and-owner-password-unknown/268111/54
    https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo 
    https://threatpost.com/my-book-live-wiped-rce-attacks/167270/
    https://www.zdnet.com/article/own-a-wd-my-book-disconnect-it-from-the-internet-right-now/

    McAfee

    https://elpais.com/economia/2021-06-23/el-fundador-del-antivirus-mcafee-john-mcafee-se-suicida-en-una-prision-de-barcelona.html 
    https://abcnews.go.com/US/rise-fall-rise-john-mcafee-tech-pioneer-person/story?id=47346015 
    https://www.cnet.com/how-to/john-mcafees-tumultuous-life-in-tech-what-you-need-to-know/ 
    https://www.bleepingcomputer.com/news/technology/antivirus-creator-john-mcafee-reportedly-found-dead-in-prison-cell/
    https://arstechnica.com/gadgets/2021/06/john-mcafee-the-eccentric-av-tycoon-dead-at-75-by-apparent-suicide/
    https://www.vice.com/en/article/3aqp83/john-mcafee-reportedly-dead-from-suspected-suicide-in-spanish-jail

    Photo credit:
    https://www.techadvisor.com/cmsdata/reviews/3796015/dell_xps_15__2020__review_thumb800.jpg 

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    11 min
  • Update Your Pelaton Bikes ASAP; Nuclear Research Institute Had a VPN Vulnerability - ThreatWire

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/5BRNz_etXQA

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Peloton
    https://www.zdnet.com/article/mcafee-discovers-vulnerability-in-peloton-bike/
    https://www.mcafee.com/blogs/other-blogs/mcafee-labs/a-new-program-for-your-peloton-whether-you-like-it-or-not/
    https://threatpost.com/peloton-bike-bug-hackers-control/166960/
    https://www.cnet.com/health/fitness/peloton-fixes-flaw-on-bikes-that-could-have-let-bad-actors-access-tablets/
    https://www.youtube.com/watch?v=RLjXfvb0ADw
    https://support.onepeloton.com/hc/en-us/articles/4402287359380-How-Do-I-Verify-That-I-Have-The-Latest-System-Updates-

    Carnival
    https://threatpost.com/carnival-cruise-cyberattack/167065/
    https://www.bleepingcomputer.com/news/security/carnival-cruise-hit-by-data-breach-warns-of-data-misuse-risk/
    https://www.documentcloud.org/documents/20949884-carnival-march-bc-data-breach-notice

    KAERI
    https://www.bleepingcomputer.com/news/security/south-koreas-nuclear-research-agency-hacked-using-vpn-flaw/
    https://www.sisajournal.com/news/articleView.html?idxno=219152
    https://www.kaeri.re.kr/board/view?menuId=MENU00326&linkId=9181
    https://www.zdnet.com/article/north-korean-hacking-group-allegedly-behind-breach-of-south-korean-nuclear-institute/ 

     

    Photo credit:

    https://live.staticflickr.com/65535/49765921462_13795dab8e_b.jpg

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    8 min
  • 7 Year Old Linux Flaw Newly Discovered - ThreatWire

    EA Source Code was Stolen, a 7 Year Old Linux Flaw was Discovered, and 1.2 Terabytes of Data was Mysteriously Stolen from millions of Windows pcs! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/12oSZ3FVXBA

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    EA
    https://www.vice.com/en/article/wx5xpx/hackers-steal-data-electronic-arts-ea-fifa-source-code
    https://www.bleepingcomputer.com/news/security/hackers-breach-gaming-giant-electronic-arts-steal-game-source-code/
    https://www.cnet.com/news/hackers-hit-ea-steal-source-code-for-fifa-21-and-more/
    https://raidforums.com/Thread-SELLING-FIFA-21-SOURCECODE-TOOLS?pid=3954620&highlight=Frostbite#pid3954620
    https://www.vice.com/en/article/7kvkqb/how-ea-games-was-hacked-slack

    Linux Root Bug

    https://www.bleepingcomputer.com/news/security/linux-system-service-bug-lets-you-get-root-on-most-modern-distros/
    https://gitlab.freedesktop.org/polkit/polkit/
    https://thehackernews.com/2021/06/7-year-old-polkit-flaw-lets.html
    https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/
    https://access.redhat.com/security/cve/CVE-2021-3560
    https://www.youtube.com/watch?v=QZhz64yEd0g

    Database of PWs

    https://nordlocker.com/blog/malware-case-study/
    https://threatpost.com/custom-malware-stolen-data/166753/
    https://nordlocker.com/malware-analysis/
    https://arstechnica.com/gadgets/2021/06/nameless-malware-collects-1-2tb-of-sensitive-data-and-stashes-it-online/
    https://www.troyhunt.com/nameless-malware-discovered-by-nordlocker-is-now-in-have-i-been-pwned/

    Photo credit:
    https://www.zdnet.com/a/hub/i/r/2020/06/05/30d74ab5-e703-4b01-8dd1-e1895f627516/resize/1200x900/72293020dcb25664c0336abb906c8f71/linux-penguin-in-windows-10-pc.png 

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    10 min
  • Amazon Sidewalk is LIVE - Opt Out Now! - ThreatWire

    Amazon Sidewalk is LIVE - Opt Out NOW, The CFAA gets some clarification thanks to the Supreme Court, REvil Beefs Up Attacks on Supply Chains! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/6w2ePAePHQk

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Amazon:

    https://www.zdnet.com/article/do-you-trust-amazon-to-share-your-internet-connection-with-others-how-to-opt-out/

    https://www.zdnet.com/article/yes-i-trust-amazon-to-share-my-internet-connection-with-my-neighbors/

    https://threatpost.com/amazon-sidewalk-to-sweep-you-into-its-mesh/166581/ 

    https://arstechnica.com/gadgets/2021/05/amazon-devices-will-soon-automatically-share-your-internet-with-neighbors/ 

    https://www.bleepingcomputer.com/news/technology/amazon-to-share-your-internet-with-neighbors-on-tuesday-how-to-opt-out/ 

     

    CFAA: 

    https://www.zdnet.com/article/us-supreme-court-limits-scope-of-cfaa-and-rules-bribing-cops-for-data-is-not-hacking/

    https://www.zdnet.com/article/supreme-court-ruling-limits-use-of-hacking-law/

    https://threatpost.com/court-limits-scope-hacking-law/166672/ 

    https://www.bleepingcomputer.com/news/security/us-supreme-court-restricts-broad-scope-of-cfaa-law/ 

     

    JBS Meat:

    https://www.zdnet.com/article/usda-delays-release-of-wholesale-prices-for-beef-and-pork-after-ransomware-attack-on-jbs-confirmed-by-white-house/

    https://threatpost.com/revil-ransomware-ground-down-jbs-sources/166597/

    https://www.cnet.com/news/jbs-meat-plants-reopening-in-us-after-ransomware-attack/ 

    https://arstechnica.com/gadgets/2021/06/attack-on-meat-supplier-came-from-revil-ransomwares-most-cut-throat-gang/

    https://arstechnica.com/gadgets/2021/06/ransomware-striking-the-worlds-biggest-meat-producer-threatens-shortages/

    https://www.bleepingcomputer.com/news/security/us-russian-threat-actors-likely-behind-jbs-ransomware-attack/

    https://www.bleepingcomputer.com/news/security/fbi-revil-cybergang-behind-the-jbs-ransomware-attack/

    https://www.bleepingcomputer.com/news/security/meat-giant-jbs-now-fully-operational-after-ransomware-attack/

    Photo credit:

    https://blog.malwarebytes.com/wp-content/uploads/2021/06/Amazon-van-on-sidewalk-scaled.jpg 

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    12 min
  • Android 12 At Google I/O! All The CyberSecurity and Privacy Updates! - ThreatWire

    Android 12 makes security and privacy front & center, the UK & US Consider New CyberSecurity Legislation, and 23 Android Apps Exposed Millions of users! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/lbNWtnB519Q 

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Android 12
    https://blog.google/products/chrome/automated-password-changes/
    https://support.google.com/chrome/answer/95606?co=GENIE.Platform%3DAndroid#:~:text=Get%20alerts%20to%20change%20your%20passwords
    https://www.bleepingcomputer.com/news/security/chrome-now-automatically-fixes-breached-passwords-on-android/
    https://thehackernews.com/2021/05/a-simple-1-click-compromised-password.html
    https://android-developers.googleblog.com/2021/05/whats-new-in-android-12-beta.html
    https://blog.google/products/android/android-12-beta/

    UK and US CyberSecurity Laws

    https://www.theverge.com/2021/5/18/22436367/google-io-android-private-computer-core-machine-learning-data-privacy
    https://www.gov.uk/government/publications/call-for-views-on-supply-chain-cyber-security/call-for-views-on-cyber-security-in-supply-chains-and-managed-service-providers
    https://www.zdnet.com/article/supply-chain-hacking-attacks-government-eyes-new-rules-to-tighten-security/
    https://www.ncsc.gov.uk/collection/caf
    https://www.bleepingcomputer.com/news/security/us-introduces-bills-to-secure-critical-infrastructure-from-cyber-attacks/
    https://homeland.house.gov/imo/media/doc/BILLS-117hr2980ih-Jackson%20Lee.pdf
    https://homeland.house.gov/imo/media/doc/BILLS-117hr3138ih-Clarke.pdf
    https://homeland.house.gov/imo/media/doc/BILLS-117hr3223ih-Slotkin.pdf
    https://homeland.house.gov/imo/media/doc/Pipeline%20Security%20Act%20Text.pdf
    https://www.tsa.gov/sites/default/files/pipeline_security_guidelines.pdf
    https://homeland.house.gov/imo/media/doc/BILLS-117hr____-Katko.pdf
    https://www.theverge.com/2021/5/20/22444515/amy-klobuchar-data-privacy-protection-facebook-state-laws
    https://www.congress.gov/bill/116th-congress/senate-bill/189/text
    https://arstechnica.com/tech-policy/2021/05/privacy-bill-would-force-big-tech-to-offer-tracking-opt-out-breach-notices/

    23 Android Apps Exposed Millions

    https://blog.checkpoint.com/2021/05/20/misconfiguration-of-third-party-cloud-services-exposed-data-of-over-100-million-users/
    https://thehackernews.com/2021/05/these-23-android-apps-expose-over.html
    https://threatpost.com/100m-android-users-cloud-leaks/166372/
    https://research.checkpoint.com/2021/mobile-app-developers-misconfiguration-of-third-party-services-leave-personal-data-of-over-100-million-exposed/
    https://www.bleepingcomputer.com/news/security/data-of-100-plus-million-android-users-exposed-via-misconfigured-cloud-services/

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    4 hr 1 min
  • Wi-Fi Can Be Hacked (Again); DarkSide Goes Offline After Pipeline Hack - ThreatWire

    The DarkSide ransomware group goes offline, the Apple Find My network could be exploited, and Your WiFi Devices Are Vulnerable to hacks! All that coming up now on ThreatWire.  

     #threatwire #hak5

    Links:

    Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

    Watch this on youtube: https://youtu.be/Kf-em03N2Fg

    Shop ThreatWire Merch Directly! - https://snubsie.com/shop

    Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

    Support ThreatWire!  https://www.patreon.com/threatwire 

    Links:

    Colonial Pipeline and DarkSide:
    https://thehackernews.com/2021/05/us-pipeline-ransomware-attackers-go.html
    https://arstechnica.com/gadgets/2021/05/pipeline-attacker-darkside-suddenly-goes-dark-heres-what-we-know/
    https://www.bleepingcomputer.com/news/security/darkside-ransomware-servers-reportedly-seized-operation-shuts-down/
    https://thehackernews.com/2021/05/colonial-pipeline-paid-nearly-5-million.html
    https://www.cnet.com/news/pipeline-hack-update-colonial-reopens-across-the-map-ransomware-payment/
    https://www.intel471.com/blog/darkside-ransomware-shut-down-revil-avaddon-cybercrime
    https://www.fireeye.com/blog/threat-research/2021/05/shining-a-light-on-darkside-ransomware-operations.html

    Apple Find My Network:

    https://positive.security/blog/send-my
    https://github.com/seemoo-lab/openhaystack
    https://threatpost.com/apple-find-my-exploited-bluetooth/166121/
    https://github.com/positive-security/send-my
    https://thehackernews.com/2021/05/apples-find-my-network-can-be-abused-to.html

    FragAttacks:

    https://www.fragattacks.com/
    https://thehackernews.com/2021/05/nearly-all-wifi-devices-are-vulnerable.html?m=1
    https://threatpost.com/fragattacks-wifi-bugs-millions-devices/166080/
    https://www.zdnet.com/article/time-to-patch-against-fragattacks-but-good-luck-with-home-routers-and-iot-devices/

    Photo credit:

    https://www.fragattacks.com/images/logo.png  

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop →  http://hakshop.myshopify.com/
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    12 min

About Threat Wire

From the publisher's feed

Threat Wire by Hak5 is a quick weekly dose of news about security, privacy, and what is threatening the freedom of our Internet.