Threat Wire

Symantec issued HTTPS certificates are on Google’s chopping block, the Senate votes to allow ISPs to sell web search data, Wikileaks says the CIA targets Apple devices, and John Deere tractors are being hacked. All that coming up now on ThreatWire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 Help us with Translations! http://www.youtube.com/timedtext_cs_panel?tab=2&c=UC3s0BtrBJpwNDaflRSoiieQ ------------------------------

Links:https://thehackernews.com/2017/03/google-invalidate-symantec-certs.html https://arstechnica.com/security/2017/03/google-takes-symantec-to-the-woodshed-for-mis-issuing-30000-https-certs/ https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/eUAKwjihhBs%5B1-25%5D 

https://thehackernews.com/2017/03/isp-to-sell-browsing-data.html https://arstechnica.com/information-technology/2017/03/how-isps-can-sell-your-web-history-and-how-to-stop-them/ https://theintercept.com/2017/03/23/the-senate-just-voted-to-sell-you-out-to-advertisers/ https://motherboard.vice.com/en_us/article/senate-republicans-vote-to-allow-isps-to-sell-your-private-data https://www.senate.gov/legislative/LIS/roll_call_lists/roll_call_vote_cfm.cfm?congress=115&session=1&vote=00094 https://www.eff.org/deeplinks/2017/03/five-creepy-things-your-isp-could-do-if-congress-repeals-fccs-privacy-protections 

https://thehackernews.com/2017/03/wikileaks-cia-mac-iphone-hacking.html https://arstechnica.com/security/2017/03/new-wikileaks-dump-the-cia-built-thunderbolt-exploit-implants-to-target-macs/ https://techcrunch.com/2017/03/23/apple-says-recent-wikileaks-cia-docs-detail-old-fixed-iphone-and-mac-exploits/ https://wikileaks.org/vault7/darkmatter/ 

https://motherboard.vice.com/en_us/article/why-american-farmers-are-hacking-their-tractors-with-ukrainian-firmware Via: DcyMatrix

 

Youtube Thumbnail credit:ISPs Can Sell Your Private Data!?

Youtube thumbnail title:https://static.pexels.com/photos/7360/startup-photos.jpg

Twitter Counter gets hacked, WhatsApp and Telegram web apps vulnerable to account takeovers, four have been indicted in one of the Yahoo hacks, and the White House has a new cybersecurity coordinator. All that coming up now on Threat Wire.

 

Links:

https://www.cnet.com/news/twitter-hack-fills-high-profile-accounts-with-nazi-references/

http://blog.twittercounter.com/2017/03/turkish-spam-and-cyber-defences/?utm_content=buffer22f5d&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer

https://twitter.com/thecounter/status/841936613752094721

https://www.wired.com/2017/03/hack-brief-high-profile-twitter-accounts-overrun-swastikas/

https://thehackernews.com/2017/03/twitter-account-hack.html

 

https://www.cnet.com/news/whatsapp-telegram-flaws-left-accounts-vulnerable-to-hackers/

http://blog.checkpoint.com/2017/03/15/check-point-discloses-vulnerability-whatsapp-telegram/

https://thehackernews.com/2017/03/hack-whatsapp-telegram-account.html

https://www.wired.com/2017/03/whatsapp-hack-shows-even-encryption-apps-vulnerable-browser/

 

https://krebsonsecurity.com/2017/03/four-men-charged-with-hacking-500m-yahoo-accounts/

https://www.wired.com/2017/03/yahoo-hack-russia-indictment/

https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions

https://arstechnica.com/tech-policy/2017/03/fbi-hints-that-hack-of-semi-privileged-yahoo-employee-led-to-massive-breach/

https://www.cnet.com/news/yahoo-russian-spies-hack-cyber-security-department-of-justice-charged-breach/

 

https://fcw.com/articles/2017/03/15/joyce-white-house-cyber.aspx

https://www.youtube.com/watch?v=bDJb8WOJYdA

https://www.sans.org/critical-security-controls

Youtube Thumbnail credit:

https://c1.staticflickr.com/5/4141/4806442824_a906d7dda7_b.jpg

Wikileaks publicizes Vault 7, 8000 plus pages of CIA documents. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 ------------------------------

Links:https://wikileaks.org/ciav7p1/ https://twitter.com/wikileaks/status/839105996429668352 https://twitter.com/whispersystems/status/839204754718932992?ref_src=twsrc%5Etfw https://wikileaks.com/ciav7p1/cms/page_11629096.html https://wikileaks.com/ciav7p1/cms/files/iOS%20Exploits%20-%20iOS%20-%20EDG%20Confluence.pdf https://wikileaks.org/ciav7p1/cms/page_12353643.html https://www.cnet.com/news/weeping-angel-hack-samsung-smart-tv-cia-wikileaks/ https://wikileaks.org/ciav7p1/cms/page_7995642.html https://wikileaks.org/ciav7p1/cms/page_20873532.html http://www.reuters.com/article/us-cia-wikileaks-leak-idUSKBN16F2CZ https://www.facebook.com/wikileaks/videos/1262453947123048/ https://www.cnet.com/news/google-android-chrome-cia-exploits-wikileaks-vault-7-julian-assange/ https://www.cnet.com/news/microsoft-systems-seem-safe-from-wikileaks-alleged-cia-hacks/ https://www.cnet.com/news/apple-cia-wikileaks-vault-7-ios-patches-vulnerabilities/ https://www.cia.gov/news-information/press-releases-statements/2017-press-releases-statements/cia-statement-on-claims-by-wikileaks.html https://www.cnet.com/news/cias-alleged-hackers-are-fixated-with-pokemon-in-vault-7-leak/ https://arstechnica.com/information-technology/2017/03/a-look-at-the-cias-internal-dank-meme-division/ 

Youtube Thumbnail credit:

https://www.upr.fr/wp-content/uploads/2011/11/cia-europe-federalistes.jpg

The FCC stays privacy regulations for consumers, 32 million total yahoo accounts were hacked with that cookie problem a few months ago, and CloudPets is really digging themselves into a grave with this toy hack. All that coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 ------------------------------

 

https://apps.fcc.gov/edocs_public/attachmatch/DOC-341937A1.pdf

https://www.hak5.org/episodes/threatwire/are-hacker-counterattacks-legal-threat-wire

https://transition.fcc.gov/Daily_Releases/Daily_Business/2017/db0301/DOC-343702A1.pdf

https://apps.fcc.gov/edocs_public/attachmatch/FCC-16-148A5.pdf

https://arstechnica.com/tech-policy/2017/02/fcc-head-ajit-pai-you-can-thank-me-for-carriers-new-unlimited-data-plans/

https://arstechnica.com/information-technology/2017/03/paid-data-cap-exemptions-can-still-be-big-despite-rise-of-unlimited-data/

https://arstechnica.com/information-technology/2017/03/robocalls-begone-fcc-seeks-to-block-calls-from-spoofed-numbers/

https://www.fcc.gov/news-events/blog/2017/03/02/springing-forward-public-interest-fcc%E2%80%99s-march-agenda

https://arstechnica.com/security/2017/03/marissa-mayer-forgoes-bonus-after-yahoo-botches-hack-investigation/

https://www.cnet.com/news/yahoo-says-forged-cookie-attack-accessed-about-32m-accounts/

https://investor.yahoo.net/secfiling.cfm?filingID=1193125-17-65791&CIK=1011006&soc_src=mail&soc_trk=ma

 

https://www.troyhunt.com/data-from-connected-cloudpets-teddy-bears-leaked-and-ransomed-exposing-kids-voice-messages/

http://www.networkworld.com/article/3175225/security/smart-teddy-bears-involved-in-a-contentious-data-breach.html

Youtube Thumbnail credit:

https://morningconsult.com/wp-content/uploads/2016/02/Ajit-Pai-2-1024x681.jpg

Cloudflare experiences a bug, SHA-1 is officially dead, and a man accused of DDoSing almost a million people has been arrested. All that coming up now on Threat Wire.

 

Links:

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

https://twitter.com/taviso/status/832744397800214528

https://www.cnet.com/how-to/cloudbleed-bug-everything-you-need-to-know/

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139

https://www.troyhunt.com/pragmatic-thoughts-on-cloudbleed/

https://medium.com/@octal/cloudbleed-how-to-deal-with-it-150e907fd165#.b1zg99ry2

http://www.doesitusecloudflare.com/

https://github.com/pirate/sites-using-cloudflare

https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/

 

https://thehackernews.com/2017/02/sha1-collision-attack.html

https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html

https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/

https://arstechnica.com/security/2017/02/watershed-sha1-collision-just-broke-the-webkit-repository-others-may-follow/

https://shattered.io/static/shattered-1.pdf

https://shattered.io/static/shattered-2.pdf

https://shattered.io/

https://shattered.io/static/shattered.pdf

 

https://thehackernews.com/2017/02/mirai-router-hacking.html

https://motherboard.vice.com/en_us/article/police-have-arrested-a-suspect-in-a-massive-internet-of-things-attack

http://www.presseportal.de/blaulicht/pm/7/3568074

http://www.spoofit.org/bestbuy-vdos-reloaded/

http://www.spoofit.org/lonestarcell.txt

 

Youtube thumbnail title:

https://cdn.pixabay.com/photo/2016/12/07/12/58/virus-1889413_960_720.jpg

Malware can record your conversations, Trump is under fire from Congress representatives, and connected car apps are vulnerable to hacks. All that coming up now on Threat Wire.

 

Support Threat Wire! http://www.patreon.com/threatwire

 

Links:

https://arstechnica.com/security/2017/02/hackers-who-took-control-of-pc-microphones-siphon-600-gb-from-70-targets/

https://cyberx-labs.com/en/blog/operation-bugdrop-cyberx-discovers-large-scale-cyber-reconnaissance-operation/

 

https://www.cnet.com/news/congressman-pushes-for-investigation-on-trumps-android-phone/

https://arstechnica.com/tech-policy/2017/02/trumps-apparent-string-of-security-faux-pas-trigger-call-for-house-investigation/

https://www.documentcloud.org/documents/3468050-2017-02-15-Letter-to-Chaffetz-Hearing-on-Trump.html

https://arstechnica.com/security/2017/02/secure-trump-website-defaced-by-hacker-claiming-to-be-from-iraq/

 

https://arstechnica.com/security/2017/02/android-connected-car-apps-could-give-up-the-keys-to-criminals/

https://www.wired.com/2017/02/hacked-android-phones-unlock-millions-cars/

 

Youtube Thumbnail credit:

https://c1.staticflickr.com/3/2768/4257813689_b09e353206_b.jpg

Simply viewing a Steam profile could put you at risk, Wordpress fixes a rather big problem, and WhatsApp introduces two step verification. All that coming up now on Threat Wire.

 

-------------------------------Shop: http://www.hakshop.comSupport: http://www.patreon.com/threatwireSubscribe: http://www.youtube.com/hak5Our Site: http://www.hak5.orgContact Us: http://www.twitter.com/hak5Threat Wire RSS: https://shannonmorse.podbean.com/feed/Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999------------------------------

 

Links:

https://arstechnica.com/security/2017/02/as-valve-eradicates-serious-bug-in-steam-heres-what-you-need-to-know/

https://www.reddit.com/r/Steam/comments/5skfg4/warning_regarding_a_steam_profile_related_exploit/

https://www.reddit.com/r/Steam/comments/5srlwd/the_steam_community_exploit_explained_indepth_by/

https://www.youtube.com/watch?v=lGF_QO3W3GQ

 

https://arstechnica.com/security/2017/02/virally-growing-attacks-on-unpatched-wordpress-sites-affects-2m-pages/

https://thehackernews.com/2017/02/wordpress-hack-seo.html

https://threatpost.com/attackers-capitalizing-on-unpatched-wordpress-sites/123617/

https://blog.sucuri.net/2017/02/wordpress-rest-api-vulnerability-abused-in-defacement-campaigns.html

https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/

 

http://www.phonearena.com/news/WhatsApp-now-using-a-two-step-verification-process_id90874

https://www.whatsapp.com/faq/en/general/26000021

Youtube Thumbnail credit:

https://mygaming.co.za/news/wp-content/uploads/2015/08/Most-popular-and-highest-rated-games-currently-on-Steam.jpg

Facebook is trying to make password recovery more secure, Vizio is watching you, and the ECPA sorely needs an update. All that coming up now on Threat Wire.

 

-------------------------------Shop: http://www.hakshop.com Support: http://www.patreon.com/threatwire Subscribe: http://www.youtube.com/hak5 Our Site: http://www.hak5.org Contact Us: http://www.twitter.com/hak5 Threat Wire RSS: https://shannonmorse.podbean.com/feed/ Threat Wire iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999 ------------------------------

 

Links:

https://arstechnica.com/security/2017/01/forgotten-passwords-are-bane-of-the-internet-facebook-wants-to-fix-that/

https://www.facebook.com/notes/protect-the-graph/improving-account-security-with-delegated-recovery/1833022090271267/

https://github.com/facebookincubator/DelegatedRecovery/

 

http://www.theverge.com/2017/2/6/14522582/vizio-ftc-lawsuit-tv-viewing-habits-tracking-privacy

https://arstechnica.com/tech-policy/2017/02/vizio-smart-tvs-tracked-viewers-around-the-clock-without-consent/

https://www.ftc.gov/news-events/press-releases/2017/02/vizio-pay-22-million-ftc-state-new-jersey-settle-charges-it

https://www.consumer.ftc.gov/blog/vizio-settlement-smart-tvs-should-not-track-your-shows-without-your-ok

 

http://www.multichannel.com/news/congress/house-passes-e-mail-privacy-act/410716

https://www.wired.com/2017/02/trump-power-email-privacy-act-never-urgent/

Youtube Thumbnail credit:

https://upload.wikimedia.org/wikipedia/commons/f/fb/Obama_Health_Care_Speech_to_Joint_Session_of_Congress.jpg

Facebook now supports security keys, DCs cameras were hacked days before the inauguration, and a new FCC boss could mean bad news for net neutrality. Coming up now on Threat Wire.

 

Links:

https://arstechnica.com/security/2017/01/now-theres-a-better-way-to-prevent-facebook-account-takeovers/

https://www.facebook.com/help/401566786855239

https://www.cnet.com/news/facebook-passwords-login-with-key-token-two-factor-authentication/

https://thehackernews.com/2017/01/facebook-u2f-security-key.html

 

https://www.washingtonpost.com/local/public-safety/hackers-hit-dc-police-closed-circuit-camera-network-city-officials-disclose/2017/01/27/d285a4a4-e4f5-11e6-ba11-63c4b4fb5a63_story.html?utm_term=.69fe56a98768#comments

https://arstechnica.com/security/2017/01/dc-police-surveillance-cameras-were-infected-with-ransomware-before-inauguration/

 

https://motherboard.vice.com/read/net-neutrality-advocates-blast-trumps-new-fcc-boss-ajit-pai

https://motherboard.vice.com/read/trumps-reported-pick-to-run-the-fcc-ajit-pai-wants-to-kill-net-neutrality?utm_source=mbtwitter

https://motherboard.vice.com/read/net-neutrality-passes-but-the-fight-isnt-over

https://transition.fcc.gov/Daily_Releases/Daily_Business/2017/db0123/DOC-343145A1.pdf

https://www.fcc.gov/about/leadership/ajit-pai

Meitu is super kawaii, but is it spyware?, Lavabit is Back!, Chelsea Manning’s jail time gets commuted, and the US people still needs pix or it didn’t happen regarding Russia’s hacks of the DNC and RNC. Coming up now on Threat Wire.

-------------------------------Shop: http://www.hakshop.comSupport: http://www.patreon.com/threatwireSubscribe: http://www.youtube.com/hak5Our Site: http://www.hak5.orgContact Us: http://www.twitter.com/hak5------------------------------

RSS: https://shannonmorse.podbean.com/feed/

iTunes: https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Links:http://arstechnica.com/security/2017/01/meitu-anime-beauty-app-privacy-holes/https://motherboard.vice.com/read/anime-selfies-app-meitu-is-crapware-that-collects-private-datahttps://www.documentcloud.org/documents/3386200-Meitu-Statement-Final.htmlhttps://twitter.com/Laughing_Mantis/status/821978447551397888https://twitter.com/FourOctets/status/821987457520369664

http://www.businessinsider.com/lavabit-encrypted-email-service-used-by-edward-snowden-relaunches-privacy-2017-1https://theintercept.com/2017/01/20/encrypted-email-service-once-used-by-edward-snowden-to-relaunch/https://lavabit.com/

https://theintercept.com/2017/01/18/russia-allows-edward-snowden-to-remain-through-2020/https://theintercept.com/2017/01/17/chelsea-manning-will-be-free-in-may/http://www.webmd.com/mental-health/gender-dysphoria#1

https://www.wired.com/2017/01/feds-damning-report-russian-election-hack-wont-convince-skeptics/https://www.wired.com/2017/01/russia-hacked-older-republican-emails-fbi-director-says/

Youtube thumbnail credit:https://pixabay.com/p-1525124/?no_redirect