Sign up to save your podcasts
Or
Share Threat Wire
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Threat Wire
Threat Wire episodes
- Colonial Pipeline Hit With Ransomware; Apple AirTags Hacked - ThreatWire
A Qualcomm SoC could be exploited by attackers, the US’s biggest gas pipeline is hit with ransomware, and Apple AirTags get hacked! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/QjLvIDWnc3w
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/
Support ThreatWire! https://www.patreon.com/threatwire
Links:
Qualcommhttps://research.checkpoint.com/2021/security-probe-of-qualcomm-msm/https://www.zdnet.com/article/qualcomm-chip-vulnerability-found-in-millions-of-google-samsung-and-lg-phones/https://www.counterpointresearch.com/mediatek-biggest-smartphone-chipset-vendor-q3-2020/https://threatpost.com/qualcomm-chip-bug-android-eavesdropping/165934/https://arstechnica.com/gadgets/2021/05/fix-for-critical-qualcomm-chip-flaw-is-making-its-way-to-android-devices/Pipeline:
https://www.colpipe.com/news/press-releases/media-statement-colonial-pipeline-system-disruptionhttps://threatpost.com/pipeline-crippled-ransomware/165963/https://www.bleepingcomputer.com/news/security/largest-us-pipeline-shuts-down-operations-after-ransomware-attack/https://www.wsj.com/articles/cyberattack-forces-closure-of-largest-u-s-refined-fuel-pipeline-11620479737?mod=djemalertNEWShttps://www.cnet.com/news/cyberattack-shuts-down-major-us-gas-pipeline-emergency-move-maintains-fuel-supply/https://www.transportation.gov/briefing-room/us-department-transportations-federal-motor-carrier-administration-issues-temporaryhttps://twitter.com/FBI/status/1391783864016703493https://twitter.com/darktracer_int/status/1391735232991092738https://arstechnica.com/information-technology/2021/05/major-ransomware-attack-cripples-gas-pipeline-on-us-east-coast/https://www.zdnet.com/article/colonial-pipeline-aims-to-restore-operations-by-end-of-the-week-after-cyberattack/AirTags hack
https://www.cnet.com/news/apple-airtags-apparently-hacked-by-security-researcher/https://9to5mac.com/2021/05/09/airtag-hacked-for-the-first-time-by-security-researcher-video/https://twitter.com/ghidraninja/status/1391148503196438529Photo credit:
https://bloximages.chicago2.vip.townnews.com/fltimes.com/content/tncms/assets/v3/editorial/b/2e/b2ed107a-2a1c-5ba1-9c7b-92368b3c8a04/6098a24beb180.image.jpg?resize=1200%2C799-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆10 min - Two Year Old Linux Backdoor Found, Microsoft Finds IoT Vulnerabilities - ThreatWire
Microsoft finds a bunch of IoT vulnerabilities, a Linux backdoor existed for over two years undetected, and Emotet email addresses are now in have I been pwned! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/6d7EN1tbxQY
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/
Support ThreatWire! https://www.patreon.com/threatwire
Links:
BadAlloc:https://msrc-blog.microsoft.com/2021/04/29/badalloc-memory-allocation-vulnerabilities-could-affect-wide-range-of-iot-and-ot-devices-in-industrial-medical-and-enterprise-networks/https://threatpost.com/microsoft-warns-25-critical-iot-industrial-devices/165752/https://us-cert.cisa.gov/ics/advisories/icsa-21-119-04https://www.bleepingcomputer.com/news/security/microsoft-finds-critical-code-execution-bugs-in-iot-ot-devices/Linux Vulnerabilities:
https://www.zdnet.com/article/linux-kernel-vulnerability-exposes-stack-memory/https://blog.talosintelligence.com/2021/04/vuln-spotlight-linux-kernel.htmlhttps://threatpost.com/linux-kernel-bug-wider-cyberattacks/165640/RotaJakiro:
https://blog.netlab.360.com/stealth_rotajakiro_backdoor_en/https://www.zdnet.com/article/rotajakiro-a-linux-backdoor-that-has-flown-under-the-radar-for-years/https://www.bleepingcomputer.com/news/security/new-stealthy-linux-malware-used-to-backdoor-systems-for-years/Emotet:
https://www.zdnet.com/article/emotet-botnet-harvested-4-3-million-email-addresses-now-the-fbi-is-using-have-i-been-pwned-to-alert-the-victims/https://www.bleepingcomputer.com/news/security/emotet-malware-nukes-itself-today-from-all-infected-computers-worldwide/https://www.troyhunt.com/data-from-the-emotet-malware-is-now-searchable-in-have-i-been-pwned-courtesy-of-the-fbi-and-nhtcu/https://www.bleepingcomputer.com/news/security/fbi-shares-4-million-email-addresses-used-by-emotet-with-have-i-been-pwned/Photo credit:
https://cdn.pixabay.com/photo/2017/05/17/19/30/linux-2321631_1280.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆9 min - AirDrop Flaw Reveals PII - Still Unpatched, Signal Claps Back at Cellebrite - ThreatWire
An Airdrop vulnerability remains unpatched, Signal makes an epic clap back at Cellebrite, and Emotet begins a mass deletion of itself! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/6fKv5F3HtXQ
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/
Support ThreatWire! https://www.patreon.com/threatwire
Links:
Apple AirDrop Leakhttps://gizmodo.com/airdrop-security-flaw-exposes-1-5-billion-apple-devices-1846747548https://arstechnica.com/gadgets/2021/04/apples-airdrop-leaks-users-pii-and-theres-not-much-they-can-do-about-it/https://www.cnet.com/news/airdrop-could-be-hacked-to-reveal-personal-information-researchers-suggest/https://www.usenix.org/system/files/sec21fall-heinrich.pdfhttps://github.com/seemoo-lab/privatedropSignal Cellebrite:https://signal.org/blog/cellebrite-vulnerabilities/https://signal.org/blog/cellebrite-and-clickbait/https://www.haaretz.com/israel-news/.premium-israeli-phone-hacking-firm-cellebrite-halts-sales-to-russia-after-haaretz-report-1.9633312https://arstechnica.com/information-technology/2021/04/in-epic-hack-signal-developer-turns-the-tables-on-forensics-firm-cellebrite/https://www.vice.com/en/article/k78q5y/signal-ceo-hacks-cellebrite-iphone-hacking-device-used-by-copshttps://www.zdnet.com/article/signal-rattles-sabre-and-exposes-crackable-cellebrite-underbelly/https://www.cyberscoop.com/cellebrite-signal-moxie-marlinspike-ufed/https://www.bleepingcomputer.com/news/security/signal-ceo-gives-mobile-hacking-firm-a-taste-of-being-hacked/https://www.cellebrite.com/en/cellebrites-new-solution-for-decrypting-the-signal-app/Emotet:
https://www.zdnet.com/article/police-just-delivered-this-killswitch-update-to-finish-off-a-notorious-botnet/https://www.cyberscoop.com/law-enforcement-emotet-botnet-ransomware/https://www.bleepingcomputer.com/news/security/emotet-malware-nukes-itself-today-from-all-infected-computers-worldwide/https://www.bleepingcomputer.com/news/security/emotet-botnet-disrupted-after-global-takedown-operation/Photo credit:https://www.iphonehacks.com/wp-content/uploads/2017/08/iOS-11-AirDrop-1.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆11 min - FLoC Gets Blocked; FBI Hacks Into Exchange Servers - ThreatWire
FLoC is being blocked, the US Government hits Russia with sanctions, and the FBI hacks into vulnerable Exchange servers! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/38Xa0CV5cDI
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
FLoC Is Being Blocked:https://blog.google/products/ads-commerce/2021-01-privacy-sandbox/https://github.com/WICG/flochttps://www.eff.org/deeplinks/2021/03/googles-floc-terrible-ideahttps://www.theverge.com/2021/3/30/22358287/privacy-ads-google-chrome-floc-cookies-cookiepocalypse-finger-printinghttps://www.zdnet.com/article/wordpress-could-treat-google-floc-as-a-security-issue/https://www.bleepingcomputer.com/news/security/vivaldi-brave-duckduckgo-reject-googles-floc-ad-tracking-tech/https://www.zdnet.com/article/brave-browser-disables-googles-floc-tracking-system/https://amifloced.org/https://chrome.google.com/webstore/detail/duckduckgo-privacy-essent/bkdgflcldnnnapblkhphbgpggdiikppgRussian Sanctions by the US Government:
https://www.theverge.com/2021/4/15/22385371/russia-sanctions-solarwinds-biden-white-house-putin-hackhttps://www.nsa.gov/News-Features/Feature-Stories/Article-View/Article/2573391/russian-foreign-intelligence-service-exploiting-five-publicly-known-vulnerabili/#pop5008885https://www.whitehouse.gov/briefing-room/statements-releases/2021/04/15/fact-sheet-imposing-costs-for-harmful-foreign-activities-by-the-russian-government/https://home.treasury.gov/news/press-releases/jy0127https://www.cyberscoop.com/us-government-accuses-russian-companies-recruiting-spies-hacking/https://www.cyberscoop.com/biden-russia-solarwinds-sanctions-white-house/https://twitter.com/NSACyber/status/1382667579458777088https://threatpost.com/nsa-security-bugs-active-nation-state-cyberattack/165446/FBI Hacks Into Vulnerable Servers:
https://www.bleepingcomputer.com/news/security/fbi-nuked-web-shells-from-hacked-exchange-servers-without-telling-owners/https://www.justice.gov/usao-sdtx/pr/justice-department-announces-court-authorized-effort-disrupt-exploitation-microsofthttps://www.justice.gov/opa/press-release/file/1386631/downloadhttps://www.vice.com/en/article/y3dmjg/fbi-removes-web-shells-microsoft-exchangehttps://www.theverge.com/2021/4/13/22382821/fbi-doj-hafnium-remote-access-removal-hackhttps://www.cyberscoop.com/fbi-court-order-microsoft-exchange-server-web-shells/https://threatpost.com/fbi-proxylogon-web-shells/165400/Photo credit:https://vivaldi.com/wp-content/uploads/Google_FloC_-Vivaldi_browser.png-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆12 min - Discord and Slack Used To Spread RATs - ThreatWire
Facebook downplays the data leak, linkedin appears to be targeted in a similar attack, and Discord and Slack are being used to spread remote access trojans! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/mdTnhUJFnno
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
Facebook:https://threatpost.com/facebook-stolen-data-scraped/165285/https://about.fb.com/news/2021/04/facts-on-news-reports-about-facebook-data/https://www.vice.com/en/article/88awzp/facebook-says-its-your-fault-that-hackers-got-half-a-billion-user-phone-numbershttps://twitter.com/intidc/status/1379498790844039177https://www.theverge.com/2021/4/7/22372707/facebook-responds-533-million-data-leak-notify-usershttps://www.bleepingcomputer.com/news/security/have-i-been-pwned-adds-search-for-leaked-facebook-phone-numbers/https://www.bleepingcomputer.com/news/security/facebook-data-leak-now-under-eu-data-regulator-investigation/https://www.vice.com/en/article/qj8dj5/facebook-phone-number-data-breach-telegram-botLinkedIn:
https://www.theverge.com/2021/4/8/22374464/linkedin-data-leak-500-million-accounts-scraped-microsofthttps://news.linkedin.com/2021/april/an-update-from-linkedinhttps://threatpost.com/data-500m-linkedin-users-online/165329/https://www.slashgear.com/hackers-offer-to-sell-information-from-500-million-linkedin-user-accounts-09667691/https://cybernews.com/personal-data-leak-check/Discord and Slack:
https://blog.talosintelligence.com/2021/04/collab-app-abuse.htmlhttps://threatpost.com/discord-stealing-malware-npm-packages/163265/https://threatpost.com/attackers-discord-slack-malware/165295/https://www.cyberscoop.com/hackers-discord-slack-file-sharing-malware/Photo credit:
https://www.healio.com/~/media/slack-news/stock-images/infectious-disease/r/rat_face.jpeg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆10 min - 553 Million Affected In Facebook Leak, Call of Duty: Warzone Cheats are Actually Malware - ThreatWire
553 Million Users are Affected In the Facebook Leak, No Denial In Ubiquiti Breach, and Why You Shouldn’t Download Video Game Cheat Codes! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/LvNjRsIGI24
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
Facebook:https://www.cnet.com/news/facebook-data-for-over-500m-users-reportedly-leaks-online/https://twitter.com/UnderTheBreach/status/1349671294808285184https://www.cyberscoop.com/533-million-facebook-users-leaked-online-fraud-cybercrime/https://www.theverge.com/2021/4/4/22366822/facebook-personal-data-533-million-leaks-online-email-phone-numbershttps://about.fb.com/news/2021/03/more-control-and-context-in-news-feed/https://twitter.com/troyhunt/status/1378463581604220931https://www.theverge.com/22367727/facebook-data-breach-haveibeenpwnedUbiquiti:
https://www.bleepingcomputer.com/news/security/networking-giant-ubiquiti-alerts-customers-of-potential-data-breach/https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/https://www.theverge.com/2021/3/31/22360409/ubiquiti-networking-data-breach-response-whistleblower-cybersecurity-incidenthttps://community.ui.com/questions/Update-to-January-2021-Account-Notification/3813e6f4-b023-4d62-9e10-1035dc51ad2ehttps://www.bleepingcomputer.com/news/security/ubiquiti-cyberattack-may-be-far-worse-than-originally-disclosed/https://arstechnica.com/gadgets/2021/03/ubiquiti-breach-puts-countless-cloud-based-devices-at-risk-of-takeover/COD:
https://research.activision.com/publications/2021/03/cheating-cheaters-malware-delivered-as-call-of-duty-cheatshttps://www.activision.com/cdn/research/cheating_cheaters_final.pdfhttps://www.theverge.com/2021/3/31/22360826/call-of-duty-warzone-malware-cheats-hackhttps://threatpost.com/call-of-duty-cheats-gamers-malware/165209/Photo credit:
https://www.callofduty.com/content/dam/atvi/callofduty/cod-touchui/warzone/social/wz-social-share.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆10 min - Biggest Ransom Yet?! $50 Million Ransomware Reportedly Hits Acer - ThreatWire
Was Acer just hit with a ransomware attack?, F5 warns customers about multiple critical vulnerabilities, and Microsoft is doing everything they can to get people to patch Exchange vulnerabilities! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/zPm8mzd5roI
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
Acer:https://www.zdnet.com/article/acer-reportedly-targeted-with-50-million-ransomware-attack/https://www.bleepingcomputer.com/news/security/computer-giant-acer-hit-by-50-million-ransomware-attack/https://www.theverge.com/2021/3/20/22341642/acer-ransomware-microsoft-exchange-revil-securityF5:
https://arstechnica.com/gadgets/2021/03/to-security-pros-dread-another-critical-server-vulnerability-is-under-exploit/?utm_brand=arstechnica&utm_source=twitter&utm_social-type=owned&utm_medium=socialhttps://support.f5.com/csp/article/K02566623https://twitter.com/buffaloverflow/status/1372861157317435394https://twitter.com/Unit42_Intel/status/1373017186818781190https://threatpost.com/critical-f5-big-ip-flaw-now-under-active-attack/164940/https://us-cert.cisa.gov/ncas/current-activity/2021/03/10/f5-security-advisory-rce-vulnerabilities-big-ip-big-iqhttps://www.cyberscoop.com/f5-networks-big-ip-exploit-vulnerability/Exchange updates:
https://www.zdnet.com/article/microsoft-exchange-server-these-quarterly-updates-include-fixes-for-security-flaws/https://blog.f-secure.com/microsoft-exchange-proxylogon/https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-now-targeted-by-black-kingdom-ransomware/https://mspoweruser.com/microsoft-defender-antivirus-will-now-automatically-mitigate-on-premises-exchange-server-vulnerabilities/https://msrc-blog.microsoft.com/2021/03/15/one-click-microsoft-exchange-on-premises-mitigation-tool-march-2021/Photo credit:https://live.staticflickr.com/7597/16862138042_539eb9d413_b.jpgYoutube thumbnail title:
$50 Mil Ransomware!-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆9 min - Thousands of Enterprise Surveillance Cameras Hacked - ThreatWire
Thousands of surveillance cameras were hacked, Molson Coors breweries were attacked, and we’ve got a bunch of updates to the Windows Exchange vulnerabilities! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/gF4XAw6xbKE
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
Verkada Cameras Hacked:https://arstechnica.com/information-technology/2021/03/hackers-access-security-cameras-inside-cloudflare-jails-and-hospitals/https://www.cnet.com/roadshow/news/tesla-factory-cameras-hacked/https://www.theverge.com/2021/3/9/22322122/verkada-hack-150000-security-cameras-tesla-factory-cloudflare-jails-hospitalshttps://threatpost.com/breach-verkada-security-camera-tesla-cloudflare/164635/https://www.theverge.com/2021/3/11/22324876/surveillance-camera-firm-verkada-breached-hacked-super-admin-access-employeeshttps://www.zdnet.com/article/verkada-disables-accounts-after-reports-its-security-cameras-were-breached/https://www.cyberscoop.com/verkada-tillie-kottmann-raid-switzerland/https://www.theverge.com/2021/3/12/22328344/tillie-kottmann-hacker-raid-switzerland-verkada-camerasMolson Coors Cyberattack:
http://d18rn0p25nwr6d.cloudfront.net/CIK-0000024545/7884b842-2ea4-4831-ab2f-5d30b06d612a.pdfhttps://threatpost.com/molson-coors-cyberattack-investigation/164722/https://www.cyberscoop.com/molson-coors-hack-ransomware-beer-brewing/https://www.bleepingcomputer.com/news/security/molson-coors-brewing-operations-disrupted-by-cyberattack/Microsoft Exchange Vulnerabilities Updates:
https://www.cyberscoop.com/microsoft-exchange-china-exploitation-eset/https://www.bleepingcomputer.com/news/security/more-hacking-groups-join-microsoft-exchange-attack-frenzy/https://www.bleepingcomputer.com/news/security/norway-parliament-data-stolen-in-microsoft-exchange-attack/https://arstechnica.com/gadgets/2021/03/security-unicorn-exchange-server-0-days-were-exploited-by-6-apts/https://www.cyberscoop.com/microsoft-exchange-server-china-dhs-cyber/https://www.bleepingcomputer.com/news/security/ransomware-now-attacks-microsoft-exchange-servers-with-proxylogon-exploits/https://www.bleepingcomputer.com/news/security/microsoft-exchange-exploits-now-used-by-cryptomining-malware/https://arstechnica.com/gadgets/2021/03/critics-fume-after-github-removes-exploit-code-for-exchange-vulnerabilities/https://www.cyberscoop.com/github-exploit-exchange-server-microsoft/https://docs.github.com/en/github/site-policy/github-community-guidelineshttps://www.zdnet.com/article/microsoft-exchange-server-hacks-doubling-every-two-hours/Photo credit:
VerkadaYoutube thumbnail title:
Surveillance Cameras Hacked-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆11 min - Microsoft Exchange Zero Days Actively Exploited - Update ASAP - ThreatWire
Microsoft Exchange has zero days - make sure to update!, 3 new malware strains related to SolarWinds were found, and passenger data for multiple airlines were compromised in a breach! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/NzmvkeEbp6I
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!Microsoft Exchange
https://www.volexity.com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities/https://arstechnica.com/information-technology/2021/03/microsoft-issues-emergency-patches-for-4-exploited-0days-in-exchange/https://blogs.microsoft.com/on-the-issues/2021/03/02/new-nation-state-cyberattacks/https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/https://msrc-blog.microsoft.com/2021/03/02/multiple-security-updates-released-for-exchange-server/https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-2016-and-2013-march-2-2021-kb5000871-9800a6bb-0a21-4ee7-b9da-fa85b3e1d23bhttps://www.bleepingcomputer.com/news/security/microsoft-fixes-actively-exploited-exchange-zero-day-bugs-patch-now/https://github.com/GossiTheDog/scanning/blob/main/http-vuln-exchange.nsehttps://threatpost.com/microsoft-exchange-zero-day-attackers-spy/164438/https://www.bleepingcomputer.com/news/security/state-hackers-rush-to-exploit-unpatched-microsoft-exchange-servers/https://www.zdnet.com/article/update-immediately-microsoft-rushes-out-patches-for-exchange-server-zero-day-attacks/https://www.cyberscoop.com/dhs-microsoft-exchange-flaws-patch-china/https://cyber.dhs.gov/ed/21-02/https://www.cnet.com/news/microsoft-exchange-attackers-strike-more-than-30000-us-organizations/https://twitter.com/C_C_Krebs/status/1368004411545579525https://www.cyberscoop.com/microsoft-exchange-server-czech-republic-norway-hafnium-chinese-hackers/https://www.cyberscoop.com/exchange-server-microsoft-hacks-china-biden/SolarWinds malware strains - 3 new ones
https://www.cyberscoop.com/white-house-executive-order-software-solarwinds-neuberger/https://www.microsoft.com/security/blog/2021/03/04/goldmax-goldfinder-sibot-analyzing-nobelium-malware/https://www.bleepingcomputer.com/news/security/microsoft-reveals-3-new-malware-strains-used-by-solarwinds-hackers/https://www.cyberscoop.com/researchers-uncover-four-more-malware-strains-linked-to-solarwinds-hackers/https://www.fireeye.com/blog/threat-research/2021/03/sunshuttle-second-stage-backdoor-targeting-us-based-entity.htmlSITAhttps://threatpost.com/supply-chain-cyberattack-airlines/164549/https://www.bleepingcomputer.com/news/security/sita-data-breach-affects-millions-of-travelers-from-major-airlines/https://www.sita.aero/pressroom/news-releases/sita-statement-about-security-incident/https://www.zdnet.com/article/singapore-airlines-frequent-flyer-members-hit-in-third-party-data-security-breach/https://www.singaporeair.com/en_UK/sg/media-centre/news-alert/?id=kltm93p0Photo credit:
https://www.windowsmanagementexperts.com/wp-content/uploads/2020/11/Microsoft-building-.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆11 min - LastPass Tracks Android Users - ThreatWire
VMware Has a Severe Vulnerability, Microsoft Open Sources Their Malicious Code Hunter, and Yet Another Reason To Leave LastPass! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/qvZX5AuBxxo
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!https://threatpost.com/vmware-patches-critical-rce-flaw-in-vcenter-server/164240/
https://www.vmware.com/security/advisories/VMSA-2021-0002.htmlhttp://noahblog.360.cn/vcenter-6-5-7-0-rce-lou-dong-fen-xi/https://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POChttps://www.zdnet.com/article/more-than-6700-vmware-servers-exposed-online-and-vulnerable-to-major-new-bug/https://arstechnica.com/information-technology/2021/02/armed-with-exploits-hackers-on-the-prowl-for-a-critical-vmware-vulnerability/https://swarm.ptsecurity.com/unauth-rce-vmware/https://www.cyberscoop.com/solarwinds-fireeye-microsoft-crowdstrike-senate-ssci/
https://www.washingtonpost.com/national-security/biden-russia-sanctions-solarwinds-hacks/2021/02/23/b77039d6-71fa-11eb-85fa-e0ccb3660358_story.htmlhttps://www.cyberscoop.com/solarwinds-sudhakar-ramakrishna-ceo-hack/https://www.bleepingcomputer.com/news/security/nasa-and-the-faa-were-also-breached-by-the-solarwinds-hackers/https://www.bleepingcomputer.com/news/microsoft/microsoft-solarwinds-hackers-downloaded-some-azure-exchange-source-code/https://www.microsoft.com/security/blog/2021/02/25/microsoft-open-sources-codeql-queries-used-to-hunt-for-solorigate-activity/https://www.cyberscoop.com/microsoft-solarwinds-breach-compromise-open-source-codeql/https://www.bleepingcomputer.com/news/security/microsoft-shares-codeql-queries-to-scan-code-for-solarwinds-like-implants/https://www.kuketz-blog.de/lastpass-android-drittanbieter-ueberwachen-jeden-schritt/
https://reports.exodus-privacy.eu.org/en/reports/165465/https://www.theverge.com/2021/2/26/22302709/lastpass-android-app-trackers-security-research-privacyhttps://www.theregister.com/2021/02/25/lastpass_android_trackers_found/https://www.theregister.com/2021/02/16/lastpass_pricing_changes/Photo credit:https://blog.lastpass.com/wp-content/uploads/sites/20/2020/04/android-blog-tips-2.png-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆10 min
About Threat Wire
From the publisher's feed
Threat Wire by Hak5 is a quick weekly dose of news about security, privacy, and what is threatening the freedom of our Internet.