Sign up to save your podcasts
Or
Share Threat Wire
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Threat Wire
Threat Wire episodes
- Apple M1 Malware Found, Brave Browser Leaked DNS Queries - ThreatWire
Clubhouse uses Agora, and audio data was leaked by a user, Apple’s new M1 Chip already has malware designed for it, and the Brave Browser Leaked Tor Addresses! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/yu4ujL-7G6Q
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!Agora SDK Bug & Clubhouse
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/dont-call-us-well-call-you-mcafee-atr-finds-vulnerability-in-agora-video-sdk/https://threatpost.com/sdk-bug-spy-calls-dating-healthcare-apps/164068/https://thehackernews.com/2021/02/agora-sdk-bug-left-several-video.htmlhttps://www.cyberscoop.com/flaw-agora-video-calling-software-eavesdroppers/https://docs.agora.io/en/Agora%20Platform/security_practice?platform=Androidhttps://www.theverge.com/2021/2/14/22282772/clubhouse-improve-security-stanford-researchers-china-securityhttps://twitter.com/stanfordio/status/1360423156356325377https://www.theverge.com/2021/2/22/22294938/clubhouse-audio-data-siphon-vulnerability-ios-apphttps://www.bloomberg.com/news/articles/2021-02-22/clubhouse-chats-are-breached-raising-concerns-over-securityApple M1 Malware
https://objective-see.com/blog/blog_0x62.htmlhttps://www.virustotal.com/gui/file/b94e5666d0afc1fa49923c7a7faaa664f51f0581ec0192a08218d68fb079f3cf/detectionhttps://9to5mac.com/2021/02/17/first-apple-silicon-optimized-malware/https://threatpost.com/macos-malware-apple-m1-processor/164075/https://support.apple.com/guide/security/welcome/webhttps://threatpost.com/apple-2021-platform-security-guide/164094/Brave Browser
https://www.bleepingcomputer.com/news/security/brave-privacy-bug-exposes-tor-onion-urls-to-your-dns-provider/https://github.com/brave/brave-core/pull/7769https://www.zdnet.com/article/brave-browser-leaks-onion-addresses-in-dns-traffic/https://twitter.com/bcrypt/status/1362796915063021569 v-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆13 min - Phishing Attacks Using Morse Code, Signal Responds to Iran Ban, Chrome Zero Day - ThreatWire
Morse Code is being used for phishing attacks, Signal responds to their ban in Iran, and Chrome has a zero day vulnerability! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.Watch this on youtube: https://youtu.be/iEgAPexXRPI
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!Morse Code:
https://www.bleepingcomputer.com/news/security/new-phishing-attack-uses-morse-code-to-hide-malicious-urls/https://www.itproportal.com/news/new-phishing-scam-uses-morse-code-to-conceal-malicious-links/Signal Proxy TLS Vuln:
https://signal.org/blog/help-iran-reconnect/https://twitter.com/signalapp/status/1353839763388649473https://www.rferl.org/a/iran-deems-signal-criminal-content-removes-from-local-app-stores/31048089.htmlhttps://www.cyberscoop.com/signal-iran-encryption-ban-app/https://www.bleepingcomputer.com/news/security/removal-notice-for-signal-article/https://twitter.com/moxie/status/1358588649919549440https://twitter.com/search?q=%23IRanASignalProxy&src=typed_queryChrome
https://threatpost.com/google-chrome-zero-day-windows-mac/163688/https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.htmlhttps://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/https://www.zdnet.com/article/google-chrome-syncing-features-can-be-abused-for-c-c-and-data-exfiltration/https://thehackernews.com/2021/02/warning-hugely-popular-great-suspender.htmlhttps://arstechnica.com/information-technology/2021/02/chrome-users-have-faced-3-security-concerns-over-the-past-24-hours/chrome://settings/safetyCheckPhoto credit:
https://i.ytimg.com/vi/RNhinA8ajoI/maxresdefault.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆11 min - Emotet Botnet Sinkholed, Apple Adds App Tracking Opt-In - ThreatWire
A flaw was found in libgcrypt, the notorious Emotet Is sinkholed by police, and Apple makes a slew of security updates! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse.Watch this on youtube: https://youtu.be/F-nYtHFgDSA
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!Libgcrypt:
https://bugs.chromium.org/p/project-zero/issues/detail?id=2145https://thehackernews.com/2021/01/google-discloses-severe-bug-in.htmlhttps://threatpost.com/critical-libgcrypt-crypto-bug-arbitrary-code/163546/https://gnupg.org/download/index.htmlhttps://www.zdnet.com/article/libgcrypt-developers-release-urgent-update-to-tackle-severe-vulnerability/Emotet:https://www.cyberscoop.com/emotet-europol-us-ukraine-takedown-botnet/https://threatpost.com/emotet-takedown-infrastructure-netwalker-offline/163389/https://www.zdnet.com/article/authorities-plan-to-mass-uninstall-emotet-from-infected-hosts-on-april-25-2021/https://www.youtube.com/watch?v=_BLOmClsSpchttps://www.npu.gov.ua/news/kiberzlochini/kiberpolicziya-vikrila-transnaczionalne-ugrupovannya-xakeriv-u-rozpovsyudzhenni-najnebezpechnishogo-v-sviti-komp-yuternogo-virusu-EMOTET/https://www.europol.europa.eu/newsroom/news/world%E2%80%99s-most-dangerous-malware-emotet-disrupted-through-global-actionhttps://www.politie.nl/nieuws/2021/januari/27/11-internationale-politieoperatie-ladybird-botnet-emotet-wereldwijd-ontmanteld.htmlhttps://www.zdnet.com/article/emotet-worlds-most-dangerous-malware-botnet-disrupted-by-international-police-operation/https://www.politie.nl/themas/controleer-of-mijn-inloggegevens-zijn-gestolen.html#englishhttps://thehackernews.com/2021/01/european-authorities-disrupt-emotet.htmlApple:https://thehackernews.com/2021/01/google-uncovers-new-ios-security.htmlhttps://threatpost.com/apple-ios-imessage-blastdoor/163479/https://thehackernews.com/2021/01/apple-warns-of-3-ios-zero-day-security.htmlhttps://threatpost.com/apple-patches-zero-days-ios-emergency-update/163374/https://www.theverge.com/2021/1/28/22253366/apple-app-tracking-transparency-opt-in-requirement-beta-launchhttps://www.theverge.com/2021/2/1/22260274/facebook-prompt-apple-ios-ad-tracking-opt-in-permission-privacy-updatehttps://blog.google/products/ads-commerce/preparing-developers-and-advertisers-for-policy-updates/Photo credit:
Apple-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆11 min - Kindle E-Book Hack, DIA Collects Location Data (Without a Warrant!) - ThreatWire
Kindles could be hacked using e-books, the DIA collects location data without a warrant, and an ADT tech was spying on couples! All that coming up now on ThreatWire.
#threatwire #hak5Weekly security and privacy news, brought to you by Shannon Morse.
Watch this on youtube: https://youtu.be/V-wJkmmGMXU
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!Kindle Ebook Email Hack Allows Attackers to Hijack Accounts:
https://medium.com/realmodelabs/kindledrip-from-your-kindles-email-address-to-using-your-credit-card-bb93dbfb2a08https://thehackernews.com/2021/01/sharing-ebook-with-your-kindle-could.htmlhttps://threatpost.com/amazon-kindle-attack-email/163282/https://www.vice.com/en/article/93wgzy/bugs-allowed-hackers-to-hack-kindle-accounts-with-malicious-ebooksDIA Bought Cell Phone Location Data Without Warrants:
https://int.nyt.com/data/documenttools/dia-memo-for-wyden-on-commercially-available-smartphone-locational-data/d7d41dccdd1d46b0/full.pdfhttps://www.cnet.com/news/intelligence-agency-buys-location-data-on-us-residents-without-warrants/https://www.cyberscoop.com/phone-location-data-privacy-dia-dhs/https://www.theverge.com/2021/1/22/22244848/us-intelligence-memo-admits-buying-smartphone-location-dataADT Tech Spies On Couples and Women:
https://www.justice.gov/usao-ndtx/pr/adt-technician-pleads-guilty-hacking-home-security-footagehttps://www.cyberscoop.com/adt-technician-aviles-spying-women/https://threatpost.com/adt-hacks-home-security-cameras/163271/https://arstechnica.com/information-technology/2021/01/home-alarm-tech-backdoored-security-cameras-to-spy-on-customers-having-sex/Photo credit:
https://cdn.pixabay.com/photo/2016/08/01/09/53/kindle-update-1560728_1280.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆10 min - Ring Adds E2EE, Ubiquiti Suffers a Data Breach - ThreatWire
Ring Adds E2E Encryption, Ubiquiti Suffers A Data Breach, and the EMA Leak Shows Up On the Dark Web! All that coming up now on ThreatWire.
#threatwire #hak5Links:
Weekly security and privacy news, brought to you by Shannon Morse.Host: Shannon Morse → https://www.twitter.com/snubs
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Watch this on youtube: https://youtu.be/W3MB9PdSpBM
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!Why you didn’t see ThreatWire last week
Ring Adds E2EE:
https://techcrunch.com/2021/01/14/ring-neighbors-exposed-locations-addresses/https://threatpost.com/ring-adds-end-to-end-encryption-to-quell-security-uproar/163042/https://assets.ctfassets.net/a3peezndovsu/5jmqFoKyaCXpL2qBG46Zqn/72d138d896e7460c5bdae07992ad491e/Ring_Encryption_Whitepaper.pdfhttps://www.zdnet.com/article/ring-trials-customer-video-end-to-end-encryption/Ubiquiti Data Breach:
https://www.zdnet.com/article/ubiquiti-tells-customers-to-change-passwords-after-security-breach/https://www.theverge.com/2021/1/11/22226061/ubiquiti-data-breach-email-third-party-unathorized-accesshttps://krebsonsecurity.com/2021/01/ubiquiti-change-your-password-enable-2fa/Vaccine Data Leak:
https://threatpost.com/hackers-leak-pfizer-covid-19-vaccine-data/163008/https://www.ema.europa.eu/en/news/cyberattack-ema-update-4https://www.ema.europa.eu/en/news/cyberattack-ema-update-5https://www.yarix.com/news/documenti-riservati-di-ema-sul-vaccino-pfizer-trovati-nel-dark-web/https://arstechnica.com/information-technology/2021/01/hackers-alter-stolen-regulatory-data-to-sow-mistrust-in-covid-19-vaccine/Photo credit:
https://cdn.pocket-lint.com/r/s/1200x630/assets/images/142320-smart-home-review-ring-video-doorbell-2-image1-uar8mu7stn.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆9 min - Capitol Hill Using Facial Recognition to ID Rioters, SolarWinds Update, Cloning Google Titan U2F Keys - ThreatWire
Cloning Google Titan 2fa keys, facial recognition is being used to identify rioters, and a SolarWinds update! All that coming up now on ThreatWire. #threatwire #hak5
Links:
Watch this on youtube: [no link]
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
0:00 Welcome!
Cloning Titan Security Keys
https://thehackernews.com/2021/01/new-attack-could-let-hackers-clone-your.html
https://ninjalab.io/a-side-journey-to-titan/
https://ninjalab.io/wp-content/uploads/2021/01/a_side_journey_to_titan.pdf
https://www.androidpolice.com/2021/01/08/googles-2fa-titan-security-keys-are-vulnerable-to-an-attack-that-can-clone-them/
https://www.zdnet.com/article/should-you-worry-about-hackers-cloning-your-2fa-hardware-security-keys/
Facial Recognition at Capitol Hill
https://www.zdnet.com/article/capitol-attacks-cybersecurity-fallout-stolen-laptops-lost-data-and-possible-espionage/
https://www.vice.com/en/article/qjpwam/rioters-had-physical-access-to-lawmakers-computers-how-bad-is-that
https://www.cyberscoop.com/capitol-hill-unrest-trump-cybersecurity/
https://www.theverge.com/2021/1/9/22222200/social-media-telco-urged-preserve-evidence-capitol-attack-twitter-facebook-google-verizon-apple
https://cdn.vox-cdn.com/uploads/chorus_asset/file/22224462/capitol_attack_twitter.pdf
https://www.theverge.com/2021/1/10/22223349/clearview-ai-facial-recognition-law-enforcement-capitol-rioters
https://www.washingtonpost.com/technology/2021/01/08/trump-mob-tech-arrests/
SolarWinds Update
https://theintercept.com/2020/12/24/solarwinds-hack-power-infrastructure/
https://www.cisa.gov/news/2021/01/05/joint-statement-federal-bureau-investigation-fbi-cybersecurity-and-infrastructure
https://www.cyberscoop.com/solarwinds-fbi-dhs-russia-biden-trump/
https://arstechnica.com/information-technology/2021/01/doj-says-solarwinds-hackers-breached-its-office-365-system-and-read-email/
https://www.theverge.com/2021/1/7/22219275/federal-judiciary-system-further-securing-sealed-documents-solarwinds-hack
https://securelist.com/sunburst-backdoor-kazuar/99981/
https://www.cyberscoop.com/solarwinds-chris-krebs-alex-stamos/
https://www.cyberscoop.com/solarwinds-cisa-brandon-wales-russia/
Photo credit:
https://images.newscientist.com/wp-content/uploads/2017/10/16104524/1m7.3-flare.jpg
13 min - 10 Biggest Hacks of 2020 - ThreatWire
The top 10 biggest hacks of 2020! Coming up now on ThreatWire. #threatwire #hak5
Links:
Watch this on youtube: https://youtu.be/5pxpomAgd5YSupport me on alternative platforms! https://snubsie.com/support
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Join now to support ThreatWire! https://www.patreon.com/threatwire
Links:
MGM resorts - 2019 breach - 142 millionhttps://www.zdnet.com/article/a-hacker-is-selling-details-of-142-million-mgm-hotel-guests-on-the-dark-web/Pakistani mobile users - 44million - May
https://www.zdnet.com/article/details-of-44m-pakistani-mobile-users-leaked-online-part-of-bigger-115m-cache/Wishbone - May - 40 million
https://cybleinc.com/2020/05/20/large-database-of-wishbone-posted-for-sale-online-sensitive-data-for-sale/Wawa - January - 30 million
https://www.zdnet.com/article/wawa-card-breach-may-rank-as-one-of-the-biggest-of-all-times/CouchSurfing - July - 17 million
https://www.zdnet.com/article/couchsurfing-investigates-data-breach-after-17m-user-records-appear-on-hacking-forum/EasyJet - May - 9 million customers
https://www.bbc.com/news/technology-52722626#:~:text=EasyJethttps://www.bbc.com/news/technology-52722626#:~:text=EasyJetMarriott - March - 5.2 million guests
https://news.marriott.com/news/2020/03/31/marriott-international-notifies-guests-of-property-system-incidentBlueLeak - June - over 200 state, local, and fed agencies
https://www.wired.com/story/blueleaks-anonymous-law-enforcement-hack/COVID-19 Attacks
https://www.zdnet.com/article/first-death-reported-following-a-ransomware-attack-on-a-german-hospital/https://www.bbc.com/news/technology-55165552https://www.zdnet.com/article/roundup-the-coronavirus-pandemic-delivers-an-array-of-cyber-security-challenges/https://www.zdnet.com/article/cybersecurity-one-in-three-attacks-are-coronavirus-related/https://www.csoonline.com/article/3584759/the-covid-19-pandemic-has-become-a-catalyst-for-cyberattacks.htmlSolarWinds
https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.htmlPhoto credit:https://cdn.pixabay.com/photo/2019/09/19/05/38/happy-4488255_1280.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆11 min - SolarWinds - ThreatWire
Malware hits four popular browsers, the EMA Breach Affects COVID-19 Vaccine Firms, and SolarWinds. Yes. SolarWinds! All that coming up now on ThreatWire. #threatwire #hak5
Watch this on youtube: https://youtu.be/JkdHmqnxuZ8
Send me a Christma s card (if ya want!)! https://snubsie.com/contact
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Support ThreatWire! https://www.patreon.com/threatwire
Links:
Adrozek:https://www.microsoft.com/security/blog/2020/12/10/widespread-malware-campaign-seeks-to-silently-inject-ads-into-search-results-affects-multiple-browsers/https://arstechnica.com/information-technology/2020/12/ongoing-malware-attacks-are-hitting-users-of-4-major-browsers/https://threatpost.com/adrozek-malware-fake-ads-30k-devices/162217/EMA:
https://www.ema.europa.eu/en/news/cyberattack-european-medicines-agencyhttps://arstechnica.com/information-technology/2020/12/hackers-unlawfully-access-data-related-to-promising-covid-19-vaccines/https://investors.biontech.de/news-releases/news-release-details/statement-regarding-cyber-attack-european-medicines-agencyhttps://threatpost.com/pfizer-covid-19-vaccine-cyberattack/162170/SolarWinds
https://www.cyberscoop.com/fireeye-says-hackers-stole-its-red-team-tools-suggests-state-sponsored-group-is-to-blame/https://www.solarwinds.com/solutions/orionhttps://www.zdnet.com/article/sec-filings-solarwinds-says-18000-customers-are-impacted-by-recent-hack/https://www.cyberscoop.com/russian-hacking-treasury-commerce-fireeye/https://www.reuters.com/article/global-cyber-idUSKBN28O26Xhttps://www.reuters.com/article/us-usa-cyber-amazon-com-exclsuive-idUSKBN28N0PGhttps://www.theverge.com/2020/12/9/22165027/fireeye-cybersecurity-attack-red-team-toolshttps://www.fireeye.com/blog/products-and-services/2020/12/global-intrusion-campaign-leverages-software-supply-chain-compromise.htmlhttps://github.com/fireeye/sunburst_countermeasureshttps://msrc-blog.microsoft.com/2020/12/13/customer-guidance-on-recent-nation-state-cyber-attacks/https://threatpost.com/dhs-sophisticated-cyberattack-foreign-adversaries/162242/https://arstechnica.com/information-technology/2020/12/russian-hackers-hit-us-government-using-widespread-supply-chain-attack/https://www.zdnet.com/article/microsoft-fireeye-confirm-solarwinds-supply-chain-attack/https://www.solarwinds.com/securityadvisoryhttps://twitter.com/k8em0/status/1338619172079603712Photo credit:https://pixy.org/src2/594/5942346.jpghttps://upload.wikimedia.org/wikipedia/commons/e/e3/Magnificent_CME_Erupts_on_the_Sun_-_August_31.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆12 min - Covid-19 Vaccine Distributors Under Attack; iPhones Could Be Hacked Over Wi-Fi - ThreatWire
This epic iphone hack is like WatchDogs but in RL, TrickBot could now brick devices, and attackers are targeting covid-19 vaccine distribution firms! All that coming up now on ThreatWire. #threatwire #hak5
Links
Watch this on youtube: https://youtu.be/MwGyz8UFCrsSupport me on alternative platforms! https://snubsie.com/support
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode (Use the coupon code TURKEY for 15% off til Dec 10!)
Join now for a limited edition signed Christmas Card and to support ThreatWire! https://www.patreon.com/threatwire
Links:
Iphone hackhttps://www.theverge.com/2020/12/1/21877603/apple-iphone-remote-hack-awdl-google-project-zerohttps://www.vice.com/en/article/4ad3jm/watch-google-hacker-ha-26-iphones-with-zero-day-exploithttps://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.htmlhttps://www.cyberscoop.com/iphone-takeover-apple-hack-ios-ian-beer-google/https://www.youtube.com/watch?v=_sTw7GGoJ6ghttps://arstechnica.com/gadgets/2020/12/iphone-zero-click-wi-fi-exploit-is-one-of-the-most-breathtaking-hacks-ever/https://www.cnet.com/news/google-researcher-demonstrates-iphone-exploit-with-wi-fi-takeover/https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3843Trickbot:
https://www.cyberscoop.com/trickbot-status-microsoft-cyber-command-takedown/https://arstechnica.com/information-technology/2020/12/dangerous-uefi-malware-is-rare-a-botnet-called-trickbot-may-change-that/https://threatpost.com/trickbot-returns-bootkit-functions/161873/https://www.cyberscoop.com/trickbot-firmware-vulnerability-detection-ability-eclypsium-bricking-devices/Covid19:
https://securityintelligence.com/posts/ibm-uncovers-global-phishing-covid-19-vaccine-cold-chain/https://www.cyberscoop.com/coronavirus-vaccine-hacking-ibm/https://arstechnica.com/information-technology/2020/12/covid-vaccine-supply-chain-targeted-by-hackers-say-security-experts/https://www.cnet.com/news/hackers-are-going-after-covid-19-vaccines-rollout/https://threatpost.com/attacks-covid-cold-chain-orgs/161838/Photo credit:
https://www.gannett-cdn.com/-mm-/70b4cd59be29df8697308165711948ed641c0add/c=0-111-2119-1303/local/-/media/2020/09/10/USATODAY/usatsports/coronavirus-vaccine-bottles.jpg-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆10 min - Teslas Can Be Hacked (Again!), RCS Messages + E2EE Coming 2021 Via Google - ThreatWire
A severe MobileIron flaw was discovered, Google’s Messages app will soon be end to end encrypted, and Teslas can be hacked (again!)! All that coming up now on ThreatWire. #threatwire #hak5
Links:
Watch this on youtube: https://youtu.be/LxqNnKsQUeISupport me on alternative platforms! https://snubsie.com/support
Shop ThreatWire Merch Directly! - https://snubsie.com/shop
Shop ThreatWire Merch on Teespring! - https://teespring.com/stores/morsecode
Join now for access to extra perks and to support ThreatWire! https://www.patreon.com/threatwire
Links:
https://www.ncsc.gov.uk/news/alert-multiple-actors-attempt-exploit-mobileiron-vulnerabilityhttps://www.mobileiron.com/enhttps://threatpost.com/critical-mobileiron-rce-flaw-attack/161600/https://www.zdnet.com/article/this-software-flaw-is-being-used-to-break-into-networks-now-so-update-fast/https://us-cert.cisa.gov/ncas/alerts/aa20-283ahttps://blog.google/products/messages/helping-you-connect-around-world-messages/
https://www.cyberscoop.com/android-encryption-phones-google-rcs-messaging/https://www.theverge.com/2020/11/19/21574451/android-rcs-encryption-message-end-to-end-betahttps://www.gstatic.com/messages/papers/messages_e2ee.pdfhttps://www.zdnet.com/article/google-is-adding-end-to-end-encryption-to-android-messages-app/https://www.imec-int.com/en/press/belgian-security-researchers-ku-leuven-and-imec-demonstrate-serious-flaws-tesla-model-x
https://www.cnet.com/roadshow/news/tesla-model-x-bluetooth-hack-theft/https://threatpost.com/tesla-hacked-stolen-key-fob/161530/https://www.zdnet.com/article/tesla-model-x-hacked-and-stolen-in-minutes-using-new-key-fob-hack/Photo credit:
https://tesla-cdn.thron.com/delivery/public/image/tesla/efbb6471-e1b8-4533-b41a-6df9d50c0a42/bvlatuR/std/0x0/performance-hero@2-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.orgShop → http://hakshop.myshopify.com/Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1Support → https://www.patreon.com/threatwireContact Us → http://www.twitter.com/hak5Threat Wire RSS → https://shannonmorse.podbean.com/feed/Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darrenHost: Mubix → http://www.twitter.com/mubix-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆9 min
About Threat Wire
From the publisher's feed
Threat Wire by Hak5 is a quick weekly dose of news about security, privacy, and what is threatening the freedom of our Internet.