Threat Wire

Threat Wire

By Shannon MorseNewsTechnologyTech News
Download on the App Store

Threat Wire episodes

  • How Hackers Are Helping Fight Coronavirus - ThreatWire

    A new android trojan bypasses 2fa codes, Hackers have started and joined initiatives to fight COVID-19, and you can too! And zoom has privacy issues! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    https://www.youtube.com/shannonmorse -- subscribe to my tech channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    Trickbot:
    https://securityintelligence.com/posts/trickbot-pushing-a-2fa-bypass-app-to-bank-customers-in-germany/
    https://thehackernews.com/2020/03/trickbot-two-factor-mobile-malware.html
    https://www.zdnet.com/article/trickbot-now-pushes-android-app-for-bypassing-2fa-on-banking-accounts/

    Hackers Volunteer:

    https://www.reuters.com/article/us-coronavirus-cyber/cybersecurity-experts-come-together-to-fight-coronavirus-related-hacking-idUSKBN21D049
    https://www.darkreading.com/attacks-breaches/cyber-version-of-justice-league-launches-to-fight-covid-19-related-hacks-/d/d-id/1337424
    https://cti-league.com/
    https://www.zdnet.com/article/world-health-organization-facebook-microsoft-team-up-in-covid-19-hackathon/
    https://www.facebook.com/zuck/posts/10111707674548151
    https://covid-global-hackathon.devpost.com/?fbclid=IwAR1jXyb2o0EseAbtufMqLGGhT3CvhFuyRD1go4ceOLXwHS2vPALu45uKkkc
    https://www.cnet.com/news/your-laptop-can-help-fight-covid-19-with-foldingathome-project/
    https://foldingathome.org/
    https://masksfordocs.com/
    https://www.vice.com/en_us/article/n7jm8d/motorcyclists-like-me-are-delivering-protective-gear-to-er-doctors
    https://www.fastcompany.com/90482710/makers-are-rushing-to-fight-coronavirus-with-3d-printed-face-shields-and-test-swabs
    https://www.forbes.com/sites/tjmccue/2020/03/24/calling-all-makers-with-3d-printers-join-critical-mission-to-make-face-masks-and-shields-for-2020-healthcare-workers/#f81386575006
    https://twitter.com/BadassBowden/status/1240641788249063424

    Zoombombing:

    https://threatpost.com/as-zoom-booms-incidents-of-zoombombing-become-a-growing-nuisance/154187/
    https://www.cnet.com/news/using-zoom-while-working-from-home-here-are-the-privacy-risks-to-watch-out-for/
    https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account
    https://blog.zoom.us/wordpress/2020/03/27/zoom-use-of-facebook-sdk-in-ios-client/

     

    Photo credit:

    https://upload.wikimedia.org/wikipedia/commons/4/4d/3D-printed_visor-Heliox_Lab-02.jpg

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    12 min
  • Tracking Covid-19 With Government Mandated Location Surveillance - ThreatWire

    Attacks using covid-19 themes are continuing to be dropped, government location surveillance is becoming the norm, and Windows alerts of a zero day! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    https://www.wired.com/story/coronavirus-cyberattacks-ransomware-phishing/
    https://www.zdnet.com/article/who-chief-emails-claiming-to-offer-coronavirus-drug-advice-plant-keyloggers-on-your-pc/
    https://threatpost.com/revamped-hawkeye-keylogger-coronavirus-fears/154013/
    https://exchange.xforce.ibmcloud.com/collection/2f9a23ad901ad94a8668731932ab5826
    https://www.zdnet.com/article/thousands-of-covid-19-scam-and-malware-sites-are-being-created-on-a-daily-basis/
    https://thehackernews.com/2020/03/covid-19-coronavirus-hacker-malware.html
    https://threatpost.com/fake-coronavirus-vaccine-website-busted-in-doj-takedown/154031/
    https://www.cyberscoop.com/coronavirus-scams-doj-memo-william-barr/
    http://www.documentcloud.org/documents/6811684-Bill-Barr-DOJ-Priorities-Coronavirus-Scams.html
    https://www.bleepingcomputer.com/news/security/ransomware-gangs-to-stop-attacking-health-orgs-during-pandemic/
    https://www.cyberscoop.com/covid-19-cybersecurity-volunteer-groups-h-isac/

    https://www.theverge.com/2020/3/23/21190700/eu-mobile-carriers-customer-data-coronavirus-south-korea-taiwan-privacy

    https://www.reuters.com/article/us-health-coronavirus-europe-telecoms/european-mobile-operators-share-data-for-coronavirus-fight-idUSKBN2152C2
    https://www.zdnet.com/article/us-israel-south-korea-and-china-look-at-intrusive-surveillance-solutions-for-tracking-covid-19/
    https://www.businessinsider.com/countries-tracking-citizens-phones-coronavirus-2020-3#poland-is-making-people-send-selfies-to-prove-theyre-quarantining-correctly-7
    https://arstechnica.com/tech-policy/2020/03/how-china-built-facial-recognition-for-people-wearing-masks/
    https://www.businessinsider.com/poland-app-coronavirus-patients-mandaotory-selfie-2020-3
    https://threatpost.com/covid-19-spurs-facial-recognition-tracking-privacy-fears/153953/
    https://www.reuters.com/article/us-health-coronavirus-taiwan-surveillanc/taiwans-new-electronic-fence-for-quarantines-leads-wave-of-virus-monitoring-idUSKBN2170SK
    https://www.nytimes.com/2020/03/23/technology/coronavirus-surveillance-tracking-privacy.html

    https://www.zdnet.com/article/microsoft-warns-of-windows-zero-day-exploited-in-the-wild/

    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/adv200006
    https://threatpost.com/microsoft-warns-of-critical-windows-zero-day-flaws/154040/
    https://thehackernews.com/2020/03/windows-adobe-font-vulnerability.html

     

    Photo credit:

    https://images.pexels.com/photos/3962218/pexels-photo-3962218.jpeg?auto=compress&cs=tinysrgb&dpr=2&h=650&w=940

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    12 min
  • Coronavirus Themed Phishing, Malware, and Ransomware on the Rise - ThreatWire

    Government agencies are experiencing COVID19 related attacks, phishing and malware scams ramp up as coronavirus becomes a pandemic, and Microsoft fixes an SMB flaw! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    https://www.bloomberg.com/news/articles/2020-03-16/u-s-health-agency-suffers-cyber-attack-during-covid-19-response
    https://www.cnet.com/news/hackers-target-us-health-agency-during-coronavirus-crisis/
    https://www.zdnet.com/article/hhs-targeted-by-hackers-as-it-responds-to-novel-coronavirus-covid-19-pandemic/
    https://www.cyberscoop.com/hhs-cyberattack-coronavirus-ddos/

    https://thehackernews.com/2020/03/coronavirus-maps-covid-19.html

    https://krebsonsecurity.com/2020/03/live-coronavirus-map-used-to-spread-malware/
    https://www.wired.com/story/coronavirus-phishing-ad-fraud-clearview-security-news/
    https://www.cnet.com/how-to/online-coronavirus-scams-are-here-watch-out-for-these-red-flags/
    https://threatpost.com/coronavirus-apt-attack-malware/153697/
    https://www.businessinsider.com/coronavirus-fake-app-ransomware-malware-bitcoin-android-demands-ransom-domaintools-2020-3
    https://www.zdnet.com/article/coronavirus-themed-phishing-attacks-and-hacking-campaigns-are-on-the-rise/
    https://www.zdnet.com/article/state-sponsored-hackers-are-now-using-coronavirus-lures-to-infect-their-targets/

    https://thehackernews.com/2020/03/patch-wormable-smb-vulnerability.html

    https://thehackernews.com/2020/03/smbv3-wormable-vulnerability.html
    https://arstechnica.com/information-technology/2020/03/microsoft-delivers-emergency-patch-to-fix-wormable-windows-10-flaw/
    https://arstechnica.com/information-technology/2020/03/windows-has-a-new-wormable-vulnerability-and-theres-no-patch-in-sight/
    https://www.zdnet.com/article/microsoft-patches-smbv3-wormable-bug-that-leaked-earlier-this-week/

    Photo credit:
    https://www.state.gov/wp-content/uploads/2020/03/2871-2560x852.png

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    10 min
  • Clearview AI Privacy Fails - ThreatWire

    Billions of Wi-Fi Devices Flawed, Secretly Controlling Voice Assistants, and Clearview AI is basically a privacy dumpster fire! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    USE CODE “MOVING2020” for 25% OFF ANYTHING IN THE STORE! GOOD TIL 3/4/2020

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    https://www.welivesecurity.com/2020/02/26/krook-serious-vulnerability-affected-encryption-billion-wifi-devices/
    https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-15126
    https://thehackernews.com/2020/02/kr00k-wifi-encryption-flaw.html
    https://the-parallax.com/2020/02/27/kr00k-wi-fi-billion-devices-iphone-echo-kindle/
    https://www.cyberscoop.com/wifi-vulnerability-eset/
    https://threatpost.com/billions-of-devices-wifi-encryption-hack/153267/
    https://arstechnica.com/information-technology/2020/02/flaw-in-billions-of-wi-fi-devices-left-communications-open-to-eavesdroppng/

    https://thehackernews.com/2020/03/voice-assistants-ultrasonic-waves.html

    https://www.vice.com/en_us/article/bvg5dv/ultrasonic-waves-can-make-siri-share-your-secrets
    https://surfingattack.github.io/papers/NDSS-surfingattack.pdf
    https://source.wustl.edu/2020/02/surfing-attack-hacks-siri-google-with-ultrasonic-waves/

    https://clearview.ai/

    https://www.nytimes.com/2020/01/18/technology/clearview-privacy-facial-recognition.html
    https://www.cnet.com/news/clearview-ai-facial-recognition-customers-reportedly-include-ice-justice-department-fbi-macys/
    https://www.cnet.com/news/apple-blocks-clearview-ai-facial-recognition-on-iphones-after-developer-violation/
    https://www.zdnet.com/article/data-breach-exposes-clearview-ai-client-list/
    https://www.vice.com/en_us/article/bvgyqa/clearview-ai-customer-list-data-breach-hacked
    https://gizmodo.com/we-found-clearview-ais-shady-face-recognition-app-1841961772?rev=1582861547126
    https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too

     

    Photo credit:

    https://upload.wikimedia.org/wikipedia/commons/2/2c/Face_Recognition_3252983.png

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    13 min
  • Jailbreaking Teslas - ThreatWire
    Ring Increases App Security, Rental cars and Teslas are being hacked, and MGM Resorts was hacked! All that coming up now on ThreatWire. #threatwire #hak5
     
    Links:
    Support me on alternative platforms! https://snubsie.com/support
     
    Shop ThreatWire Merch! - https://snubsie.com/shop
     
    USE CODE “MOVING2020” for 25% OFF ANYTHING IN THE STORE! GOOD TIL 3/4/2020
     
    https://www.youtube.com/shannonmorse --  subscribe to my new channel!
     
    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire 
     
    Links:
    Ring Makes 2FA Mandatory:
    https://blog.ring.com/2020/02/18/extra-layers-of-security-and-control/
    https://thehackernews.com/2020/02/ring-cameras-cybersecurity.html
    https://www.zdnet.com/article/ring-to-enable-2fa-for-all-user-accounts-after-recent-hacks/
    https://www.blog.google/products/google-nest/security-nest-accounts-safer-internet-day/
    https://www.theverge.com/2020/2/11/21133264/google-nest-2fa-force-two-factor-authentication
    https://www.cnet.com/news/amazons-ring-to-tighten-privacy-after-accusations-it-shares-data-with-facebook/
     
    Car Hacking:
    https://owner.ford.com/fordpass.html
    https://arstechnica.com/information-technology/2020/02/rental-car-agency-continues-to-give-remote-control-long-after-cars-are-returned/
    https://krebsonsecurity.com/2020/02/when-your-used-car-is-a-little-too-mobile/
    https://www.vice.com/en_us/article/y3mb3w/people-are-jailbreaking-used-teslas-to-get-the-features-they-expect
    https://jalopnik.com/tesla-remotely-removes-autopilot-features-from-customer-1841472617
    https://www.scribd.com/document/425591536/TN-18-00-001-Unsupported-Vehicle-Policy
     
    MGM Grand Breach
    https://threatpost.com/mgm-grand-breach-leaked-details-of-10-6-million-guests-last-summer/153054/
    https://www.zdnet.com/article/exclusive-details-of-10-6-million-of-mgm-hotel-guests-posted-on-a-hacking-forum/
     
     
     
    Photo credit:
    https://st.motortrend.com/uploads/sites/5/2017/07/Tesla-Model-3-lead-.jpg
     
     
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop →  https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
     
    Host: Shannon Morse → https://www.twitter.com/snubs
    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    12 min
  • Hacking Philips Hue Lights To Hack Whole Networks - ThreatWire

    Four hackers have been charged for the equifax data breach, Philips Hues could be used to hack your network, and changing screen brightness to steal data! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    USE CODE MOVING2020 FOR 25% OFF ALL ORDERS! VALID 2-11-20 THROUGH 3-4-2020

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    https://www.justice.gov/opa/press-release/file/1246891/download
    https://www.theverge.com/2020/2/10/21131362/doj-justice-barr-china-equifax-breach
    https://www.cyberscoop.com/equifax-hack-china-pla-department-of-justice/
    https://www.vice.com/en_us/article/dygdpy/doj-charges-china-with-hacking-equifax-thats-no-reason-to-forgive-equifax

    https://blog.checkpoint.com/2020/02/05/the-dark-side-of-smart-lighting-check-point-research-shows-how-business-and-home-networks-can-be-hacked-from-a-lightbulb/

    https://www.theverge.com/2020/2/5/21123491/philips-hue-bulb-hack-hub-firmware-patch-update
    https://thehackernews.com/2020/02/philips-smart-light-bulb-hacking.html
    https://www.theverge.com/2020/2/5/21124023/philips-hue-firmware-how-to-check-updates-network-vulnerability

    https://thehackernews.com/2020/02/hacking-air-gapped-computers.html

    https://cyber.bgu.ac.il/advanced-cyber/airgap
    https://arxiv.org/pdf/2002.01078.pdf

    Photo credit:
    https://static.bhphoto.com/images/images2500x2500/1545213052_1446192.jpg

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    8 min
  • Ring Android App Shares Data With Facebook - ThreatWire

    The Wawa Breach Affects 30 Million, Avast Caught Selling User Data, Ring App Shares Data With Facebook ! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    https://thehackernews.com/2019/12/wawa-store-hacking.html
    https://www.wawa.com/alerts/data-security
    https://thehackernews.com/2020/01/wawa-credit-card-breach.html
    https://s3.amazonaws.com/wawa-kentico-prod/wawa/media/misc/jan-28-2020-wawa-press-release-update-to-dec-19-data-security-announcement.pdf
    https://threatpost.com/wawa-breach-30-million-customers/152328/
    https://www.zdnet.com/article/wawa-card-breach-may-rank-as-one-of-the-biggest-of-all-times/
    https://www.cisomag.com/wawa-faces-class-action-lawsuit-after-reporting-data-breach/

    https://www.pcmag.com/news/mozilla-removes-avast-and-avg-firefox-extensions

    https://www.pcmag.com/news/the-cost-of-avasts-free-antivirus-companies-can-spy-on-your-clicks
    https://www.vice.com/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation
    https://www.theverge.com/2020/1/27/21083809/avast-avg-jumpshot-antivirus-data-tracking-all-clicks
    https://twitter.com/RonWyden/status/1204494997560680450
    https://blog.avast.com/a-message-from-ceo-ondrej-vlcek
    https://www.pcmag.com/news/avast-to-end-browser-data-harvesting-terminates-jumpshot

    https://www.eff.org/deeplinks/2020/01/ring-doorbell-app-packed-third-party-trackers

    https://threatpost.com/ring-sharing-user-data-facebook-data-miners/152300/
    https://www.zdnet.com/article/ring-app-for-android-full-to-the-brim-with-third-party-trackers-report/

    Photo credit:

    https://cdn.pocket-lint.com/r/s/1200x630/assets/images/142320-smart-home-review-ring-video-doorbell-2-image1-uar8mu7stn.jpg

     

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    11 min
  • Honeypot ICS Network Tricks CyberCriminals - ThreatWire

    Microsoft has a security blunder, a honeypot network tricks cybercriminals, and Jeff Bezos’ phone was hacked! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    Microsoft’s Security Blunder via Joel:

    https://msrc-blog.microsoft.com/2020/01/22/access-misconfiguration-for-customer-support-database/
    https://www.engadget.com/2020/01/22/microsoft-database-exposure/
    https://www.zdnet.com/article/microsoft-discloses-security-breach-of-customer-support-database/
    https://www.cnet.com/news/microsoft-fixes-error-that-exposed-customer-database/
    https://thehackernews.com/2020/01/microsoft-customer-support.html

    Mock ICS:

    https://documents.trendmicro.com/assets/white_papers/wp-caught-in-the-act-running-a-realistic-factory-honeypot-to-capture-real-threats.pdf
    https://www.cyberscoop.com/trend-micro-honeypot-ransomware-factory-s4/
    https://www.zdnet.com/article/ransomware-snooping-and-attempted-shutdowns-the-state-of-this-honeypot-shows-what-hackers-do-to-systems-left-unprotected-online/
    https://threatpost.com/fake-smart-factory-honeypot-highlights-new-attack-threats/152170/

    Bezos:

    https://www.theguardian.com/technology/2020/jan/21/amazon-boss-jeff-bezoss-phone-hacked-by-saudi-crown-prince
    https://arstechnica.com/information-technology/2020/01/report-bezos-phone-uploaded-gbs-of-personal-data-after-getting-saudi-princes-whatsapp-message/
    https://www.theverge.com/2020/1/21/21075968/amazon-jeff-bezos-hacked-saudi-arabia-crown-prince-whatsapp-message
    https://www.cnet.com/news/in-bezos-phone-hack-un-wants-answers-on-saudi-princes-alleged-role/
    https://www.wyden.senate.gov/imo/media/doc/012220%20Wyden%20Jeff%20Bezos%20Saudi%20Hacking%20Letter.pdf
    https://www.vice.com/en_us/article/v74v34/saudi-arabia-hacked-jeff-bezos-phone-technical-report
    https://assets.documentcloud.org/documents/6668313/FTI-Report-into-Jeff-Bezos-Phone-Hack.pdf
    https://www.cyberscoop.com/jeff-bezos-mbs-hack-fti-report-questions/

    Photo credit:
    https://pxhere.com/en/photo/186658

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    11 min
  • Citrix Patches Major Vulnerability; Windows Patches NSA Reported Bug - ThreatWire

    A critical flaw in Citrix is finally patched, the NSA reports a major windows bug, and half a million usernames and passwords were leaked! All that coming up now on ThreatWire. #threatwire #hak5

    I'm Moving!! https://twitter.com/Snubs/status/1218286909966909445

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    Citrix:
    https://www.cyberscoop.com/citrix-adc-vulnerability-positive-technologies/
    https://support.citrix.com/article/CTX267027
    https://www.cyberscoop.com/citrix-vulnerability-patch-exploit/
    https://thehackernews.com/2020/01/citrix-adc-gateway-exploit.html
    https://github.com/trustedsec/cve-2019-19781
    https://github.com/projectzeroindia/CVE-2019-19781
    https://arstechnica.com/information-technology/2020/01/unpatched-citrix-vulnerability-now-exploited-patch-weeks-away/
    https://www.us-cert.gov/ncas/current-activity/2020/01/13/cisa-releases-test-citrix-adc-and-gateway-vulnerability
    https://www.zdnet.com/article/a-hacker-is-patching-citrix-servers-to-maintain-exclusive-access/
    https://www.fireeye.com/blog/threat-research/2020/01/vigilante-deploying-mitigation-for-citrix-netscaler-vulnerability-while-maintaining-backdoor.html
    https://support.citrix.com/article/CTX267027

    NSA Windows:

    https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF
    https://thehackernews.com/2020/01/warning-quickly-patch-new-critical.html
    https://www.cnet.com/news/major-windows-10-security-flaw-reported-nsa-same-day-windows-7-support-ended/
    https://www.cyberscoop.com/windows-10-vulnerability-nsa-public-disclosure/
    https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
    https://arstechnica.com/information-technology/2020/01/researcher-develops-working-exploit-for-critical-windows-10-vulnerability/
    https://github.com/ollypwn/cve-2020-0601
    https://threatpost.com/poc-exploits-published-for-microsoft-crypto-bug/151931/
    https://threatpost.com/microsoft-patches-crypto-bug/151842/

    Via EmeryLee

    PW Leak:
    https://www.zdnet.com/article/hacker-leaks-passwords-for-more-than-500000-servers-routers-and-iot-devices/

     

    Photo credit:

    https://live.staticflickr.com/3894/15207079997_ce6972329a_b.jpg

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    10 min
  • SHA-1 Is Terrible, Cable Modems Haunted By Flaw, SIM Swapping Gets Worse - ThreatWire

    A major vulnerability affects modems, SIM swapping is still a huge threat, and SHA1 Still Sucks! All that coming up now on ThreatWire. #threatwire #hak5

    Links:

    Support me on alternative platforms! https://snubsie.com/support

    Shop ThreatWire Merch! - https://snubsie.com/shop

    https://www.youtube.com/shannonmorse -- subscribe to my new channel!

    ThreatWire is only possible because of our Patreon patrons! https://www.patreon.com/threatwire

    Links:

    Cable Haunt:
    https://threatpost.com/cable-haunt-remote-code-execution/151756/
    https://www.zdnet.com/article/hundreds-of-millions-of-cable-modems-are-vulnerable-to-new-cable-haunt-vulnerability/
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19494
    https://cablehaunt.com/
    https://github.com/Lyrebirds/sagemcom-fast-3890-exploit

    SIM Swapping:

    https://www.zdnet.com/article/academic-research-finds-five-us-telcos-vulnerable-to-sim-swapping-attacks/
    https://www.issms2fasecure.com/assets/sim_swaps-01-10-2020.pdf
    https://www.issms2fasecure.com/dataset
    https://www.vice.com/en_us/article/5dmbjx/how-hackers-are-breaking-into-att-tmobile-sprint-to-sim-swap-yeh
    https://www.vice.com/en_us/article/k7e8xx/sim-swapping-indictments-pile-up-as-congress-begs-the-fcc-to-do-more

    SHA1:

    https://en.wikipedia.org/wiki/SHA-1
    https://arstechnica.com/information-technology/2020/01/pgp-keys-software-security-and-much-more-threatened-by-new-sha1-exploit/
    https://eprint.iacr.org/2020/014.pdf

    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
    Our Site → https://www.hak5.org
    Shop → https://www.hakshop.com
    Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
    Support → https://www.patreon.com/threatwire
    Contact Us → http://www.twitter.com/hak5
    Threat Wire RSS → https://shannonmorse.podbean.com/feed/
    Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

    Host: Shannon Morse → https://www.twitter.com/snubs

    Host: Darren Kitchen → https://www.twitter.com/hak5darren
    Host: Mubix → http://www.twitter.com/mubix
    -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

    11 min

About Threat Wire

From the publisher's feed

Threat Wire by Hak5 is a quick weekly dose of news about security, privacy, and what is threatening the freedom of our Internet.