Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins and users.

Watch this on youtube: https://youtu.be/5BRNz_etXQA

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Links:
Peloton
https://www.zdnet.com/article/mcafee-discovers-vulnerability-in-peloton-bike/
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/a-new-program-for-your-peloton-whether-you-like-it-or-not/
https://threatpost.com/peloton-bike-bug-hackers-control/166960/
https://www.cnet.com/health/fitness/peloton-fixes-flaw-on-bikes-that-could-have-let-bad-actors-access-tablets/
https://www.youtube.com/watch?v=RLjXfvb0ADw
https://support.onepeloton.com/hc/en-us/articles/4402287359380-How-Do-I-Verify-That-I-Have-The-Latest-System-Updates-


Carnival
https://threatpost.com/carnival-cruise-cyberattack/167065/
https://www.bleepingcomputer.com/news/security/carnival-cruise-hit-by-data-breach-warns-of-data-misuse-risk/
https://www.documentcloud.org/documents/20949884-carnival-march-bc-data-breach-notice


KAERI
https://www.bleepingcomputer.com/news/security/south-koreas-nuclear-research-agency-hacked-using-vpn-flaw/
https://www.sisajournal.com/news/articleView.html?idxno=219152
https://www.kaeri.re.kr/board/view?menuId=MENU00326&linkId;=9181
https://www.zdnet.com/article/north-korean-hacking-group-allegedly-behind-breach-of-south-korean-nuclear-institute/ 

 

Photo credit:
https://live.staticflickr.com/65535/49765921462_13795dab8e_b.jpg

 

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999

Host: Shannon Morse → https://www.twitter.com/snubs
Host: Darren Kitchen → https://www.twitter.com/hak5darren
Host: Mubix → http://www.twitter.com/mubix
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Update Your Pelaton Bikes ASAP; Nuclear Research Institute Had a VPN Vulnerability - ThreatWire

Threat Wire by Hak5 is a quick weekly dose of news about security, privacy, and what is threatening the freedom of our Internet.

Technology

Tech News

Podcasting

Gadgets

Software How-To

News

Click for links and more info ⬇️⬇️⬇️

OpenSea had a malicious NFT problem, a twitch hack update, and whatsapp officially adds end to end encrypted backups! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/Qx-PHk2cgqM

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Opensea
https://research.checkpoint.com/2021/check-point-research-prevents-theft-of-crypto-wallets-on-opensea-the-worlds-largest-nft-marketplace/ 
https://thehackernews.com/2021/10/critical-flaw-in-opensea-could-have-let.html
https://threatpost.com/opensea-nfts-cryptowallet-balances/175453/

Twitch
https://blog.twitch.tv/en/2021/10/15/updates-on-the-twitch-security-incident/?utm_referrer=https://t.co/ 
https://www.bleepingcomputer.com/news/security/twitch-downplays-this-months-hack-says-it-had-minimal-impact/
https://threatpost.com/twitch-leak-emails-passwords/175390/ 
https://www.zdnet.com/article/twitch-downplays-massive-breach-says-no-passwords-or-login-credentials-leaked/

Whatsapp
https://about.fb.com/news/2021/10/end-to-end-encrypted-backups-on-whatsapp/ 
https://www.bleepingcomputer.com/news/security/whatsapp-rolls-out-ios-android-end-to-end-encrypted-chat-backups/
https://www.zdnet.com/article/whatsapp-starts-slowly-rolling-out-encrypted-backups/

 

Thumbnail Credit:
https://cryptoslate.com/wp-content/uploads/2021/03/opensea-sea-1024x538.jpg


Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

OpenSea Had A Malicious NFT Problem  - ThreatWire

 Click for links and more info ⬇️⬇️⬇️

Fraudsters stole millions from veterans, SMS infrastructure was hacked, and Facebook is having a worst week ever! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/roznl90rljU

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Fraudsters Stole From Veterans:
https://www.bleepingcomputer.com/news/security/transnational-fraud-ring-stole-millions-from-army-members-veterans/
https://threatpost.com/transnational-fraud-military-members/175298/
https://www.zdnet.com/article/fraudster-jailed-for-stealing-us-military-health-records-millions-in-benefits/
https://www.zdnet.com/article/army-contractor-sentenced-for-stealing-1-5-million-from-veterans-through-dod-benefit-sites/

SMS Infrastructure Was Hacked:
https://www.syniverse.com/products/operator-messaging
https://www.businessinsider.com/syniverse-hackers-access-billions-of-texts-through-breach-2021-10
https://www.sec.gov/Archives/edgar/data/1839175/000119312521284329/d234831dprem14a.htm
https://www.vice.com/en/article/z3xpm8/company-that-routes-billions-of-text-messages-quietly-says-it-was-hacked

Facebook Down:
https://arstechnica.com/information-technology/2021/10/facebook-instagram-whatsapp-and-oculus-are-down-heres-what-we-know/
https://www.bleepingcomputer.com/news/technology/facebook-whatsapp-and-instagram-down-due-to-dns-outage/
https://www.cbsnews.com/news/facebook-whistleblower-frances-haugen-misinformation-public-60-minutes-2021-10-03/
https://arstechnica.com/tech-policy/2021/09/facebooks-latest-apology-reveals-security-and-safety-disarray/
https://www.wsj.com/articles/facebook-whistleblower-frances-haugen-says-she-wants-to-fix-the-company-not-harm-it-11633304122?mod=djemalertNEWS
https://www.cnet.com/news/facebook-whistleblower-to-testify-before-congress-how-to-watch/?ftag=COS-05-10aaa0b&PostType;=link&ServiceType;=twitter&UniqueID;=ACA16F60-2556-11EC-B5CD-A6BE4744363C&TheTime;=2021-10-04T21%3A04%3A33
https://www.vice.com/en/article/4avjqb/conspiracy-theories-about-facebook-outage-spread-even-without-facebook
https://9to5mac.com/2021/10/04/instagram-facebook-whatsapp-down/
https://krebsonsecurity.com/2021/10/what-happened-to-facebook-instagram-whatsapp/

Thumbnail Credit:
https://cdn.pixabay.com/photo/2015/09/26/13/38/facebook-959060_1280.jpg 


Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

Facebook Was Down?! Facebook Outage Causes Conspiracies  - ThreatWire

Click for links and more info ⬇️⬇️⬇️

100,000 credentials leaked due to an autodiscover flaw, 3 Apple zero days were published online, and the FBI secretly held a ransomware decryptor key! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/2XZqx6Coa2Y

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Links:
100k windows exchange emails
https://www.bleepingcomputer.com/news/microsoft/microsoft-rushes-to-register-autodiscover-domains-leaking-credentials/
https://www.guardicore.com/labs/autodiscovering-the-great-leak/
https://thehackernews.com/2021/09/microsoft-exchange-bug-exposes-100000.html
https://arstechnica.com/information-technology/2021/09/exchange-outlook-autodiscover-bug-exposed-100000-email-passwords/
https://www.bleepingcomputer.com/news/microsoft/microsoft-rushes-to-register-autodiscover-domains-leaking-credentials/
https://www.blackhat.com/asia-17/briefings/schedule/#all-your-emails-belong-to-us-exploiting-vulnerable-email-clients-via-domain-name-collision-5301
https://github.com/guardicore/labs_campaigns/tree/master/Autodiscover

Apple Stuff:
https://arstechnica.com/information-technology/2021/09/three-ios-0-days-revealed-by-researcher-frustrated-with-apples-bug-bounty/
https://www.bleepingcomputer.com/news/security/researcher-drops-three-ios-zero-days-that-apple-refused-to-fix/
https://habr.com/en/post/579714/
https://www.vice.com/en/article/k78dpx/researcher-publishes-source-code-for-three-unpatched-iphone-exploits
https://habr.com/en/post/580272/
https://www.reddit.com/r/jailbreak/comments/pvaztb/free_release_entitlementfix_workaround_for_the_3/

Ransomware Key
https://arstechnica.com/gadgets/2021/07/kaseya-gets-master-decryptor-to-help-customers-still-suffering-from-revil-attack/
https://arstechnica.com/information-technology/2021/09/ransomware-victims-panicked-while-fbi-secretly-held-revil-decryption-key/
https://www.cnet.com/tech/services-and-software/fbi-reportedly-withheld-ransomware-key-from-business-for-3-weeks-in-failed-sting/
https://twitter.com/BitdefenderLabs/status/1438489191491440646?s=20
https://www.washingtonpost.com/national-security/ransomware-fbi-revil-decryption-key/2021/09/21/4a9417d0-f15f-11eb-a452-4da5fe48582d_story.html

 

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

3 Apple Zero Days Publicly Released; FBI Withholds Ransomware Decryptor Key  - ThreatWire

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

An Epic Hack of Epik Customer Data, Apple Patches Exploit Used By Pegasus Spyware, and ExpressVPN Comes Under Fire! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/W5YDss-olvA

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
Epik:
https://arstechnica.com/information-technology/2021/09/anonymous-leaks-gigabytes-of-data-from-epik-web-host-of-gab-and-parler/
https://twitter.com/stevanzetti/status/1437482759241469958
https://twitter.com/stevanzetti/status/1437818671712329748
https://arstechnica.com/information-technology/2021/09/epik-data-breach-impacts-15-million-users-including-non-customers/
https://haveibeenpwned.com/

Apple:
https://www.vice.com/en/article/3aq9q3/apple-patches-zero-click-imessage-hack-used-by-nso
https://citizenlab.ca/2021/09/forcedentry-nso-group-imessage-zero-click-exploit-captured-in-the-wild/
https://thehackernews.com/2021/09/apple-issues-urgent-updates-to-fix-new.html
https://arstechnica.com/information-technology/2021/09/apple-fixes-imessage-zero-day-exploited-by-pegasus-spyware/
https://www.cnet.com/tech/services-and-software/apples-ios-14-8-security-fix-protect-your-iphone-from-pegasus-now/

ExpressVPN:
https://www.zdnet.com/article/expressvpn-sells-to-kape-technologies-for-936-million/
https://www.expressvpn.com/blog/expressvpn-joining-kape/
https://www.vice.com/en/article/3aq9a5/us-company-sold-zero-click-exploit-project-raven-uae
https://www.reuters.com/investigates/special-report/usa-spying-raven
https://www.expressvpn.com/blog/daniel-gericke-expressvpn/
https://www.documentcloud.org/documents/21062379-raven_charge

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

What Does ExpressVPN Have To Do With The UAE’s Project Raven? - ThreatWire

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

60 Million+ Fitness Records Exposed, A record breaking botnet hit Yandex, and WhatsApp Rolls Out E2EE Backups! All that coming up now on ThreatWire.
 
 #threatwire #hak5

Links:
Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/s2QFPS5Bqd8

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/ 

Support ThreatWire!  https://www.patreon.com/threatwire 

Follow Shannon on Social Media: https://snubsie.com/links 

Links:
60 Million+ Fitness Records Exposed
https://www.macobserver.com/news/gethealth-data-leak/
https://www.zdnet.com/article/over-60-million-records-exposed-in-wearable-fitness-tracking-data-breachover-60-million-wearable-fitness-tracking-records-exposed-via-unsecured-database/
https://www.websiteplanet.com/blog/gethealth-leak-report/
https://www.programmableweb.com/api/gethealth-rest-api

Record Breaking Botnet
https://www.bleepingcomputer.com/news/security/new-m-ris-botnet-breaks-ddos-record-with-218-million-rps-attack/
https://www.bleepingcomputer.com/news/security/mikrotik-patches-zero-day-flaw-under-attack-in-record-time/
https://thehackernews.com/2021/09/meris-botnet-hit-russias-yandex-with.html
https://www.reuters.com/technology/russias-yandex-says-it-repelled-biggest-ddos-attack-history-2021-09-09/
https://threatpost.com/yandex-meris-botnet/169368/
https://blog.qrator.net/en/meris-botnet-climbing-to-the-record_142/

WhatsApp Rolls Out E2EE Backups
https://engineering.fb.com/2021/09/10/security/whatsapp-e2ee-backups/
https://thehackernews.com/2021/09/whatsapp-to-finally-let-users-encrypt.html
https://www.zdnet.com/article/whatsapp-details-plans-to-offer-encrypted-backups/
https://arstechnica.com/gadgets/2021/09/whatsapp-end-to-end-encrypted-messages-arent-that-private-after-all/
https://www.propublica.org/article/how-facebook-undermines-privacy-protections-for-its-2-billion-whatsapp-users

 

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop →  http://hakshop.myshopify.com/
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
Threat Wire RSS → https://shannonmorse.podbean.com/feed/
Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

Update Your Pelaton Bikes ASAP; Nuclear Research Institute Had a VPN Vulnerability - ThreatWire

Download our free app to listen on your phone