Menu

Monthly Archives: January 2024

How finops can make the cloud more secure
While we fire the boss, can you lock him out of the network?
Drivers: We’ll take that plain dumb car over a flashy data-spilling internet one, thanks

https://security-tracker.debian.org/tracker/DSA-5601-1

https://security-tracker.debian.org/tracker/DSA-5600-1

https://security-tracker.debian.org/tracker/DSA-5599-1

eBay to cough up $3M after cyber-stalking couple who dared criticize the souk

https://security-tracker.debian.org/tracker/DSA-5598-1

Mandiant’s brute-forced X account exposes perils of skimping on 2FA
Attack of the copycats: How fake messaging apps and app mods could bite you

WhatsApp, Telegram and Signal clones and mods remain a popular vehicle for malware distribution. Don’t get taken for a ride.

Infoseccers think attackers backed by China are behind Ivanti zero-day exploits
Believing they would be paid a fortune for having sex with women, hundreds of Indian men scammed out of cash
Security firm Mandiant says it didn’t have 2FA enabled on its hacked Twitter account
Twitter says it’s not its fault the SEC’s account got hacked
Smashing Security podcast #354: Chuck Norris and the fake CEO, artificial KYC, and an Airbnb scam
Fidelity National now says 1.3M customers had data stolen by cyber-crooks
Uncle Sam tells hospitals: Meet security standards or no federal dollars for you
Be honest. Would you pay off a ransomware crew?
US Navy sailor swaps sea for cell after accepting bribes from Chinese snoops
Cybercrooks play dress-up as ‘helpful’ researchers in latest ransomware ruse
Love is in the AI: Finding love online takes on a whole new meaning

Is AI companionship the future of not-so-human connection – and even the cure for loneliness?

SEC’s Twitter account hacked to say Bitcoin ETFs approved. Politicians and lawyers demand investigation into security breach
ShinyHunters chief phisherman gets 3 years, must cough up $5M
Jeffrey Epstein email scams rear their ugly head
New year, new updates for security holes in Windows, Adobe, Android and more
SEC Twitter hijacked to push fake news of hotly anticipated Bitcoin ETF approval
And that’s a wrap for Babuk Tortilla ransomware as free decryptor released
Midwives clinic takes nine months to deliver news of data breach
Sexual assault in the metaverse investigated by British police
Apache OFBiz zero-day pummeled by exploit attempts after disclosure
Hackers hijack Beirut airport departure and arrival boards
Stuxnet: The malware that cost a billion dollars to develop?
British Library: Finances remain healthy as ransomware recovery continues
Facebook, Instagram now mine web links you visit to fuel targeted ads
Cybersecurity trends and challenges to watch out for in 2024 – Week in security with Tony Anscombe

What are some of the key cybersecurity trends that people and organizations should have on their radars this year?

Ransomware payment ban: Wrong idea at the wrong time
After injecting cancer hospital with ransomware, crims threaten to swat patients

https://security-tracker.debian.org/tracker/DSA-5597-1

https://security-tracker.debian.org/tracker/DSA-5596-1

Lost and found: How to locate your missing devices and more

Losing your keys, your wallet – or anything else, really – can be a pain, but there is a wide world of trackers that can help you locate your missing things – with awesome accuracy

BreachForums boss busted for bond blunders – including using a VPN
Sandworm’s Kyivstar attack should serve as a reminder of the Kremlin crew’s ‘global reach’
X-ploited: Mandiant restores hijacked Twitter account after attempted crypto heist
Infosec experts divided over 23andMe’s ‘victim-blaming’ stance on data breach
Cryptocurrency wallet CEO loses $125,000 in wallet-draining scam
Infostealer malware, weak password leaves Orange Spain RIPE for plucking
As lawmakers mull outlawing poor security, what can they really do to tackle online gangs?
Three Chinese balloons float near Taiwanese airbase
Microsoft kills off Windows app installation from the web, again

https://security-tracker.debian.org/tracker/DSA-5595-1

Freight giant Estes refuses to deliver ransom, says personal data opened and stolen

https://security-tracker.debian.org/tracker/DSA-5594-1

Atos confirms talks with Airbus over cybersecurity wing sale
Copy that? Xerox confirms ‘security incident’ at subsidiary
Courts service “PWNED” in Australia, as hackers steal sensitive recordings of hearings
Formal ban on ransomware payments? Asking orgs nicely to not cough up ain’t working
Google password resets not enough to stop these info-stealing malware strains
Court hearings become ransomware concern after justice system breach
4 key devsecops skills for the generative AI era

https://security-tracker.debian.org/tracker/DSA-5593-1