Cynthia B Brumfield - Metacurity (Page 23)

Russian Hacking Group ColdRiver Delivers New SPICA Backdoor Via Fake-Encrypted PDFs

Hackers stole $7.5m in HHS grant money, FTC bars data broker from selling precise location data, Stablecoins account for most illicit crypto transactions, Blockchain network hit with DDoS, much more

Iranian Hackers Are Targeting Research Organizations, Universities in Europe, US

Swiss government targeted by NoName, PixieFail UEFI firmware flaws impact boot process, Feds warn of Chinese drone risks, Thousands of companies shovel data to Facebook, much more

Zero-Day Flaws in Ivanti VPN and NAC Appliances Exploited in Mass Attacks

GPU flaw could lead to big data theft, Credit card data for 15K in Oz stolen in attacks, Hackers want $11m from Spanish town, Hackers posted gruesome videos in UC-Irvine Discord groups, much more

British Library Restores Main Catalog Eleven Weeks After Rhysida Ransomware Attack

Phemedrone malware bypasses MSFT security prompts, Medusa strikes nonprofit Water for People, 178K+ SonicWall next-generation firewalls vulnerable to DoS and RCE, Lush hit with incident, much more

Ukrainian Man Busted for Using Hacked Accounts to Create A Million Mining Servers

School software provider leaked thousands of safety docs, Gensler says no evidence hacker accessed SEC systems, Apple knew of AirDrop flaw in 2019, USAF cyber analyst charged with rug pull, much more

Best Infosec-Related Long Reads for the Week of 1/6/24: Special Misinformation Edition

WEF says misinformation is biggest global threat, Taiwan presages years of misinformation threats, Taiwan civil groups fight China's disinformation, The US must counter disinformation in Taiwan Metacurity is pleased to offer our free and paid subscribers this weekly digest of the best long-form (and longish) infosec-related pieces we

Best Infosec-Related Long Reads for the Week of 1/6/24: Special Misinformation Edition

WEF says misinformation is biggest global threat, Taiwan presages years of misinformation threats, Taiwan civil groups fight China's disinformation, The US must counter disinformation in Taiwan

FCC Seeks Car Maker Data on Connected App Tracking of Domestic Abuse Victims

Sandworm less tied to Danish CI attacks than thought, Geofence warrant error swept up San Franciscans' data, Hackers breached AI chatbot Chattr, Volt Typhoon exploits old Cisco router flaw, much more

FTC Bars Data Broker Sale of Location Data for Reproductive Health Clinics, Other Locations

Biden admin to float hospital cybersecurity rules, Mandiant said mistakes led to X account hijack, Ransomware victims targeted by bogus security researchers, New Mirai campaign emerges, much more

Sim-Swapper Hacked SEC Twitter Account to Spread False Report of Bitcoin ETF Approval

SBU-linked group breached Moscow ISP in revenge for Kyivstar attack, ShinyHunters member sentenced to 3 years, Elder scammer sentenced to 10 years, Paraguay warns of Black Hunt hackers, much more

State-Backed Chinese Forensics Firm Claims It Cracked Apple's AirDrop to Police Speech

Dutch engineer delivered Stuxnet malware, loanDepot hit in cyber incident, Toronto Zoo ransomwared, Spamdot admins ID'ed, AsyncRAT active for nearly a year, Lumma Stealer spread via YouTube, much more

Nineteen People Charged in xDedic Cybercrime Marketplace Investigation

Merck settles cyber "war" insurance exclusion case, Lebanon airport flight displays hacked, No-Justice wiper used in Albanian attacks, DPRK hackers stole up to $700m in crypto in 2023, much more