Cynthia B Brumfield

Best Infosec-Related Long (and Longish) Reads for the Weeks of 12/23/23 and 12/30/23

Cars have become mobile tracking machines for domestic abusers, ChatGPT exposes sensitive information, China's MSS gets sharper at spying, How to stay anonymous online, NIST snags NYT good tech award Metacurity is pleased to offer our free and paid subscribers this weekly digest of the best long-form (and

Best Infosec-Related Long (and Longish) Reads for the Weeks of 12/23/23 and 12/30/23

Cars have become mobile tracking machines for domestic abusers, ChatGPT exposes sensitive information, China's MSS gets sharper at spying, How to stay anonymous online, NIST snags NYT good tech award

Orange Spain Suffers Outage After Threat Actor Misconfigures BGP Using Stolen Email Password

Compromised gold and grey X accounts sold on dark web, 4.5m affected by HealthEC breach, Gamma Strategies drained of $500K, CertiK X account hacked, Orrick hack bigger than first reported, much more

Russian Hackers Were Inside Kyivstar's System Seven Months Before Cyberattack, SBU

Mandiant's Twitter account hijacked for crypto scam, Nigerian national busted for BEC scams, Former Group-IB exec extradited to Russia, 23andMe blames victims, Museum vendor hacked, much more

Ukraine Blocked Hacked Webcams Used by Russian Special Services

Xerox confirms ransomware attack, Cactus gang attacks Swedish supermarket chain, Emsisoft calls for ransomware payment ban, Black Basta subverts decryptor, Radiant Capital exploited, much more

Purported Russian Hackers Gained Access to Victoria Court System's Sensitive Videos

Modi gov't tried to block iPhone notices, Dangerous iPhone exploits exposed, China busts ChatGPT-powered ransomware developers, Catapult denies NCAA videos breach, much more in holiday round-up

Best Infosec-Related Long Reads for the Week of 12/16/23

Indian tech company fights hack-for-hire reports, The grueling task of finding child abusers online, Human trafficking of scammers, Stalkers track victims via car data, iPhone thief talks, more Publishing Notice: Metacurity will be on a publishing hiatus starting December 25. We resume publication on January 2. We wish all our

Best Infosec-Related Long Reads for the Week of 12/16/23

Indian tech company fights hack-for-hire reports, The grueling task of finding child abusers online, Human trafficking of scammers, Stalkers track victims via car data, iPhone thief talks, more

Autistic Teen Lapsus$ Member Sentenced to Indefinite Hospital Stay

Google & Twitter ads promote crypto drainer that has stolen $59 million, FalseFont backdoor malware is targeting defense contractors, First American Financial Corporation offline due to attack, more

Ukraine Hacking Groups Claim Attacks on Russian Water Company, CRM Systems

German police bust up Kingdom Market, Smishing Triad targets UAE visitors & residents, Crypto scammers abuse X feature, MuddyWater new framework targets African telecoms, Chrome 0day patched, more

Hackers Compromised 36 Million US Xfinity Customers' Data Via Citrix Bleed

ALPHV temporarily posts "unseizure" notice, Operation HAECHI IV busts 3,500 and seizes $300 million, Terrapin attack can undermine SSH, HCL Technologies hit by ransomware, much more

Justice Department Announces Take-Down of ALPHV, Victim Decryption Tool Distribution

Predatory Sparrow claims attack on most Iran gas stations, Hackers stole data on 14.6m Mr. Cooper customers, Rhysida leaks massive Insomnia Games data trove, VF Corp reports cyberattack, much more