Best Infosec-Related Long Reads for the Week of 2/3/24

London transport system surveilled passengers, Still-glitchy passkeys promise better security, Blame companies for SIM swaps, AI causes more insecure code, Ermakov Sanctions explained, more

Fake LastPass App Made Its Way Onto Apple's App Store, Likely Used to Steal Credentials

Iran's cyber operations against Israel growing bolder, FCC cracks down on AI-generated voice calls, State Dept. offers $10m Hive gang reward, Yet another Ivanti flaw emerges, much more

China's Volt Typhoon Has Lived in Critical Networks for At Least Five Years

Ransomware payments topped $1.1 billion last year, UN probing 58 suspected DPRK attacks, Google to block sideloading in Singapore test, 'Security researcher' charged with $2.5m Apple fraud, much more

Government Hackers Targeted iPhone Zero Days Using Startup Variston's Spyware

Chinese group breached Dutch Ministry of Defense, Chinese-speaking group loots resume data, Cyberattack hits French healthcare giant, Fake story about smart toothbrush botnet gains steam, much more Note bene: While Metacurity explores switching to alternative newsletter platforms, please know that whatever we do, you can always reach Metacurity at https:

US Imposes Visa Restrictions on Commercial Spyware Abusers

UK and nearly three dozen other nations sign int'l pact against hackers-for-hire, Chicago children's hospital suffering under week-long cyber incident, PA court system out due to DDoS, much more Note bene: While Metacurity explores switching to alternative newsletter platforms, please know that whatever we do, you

US Treasury Sanctions Iranian Officials for Cyberattack on Pennsylvania Water Facility

Deefake video conference led to $25m BEC scam, Hackers accessed AnyDesk's production systems, Taylor Swift AI nudes started in 4chan, Mastodon fixes critical flaw, Binance denies theft, much more

Best Infosec-Related Long Reads for the Week of 1/27/24

Client-side scanning is not a solution, Explosion of satellite surveillance data is coming, Taylor Swift deepfakes will change the internet, Cyber should be integral to foreign policy, more

Vault 7 Hacker Sentenced to 40 Years in Prison For Leaking CIA Files

Blackbaud rapped for poor security practices in FTC settlement, Cloudflare breached by nation-state actor, CISA orders quick disconnects of Ivanti VPNs, Busted SIM swappers behind FTX hack, much more

US Disrupted Volt Typhoon by Hijacking, Wiping Botnet Routers

Hackers siphoned $112.5m from Ripple founder, Around three dozen targeted by Pegasus in Jordan, Another Ivanti zero-day exploited in the wild, Brazil police bust up banking malware op, much more

NY AG Sues Citibank For Insufficient Data Security Measures, Failure to Address Scams

Florida feds charge $400 million SIM swappers, SIM swapper connected to 0ktapus/ALPHV, Canada's Global Affairs hit by data breach, ALPHV claims hit on US gov't contractor, much more

DOJ and FBI Remotely Turned Off Parts of China's Volt Typhoon Campaign, Sources

Cyberattack hampered Fani Willis' offices, OAN CEO shared spreadsheet of Smartmatic passwords, ODNI hires expert to grapple with OSINT, DHS workers sentenced for stealing, much more

SolarWinds Seeks Dismissal of SEC Case, Denies Wrongdoing

Microsoft details security lapses in Midnight Blizzard breach, Jenkins flaw PoC exploits released, Intel community seeks safer AI, KC transport system hit, Alleged prolific swatter busted, much more