New iMessage Security Features
January 29 2021
Apple has added added security features to mitigate the risk of zero-click iMessage attacks.
Apple did not document the changes but Groß said he fiddled around with the...
Read more
Police Have Disrupted the Emotet Botnet
January 28 2021
A coordinated effort has captured the command-and-control servers of the Emotet botnet:
Emotet establishes a backdoor onto Windows computer systems via automated phishing emails that distribute Word documents...
Read more
Dutch Insider Attack on COVID-19 Data
January 27 2021
Insider data theft:
Dutch police have arrested two individuals on Friday for allegedly selling data from the Dutch health ministry’s COVID-19 systems on the criminal underground.
[…]
According to Verlaan, the...
Read more
Massive Brazilian Data Breach
January 26 2021I think this is the largest data breach of all time: 220 million people. (Lots more stories are in Portuguese.)
Read moreInsider Attack on Home Surveillance Systems
January 25 2021
No one who reads this blog regularly will be surprised:
A former employee of prominent home security company ADT has admitted that he hacked into the surveillance feeds of...
Read more
Friday Squid Blogging: Vegan Chili Squid
January 22 2021The restaurant chain Wagamama is selling a vegan version of its Chilli Squid side dish made from king oyster mushrooms. As usual, you can also use this squid post to...
Read moreSVR Attacks on Microsoft 365
January 21 2021
FireEye is reporting the current known tactics that the SVR used to compromise Microsoft 365 cloud data as part of its SolarWinds operation:
Mandiant has observed UNC2452 and other...
Read more
Sophisticated Watering Hole Attack
January 20 2021
Google’s Project Zero has exposed a sophisticated watering-hole attack targeting both Windows and Android:
Some of the exploits were zero-days, meaning they targeted vulnerabilities that at the time were...
Read more
Injecting a Backdoor into SolarWinds Orion
January 19 2021
Crowdstrike is reporting on a sophisticated piece of malware that was able to inject malware into the SolarWinds build process:
Key Points
- SUNSPOT is StellarParticle’s malware used to insert the... Read more
Recent Comments