The all in one place for non-profit security aid.
Chinese cyberespionage campaign against European governments. BlackCat and SEO poisoning. LockBit seeks to extort semiconductor manufacturer. CISA released a DDoS alert for US companies and government agencies. Microsoft debunks claims of data theft by Anonymous Sudan. Port of Nagoya closes over ransomware attack. Hacker spoofs a school and pilfers exam papers from British education boards. Professionals in the cyber underworld. Avast releases a free decryptor for Akira. Read More
The CyberWire
Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions
Now-patched authorization bypass issues impacting Cox modems that could have been abused as a starting point to gain unauthorized access to the devices and run malicious commands.
“This series of vulnerabilities demonstrated a way in which a fully external attacker with no prerequisites could’ve executed commands and modified the settings of millions of modems, accessed any business customer’s Read More
Challenges in the cyber industry.
Simone Petrella sits down to talk with Monica Shokrai from Google at the mWISE 2023 Cybersecurity Conference about challenges in the industry from the company perspective, and what Google does with its own actuarial team to calculate it’s own risk. Ben has the story of a TikTok account that targets ordinary people using advanced facial recognition technology. Dave’s got the story of some of the information being publicly shared in the Google antitrust case. Read More
The CyberWire
Gitloker attacks abuse GitHub notifications to push malicious oAuth apps
Threat actors impersonate GitHub’s security and recruitment teams in phishing attacks to hijack repositories using malicious OAuth apps in an ongoing extortion campaign wiping compromised repos. […] Read More