Welcome to The Cybersecurity 202! Dear futbol fans, please don't be mad at me for calling it "soccer."
Below: A U.S. governor bans TikTok from state devices, and Twitter stopped enforcing its rules around covid misinformation. First:
The World Cup is one of the most-watched events on the planet and has racked up record viewership in the United States this year, too. With the U.S.
Lastpass says hackers accessed customer data in new breach
LastPass says unknown attackers breached its cloud storage using information stolen during a previous security incident from August 2022.
The company added that, once in, the threat actors also managed to access customer data stored in the compromised storage service.
Hackers dump more customer data from Australian insurer Medibank | Reuters
/cloudfront-us-east-2.images.arcpublishing.com/reuters/MXLYSGGOQFIB7LEZTBKGUP3AEI.jpg)
The latest release on the dark web follows progressive uploads, including records of customers' mental health and alcohol use, that began after Medibank said on Nov. 7 it would not pay a ransom.
"The raw data we have analysed today so far is incomplete and hard to understand," chief executive David Koczkar said. "While there are media reports of this being a signal of 'case closed', our work is not over."
Chinese Cyber Espionage Hackers Using USB Devices to Target Entities in Philippines
Mandiant, which is part of Google Cloud, is tracking the cluster under its uncategorized moniker UNC4191 . An analysis of the artifacts used in the intrusions indicates that the campaign dates as far back as September 2021.
"UNC4191 operations have affected a range of public and private sector entities primarily in Southeast Asia and extending to the U.S., Europe, and APJ," researchers Ryan Tomcik, John Wolfram, Tommy Dacanay, and Geoff Ackerman said .
Hackers Using Trending TikTok 'Invisible Challenge' to Spread Malware
"Instructions to get the 'unfilter' software deploy WASP stealer malware hiding inside malicious Python packages," Checkmarx researcher Guy Nachshon said in a Monday analysis.
The TikTok videos posted by the attackers, @learncyber and @kodibtc, on November 11, 2022, are estimated to have reached over a million views. The accounts have been suspended.
Should Social Media Users Engage in a Tug-of-war with Hackers? | Spiceworks It Security
Entry points for cybercrooks to burrow into the systems are numerous, and the vulnerabilities that are revealed are striking, making it a lucrative opportunity for criminals to capitalize on.
As social media users, we risk losing hundreds of pictures, conversations, and information if our accounts are criminally intercepted. The hacker, on their part, gains the opportunity to sell the data, blackmail the data owner, or analyze the data to inform further scams.
Hackers Release Millions of Twitter IDs and User Info for Free
Twitter's API once held such an easily exploitable flaw that hackers managed to grab 5.4 million user details. Now, according to reports and mentions from users in hacker forums, there are several million more points of user data floating around on the internet.
A thread published on BreachForums, AKA Breached, last week shared the original 5.4 million data points for free, and as of reporting that forum thread is still up and running.
Hackers Could Remotely Unlock and Start Connected Cars Through SiriusXM Vulnerability
Vehicle telematics passed through the service allowed researchers with a car's VIN to control key functions.
It's strange to think about how many devices talk over the internet in 2022. Your fridge, your toothbrush, and your coffee maker are just a few basic household appliances that are connected to the cloud for convenience's sake.
Hackers using USB drives to spread malware in ongoing attack
Google-owned Mandiant states that their observations suggest the Philippines is the main target of this operation, due to the number of affected systems located in the country.
After the initial infection via Universal Serial Bus drives, the hackers then deployed legitimately-signed binaries while side-loading malware. The malware families used in the cyberespionage have been identified by Mandiant as Mistcloak Launcher, Darkdew Dropper, and Bluehaze Launcher.
Celebrating with Goalie Coach Warren Strelow after our February 22, 1980 win🥇 To read more about the great man and… https://t.co/MB3loDD9Te JimCraigUSA (from USA) Thu Dec 01 03:24:30 +0000 2022
System Unknown NFT Collection
#NFT #ETH #nftgiveaways #nftcommunity #Giveaways #NFTPromotion #ART
https://opensea.io/collection/systemunknown
Check out the System Unknown artwork. Click here.
