Every week I publish interesting articles and ways to improve your understanding of cybersecurity. This week Transport for London (TfL) disclosed that they were hacked.

Projects

• TryHackMe – Linux PrivEsc – Complete
• TryHackMe – Vulnversity – In Progress
• Linux Foundation – Introduction to Kubernetes (LF158) – In Progress

Videos

• https://youtu.be/5GLNKHJCSkg?si=Zd4IaGBeG_ZhlWvB (Embed disabled)

Articles

• New RAMBO attack steals data using RAM in air-gapped computers – A novel side-channel attack dubbed “RAMBO” (Radiation of Air-gapped Memory Bus for Offense) generates electromagnetic radiation from a device’s RAM to send data from air-gapped computers.
• Lowe’s employees phished via Google ads – In mid-August, we identified a malvertising campaign targeting Lowes employees via Google ads. Like many large corporations, Lowe’s has their own employe portal called MyLowesLife, for all matters related to schedule, pay stubs, or benefits.
• Car Rental Company Avis Discloses a Data Breach – Car rental giant Avis disclosed a data breach that impacted one of its business applications in August compromising customers’ personal information.
• Russia’s top-secret military unit reportedly plots undersea cable ‘sabotage’ – US alarmed by heightened Kremlin naval activity worldwide
• Cyber crooks shut down UK, US schools, thousands of kids affected – No class: Black Suit ransomware gang boasts of 200GB haul from one raid
• Transport for London confirms customer data stolen in cyberattack – Transport for London (TfL) has determined that the cyberattack on September 1 impacts customer data, including names, contact details, email addresses, and home addresses.

Podcasts

Every week I publish interesting articles and ways to improve your understanding of cybersecurity. This week learn about a former aide to New York Gov. Kathy Hochul and former Gov. Andrew Cuomo was charged with acting as an agent for the Chinese government.

Projects

• TryHackMe – Linux PrivEsc – In Progress
• Linux Foundation – Introduction to Kubernetes (LF158) – In Progress
• Insider Threat Hunting: Detecting and Responding to Internal Security Risks – Complete

Videos

Articles

• Green Berets storm building after compromising its Wi-Fi – US Army Special Forces, aka the Green Berets, have been demonstrating their ability to use offensive cyber-security tools in the recent Swift Response 24 military exercises in May, the military has now confirmed.
• New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access – Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating system’s permissions-based model, which revolves around the Transparency, Consent, and Control (TCC) framework.
• NGate Android malware relays NFC traffic to steal cash – Android malware discovered by ESET Research relays NFC data from victims’ payment cards, via victims’ mobile phones, to the device of a perpetrator waiting at an ATM.
• City of Columbus sues man after he discloses severity of ransomware attack – Mayor said data was unusable to criminals; researcher proved otherwise.
• WiFi Signals Used To “See” People Inside Rooms – WiFi sensing could provide a low cost way to monitor vulnerable people at home with greater privacy than cameras. But the technique raises its own set of privacy issues.
• Former aide to New York governors charged with acting as an agent of the Chinese government – A former aide to New York Gov. Kathy Hochul and former Gov. Andrew Cuomo was charged with acting as an agent for the Chinese government, US Attorney Breon Peace announced Tuesday.
• YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel – Sophisticated attack breaks security assurances of the most popular FIDO key.
• DICK’S shuts down email, locks employee accounts after cyberattack – email systems had been shut down, likely to isolate the attack, and all employees had been locked out of their accounts. IT staff is now manually validating employees’ identities on camera before they can regain access to internal systems.
• Crypto scammers who hacked McDonald’s Instagram account say they stole $700,000 – Hackers who seized control of the official Instagram account of McDonald’s claim that they managed to steal US $700,000 from unsuspecting investors by promoting a fake cryptocurrency.
• Employee arrested for locking Windows admins out of 254 servers in extortion plot – A former core infrastructure engineer at an industrial company headquartered in Somerset County, New Jersey, was arrested after locking Windows admins out of 254 servers in a failed extortion plot targeting his employer.
• Russia’s Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team – Unit 29155 of Russia’s GRU military intelligence agency—a team responsible for coup attempts, assassinations, and bombings—has branched out into brazen hacking operations with targets across the world.
• Planned Parenthood confirms cyber-attack as RansomHub threatens to leak data – 16 comment bubble on white 93GB of info feared pilfered in Montana by heartless crooks
• Leaked Disney Data Reveals Financial and Strategy Secrets – Data trove sheds light on operations, exposes personal data of some staff and customers

Podcasts

• Cyberwire Daily – Ep 2143 | 9.4.24 From secure to clone-tastic.
• Smashing Security 383: The Godfather club, and AirTags to the rescue

Every week I publish interesting articles and ways to improve your understanding of cybersecurity. This week learn about Chinese hackers penetrating US internet providers and OpenAI hiring insider threat positions to watch their own employees.

Projects

• TryHackMe – Linux PrivEsc – In Progress
• Linux Foundation – Introduction to Kubernetes (LF158) – In Progress

Videos

Articles

• Halliburton shuts down systems after cyberattack – Oil drilling and fracking giant Halliburton said it has shut down some of its internal systems following a cyberattack earlier this week.
• Slack AI can be tricked into leaking data from private channels via prompt injection – Whack yakety-yak app chaps rapped for security crack
• Audit finds notable security gaps in FBI’s storage media management – An audit from the Department of Justice’s Office of the Inspector General (OIG) identified “significant weaknesses” in FBI’s inventory management and disposal of electronic storage media containing sensitive and classified information.
• France Police Arrested Telegram Ceo Pavel Durov – French police arrested Pavel Durov, founder and chief executive of Telegram, due to the lack of content moderation that advantaged criminal activity.
• A Cyberattack Impacted Operations at the Port of Seattle and Sea-tac Airport – A cyber attack hit the Port of Seattle, which also operates the Seattle-Tacoma International Airport, websites and phone systems were impacted.
• Chinese government hackers penetrate U.S. internet providers to spy – Beijing’s hacking effort has “dramatically stepped up from where it used to be,” says former top U.S cybersecurity official.
• OpenAI is hiring someone to investigate its own employees – At OpenAI, the security threat may be coming from inside the house. The company recently posted a job listing for a technical insider risk investigator to “fortify our organization against internal security threats.”
• DICK’s Sporting Goods says confidential data exposed in cyberattack – DICK’S Sporting Goods, the largest chain of sporting goods retail stores in the United States, disclosed that confidential information was exposed in a cyberattack detected last Wednesday.
• Remote Work: A Ticking Time Bomb Waiting to be Exploited – Remote work allows unvetted software outside the security boundaries of your firewall and poses additional risk as users are more likely to fall for tricks and scams when outside the office.
• Hacker Tried to Dodge Child Support by Breaking Into Registry to Fake His Death, Prosecutors Say – Kentucky man attempted to fake his death to avoid paying child support obligations by hacking into state registries and falsifying official records.
• Powerful Spyware Exploits Enable a New String of ‘Watering Hole’ Attacks – Suspected Russian hackers have compromised a series of websites to utilize sophisticated spyware exploits that are eerily similar to those created by NSO Group and Intellexa.
• Phishing in Style: Microsoft Sway Abused to Deliver Quishing Attacks – In July 2024, Netskope Threat Labs tracked a 2,000-fold increase in traffic to phishing pages delivered through Microsoft Sway
• The Emerging Dynamics of Deepfake Scam Campaigns on the Web – Our researchers discovered dozens of scam campaigns using deepfake videos featuring the likeness of various public figures, including CEOs, news anchors and top government officials.
• New Malware Employs Crazy Obfuscation Techniques to Evade Anti-Virus Detection – Security researchers have recently identified a new malware strain that employs advanced obfuscation techniques to evade detection by antivirus software.
• Park’N Fly notifies 1 million customers of data breach – Park’N Fly is warning that a data breach exposed the personal and account information of 1 million customers in Canada after hackers breached its network.
• Bypassing airport security via SQL injection – we tried a single quote in the username as a SQL injection test, and immediately received a MySQL error
• Unpatchable 0-day in surveillance cam is being exploited to install Mirai – Vulnerability is easy to exploit and allows attackers to remotely execute commands.

Podcasts

Every week I publish interesting articles and ways to improve your understanding of cybersecurity. This week learn about National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online.

Projects

• TryHackMe – Metasploit: Meterpreter – Complete
• TryHackMe – Blue – Complete
• TryHackMe – Linux PrivEsc – In Progress
• Linux Foundation – Introduction to Kubernetes (LF158) – In Progress

Videos

https://youtu.be/GsjHMzGl-VY?si=Gr7IdUUPVobcBfVp

Whitepapers

• NOIR: A White Paper, Part 1 & 2— Proposing a New Policy for Improving National Security by Fixing the Problem of Insider Spies by Dr. David L. Charney, Psychiatrist
• Case Study: Pinterest – Pinning Its Past, Present, and Future on Cloud Native

Articles

• Iranian group used ChatGPT to try to influence US election, OpenAI says – AI company bans accounts and says operation did not appear to have meaningful audience engagement
• Russian spy agency hackers breach human rights groups, victims say – Traditional phishing attacks aimed to break into organizations advocating for Russian dissidents, among others.
• Malicious Links, AI-Enabled Tools and Attacks on SMBs Among Top Cybersecurity Threats in H1 Mimecast Global Threat Intelligence Report – Mimecast, a leading global Human Risk Management platform, today published its Global Threat Intelligence Report 2024 H1, revealing malicious links and AI-driven bots in call centers to be among the greatest threats to cybersecurity defenses, with small businesses bearing the brunt of attacks.
• Toyota Customer, Employee Data Leaked in Confirmed Data Breach – The company has released little information on the breach, but claims it’s been in contact with the individuals affected.
• Major Backdoor in Millions of RFID Cards Allows Instant Cloning – Backdoor in millions of contactless cards made by Shanghai Fudan Microelectronics allows instantaneous cloning of RFID smart cards used to open office doors and hotel rooms around the world.
• Chinese Wi-Fi Router Vendor Draws US Congressional Ire – Two congressmen want the US Commerce Department to examine the company’s goods and decide if they pose a threat
• Oregon Zoo warns visitors their credit card details were stolen – Oregon Zoo is informing that visitors who purchased tickets online between December and June had their payment card information compromised.
• National Public Data Published Its Own Passwords – National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another NPD data broker which shares access to the same consumer records inadvertently published the passwords to its back-end database in a file that was freely available from its homepage until today.

Podcasts

Every week I publish interesting articles and ways to improve your understanding of cybersecurity. This week learn about the 2.7 billion social security numbers that were stolen by hackers.

Projects

• TryHackMe – Metasploit: Meterpreter – In Progress

Whitepapers

• Insider Threat Statistics: (2024’s Most Shocking Trends)

Videos

Articles

• Vulnerability Allowed Eavesdropping via Sonos Smart Speakers – Sonos has patched vulnerabilities in its smart speakers, including a serious flaw that could have been exploited to eavesdrop on users.
• Almost unfixable “Sinkclose” bug affects hundreds of millions of AMD chips – Worse-case scenario: “You basically have to throw your computer away.”
• Hackers leak 2.7 billion data records with Social Security numbers – Almost 2.7 billion records of personal information for people in the United States were leaked on a hacking forum, exposing names, social security numbers, all known physical addresses, and possible aliases.
• Inside the “3 Billion People” National Public Data Breach – the data contains first and last names, addresses and SSNs
• We received internal Trump documents from ‘Robert.’ Then the campaign confirmed it was hacked. – The campaign suggested Iran was to blame. POLITICO has not independently verified the identity of the hacker or their motivation.
• The nation’s best hackers found vulnerabilities in voting machines — but no time to fix them – Organizers and participants at the DEF CON Voting Village found cyber vulnerabilities in everything from voting machines to e-poll books, but there is no time before the November elections to fully implement their findings.
• Google Disrupts Iranian Hacking Activity Targeting US Presidential Election – Google says it blocked Iranian APT42 hackers from accessing the personal email accounts of individuals affiliated with the US elections.
• Russian Sentenced to Prison in US for Selling Stolen Information – Georgy Kavzharadze was sentenced to prison in the US for selling stolen financial, login, and personal information on an online cybercriminal marketplace.
• UK Royal Family, Prime Minister Deepfakes Make Rounds on Meta – According to the researchers, roughly 250 fake advertisements appeared on platforms like Facebook and Instagram, and some are reportedly still up and running.
• Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat Despite MFA – SecurityWeek spoke with Mike Britton, CISO at Abnormal Security, to understand what the company has learned about current social engineering and phishing attacks.
• DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals – The comprehensive Gcore Radar Report for the first half of 2024 provides detailed insights into DDoS attack data, showcasing changes in attack patterns and the broader landscape of cyber threats. Here, we share a selection of findings from the full report.
• Elon Musk Says Cyberattack Crashed Site Ahead of Trump Livestream Interview – Elon Musk says a cyberattack impacted a livestream interview with US Presidential candidate Donald Trump on the X social media platform.

Podcasts

Every week I publish interesting articles and ways to improve your understanding of cybersecurity. This week learn about the 38-year-old from Nashville, running a “laptop farm” to help get North Koreans remote jobs with American and British companies.

Projects

• TryHackMe – Metasploit: Exploitation – Complete
• TryHackMe – Metasploit: Meterpreter – In Progress

Whitepapers

• Common Sense Guide to Mitigating Insider Threats, Seventh Edition

Videos

https://youtu.be/1xkFEd-_Ihk?si=SJ34lc3XeziPX_WE

Articles

• DOJ Charges Nashville Man for Helping North Koreans Get U.S. Tech Jobs – The U.S. Department of Justice (DoJ) on Thursday charged a 38-year-old individual from Nashville, Tennessee, for allegedly running a “laptop farm” to help get North Koreans remote jobs with American and British companies.
• INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore – INTERPOL said it devised a “global stop-payment mechanism” that helped facilitate the largest-ever recovery of funds defrauded in a business email compromise (BEC) scam.
• Thousands of Devices Wiped Remotely Following Mobile Guardian Hack – Hackers targeted MDM firm Mobile Guardian and remotely wiped thousands of devices, but there is no evidence of data compromise.
• France’s Grand Palais discloses cyberattack during Olympic games – The Grand Palais Réunion des musées nationaux (Rmn) in France is warning that it suffered a cyberattack on Saturday night, August 3, 2024.
• Suspicious Minds: Insider Threats in The SaaS World – Everyone loves the double-agent plot twist in a spy movie, but it’s a different story when it comes to securing company data. Whether intentional or unintentional, insider threats are a legitimate concern. According to CSA research, 26% of companies who reported a SaaS security incident were struck by an insider.
• ADT confirms data breach after customer info leaked on hacking forum – American building security giant ADT confirmed it suffered a data breach after threat actors leaked allegedly stolen customer data on a popular hacking forum.
• USPS Text Scammers Duped His Wife, So He Hacked Their Operation – The Smishing Triad network sends up to 100,000 scam texts per day globally. One of those messages went to Grant Smith, who infiltrated their systems and exposed them to US authorities.
• Microsoft discloses Office zero-day, still working on a patch – Microsoft has disclosed a high-severity zero-day vulnerability affecting Office 2016 and later, which is still waiting for a patch.

Podcasts

Projects

• Metasploit: Introduction – Complete

Tools

• Cover Your Tacks – See how trackers view your browser

White Papers

• SANS 2024 Security Awareness Report

Videos

Articles

• Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails – An unknown threat actor has been linked to a massive scam campaign that exploited an email routing misconfiguration in email security vendor Proofpoint’s defenses to send millions of messages spoofing various popular companies like Best Buy, IBM, Nike, and Walt Disney, among others.
• Millions of Websites Susceptible to XSS Attack via OAuth Implementation Flaw – Salt Labs, the research arm of API security firm Salt Security, has discovered and published details of a cross-site scripting (XSS) attack that could potentially impact millions of websites around the world.
• CrowdStrike Outage Losses Estimated at a Staggering $5.4B – Researchers track the healthcare sector as experiencing the biggest financial losses, with banking and transportation following close behind.
• HealthEquity says data breach impacts 4.3 million people – HSA provider HealthEquity has determined that a cybersecurity incident disclosed earlier this month has compromised the information of 4,300,000 people.
• Former Avaya employee gets 4 years for $88M license piracy scheme – Three individuals who orchestrated a massive software pirating operation involving the sale of Avaya business telephone system software licenses worth over $88,000,000 have been sentenced to prison.
• Microsoft says massive Azure outage was caused by DDoS attack – Microsoft confirmed today that a nine-hour outage on Tuesday, which took down and disrupted multiple Microsoft 365 and Azure services worldwide, was triggered by a distributed denial-of-service (DDoS) attack.
• New Android malware wipes your device after draining bank accounts – A new Android malware that researchers call ‘BingoMod’ can wipe devices after successfully stealing money from the victims’ bank accounts using the on-device fraud technique.
• Company Paid Record-Breaking $75 Million to Ransomware Group: Report – Zscaler is aware of a company that paid a record-breaking $75 million ransom to the Dark Angels ransomware group.
• Google Chrome warns uBlock Origin may soon be disabled – Google Chrome is now encouraging uBlock Origin users who have updated to the latest version to switch to other ad blockers before Manifest v2 extensions are disabled.
• US sues TikTok for violating children privacy protection laws – The U.S. Department of Justice has filed a lawsuit against popular social media platform TikTok and its parent company, ByteDance, alleging widespread violations of children’s privacy laws.
• CrowdStrike sued by investors over massive global IT outage – Cybersecurity company CrowdStrike has been sued by investors who say it provided false claims about its Falcon platform after a bad security update led to a massive global IT outage causing the stock price to tumble almost 38%.
• U.S. Releases High-Profile Russian Hackers in Diplomatic Prisoner Exchange – In a historic prisoner exchange between Belarus, Germany, Norway, Russia, Slovenia, and the U.S., two Russian nationals serving time for cybercrime activities have been freed and repatriated to their country.
• Over 1 Million Domains at Risk of ‘Sitting Ducks’ Domain Hijacking Technique – Over a million domains are susceptible to takeover by malicious actors by means of what has been called a Sitting Ducks attack.

Podcasts

Every week I publish interesting articles and ways to improve your understanding of cybersecurity.

Projects

• Metasploit: Introduction – In Progress

Videos

Articles

• Vulnerability in Cisco Smart Software Manager lets attackers change any user password – Yep, passwords for administrators can be changed, too.
• Technical Details: Falcon Content Update for Windows Hosts – On July 19, 2024 at 04:09 UTC, as part of ongoing operations, CrowdStrike released a sensor configuration update to Windows systems. Sensor configuration updates are an ongoing part of the protection mechanisms of the Falcon platform. This configuration update triggered a logic error resulting in a system crash and blue screen (BSOD) on impacted systems.
• CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft – The global IT outage on Friday resulted from a sensor configuration update to CrowdStrike’s Falcon platform that caused a Windows logic error.
• Suspected Scattered Spider Member Arrested in UK – UK authorities have arrested a 17-year-old suspected of being a member of the Scattered Spider cybercrime gang.
• California Officials Say Largest Trial Court in US Victim of Ransomware Attack – The Superior Court of Los Angeles County, the largest trial court in the US, has been the victim of a ransomware attack.
• Fake CrowdStrike repair manual pushes new infostealer malware – CrowdStrike is warning that a fake recovery manual to repair Windows devices is installing a new information-stealing malware called Daolpu.
• CrowdStrike CEO Called to Testify to Congress Over Cybersecurity Firm’s Role in Global Tech Outage – U.S. House leaders are calling on CrowdStrike CEO George Kurtz to testify on widespread tech outage that services around the world.
• Verizon to pay $16 million in TracFone data breach settlement – Verizon Communications has agreed to pay a $16,000,000 settlement with the Federal Communications Commission (FCC) in the U.S. concerning three data breach incidents at its wholly-owned subsidiary, TracFone Wireless, suffered after its acquisition in 2021.
• Swipe Right for Data Leaks: Dating Apps Expose Location, More – Apps like Tinder, Bumble, Grindr, Badoo, OKCupid, MeetMe, and Hinge all have API vulnerabilities that expose sensitive user data, and six allow a threat actor to pinpoint exactly where someone is.
• CrowdStrike Explains Why Bad Update Was Not Properly Tested – CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing.
• AT&T failed to test disastrous update that kicked all devices off network – AT&T caused outage that blocked 92 million calls, 25,000 attempts to reach 911.
• Phone Lines Down in Multiple Courts Across California After Ransomware Attack – Phone lines down in multiple courts across California after ransomware attack on state’s largest trial court in Los Angeles County.
• Hackers Exploited a PC Driving Sim to Pull Off Massive Disney Data Breach – Popular for simulating car crashes, BeamNG.drive helped hackers crash the gate to Disney with the help of an unwitting manager.
• KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware – KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware.”

Podcasts

• Smashing Security 381: Trump assassination conspiracies, Squarespace account hijacks, and the butt stops here
• Smashing Security 382: CrowdStrike, Dark Wire, and the Paris Olympics

Every week I publish interesting articles and ways to improve your understanding of cybersecurity. I’m back and what a week it was for cybersecurity news!

Projects

• TryHackMe – John The Ripper – In Progress
• TryHackMe – Encryption – Crypto 101 – Complete

Videos

Articles

• Alabama State Department of Education Suffered a Data Breach Following a Blocked Attack – Alabama’s education superintendent disclosed a data breach following a hacking attempt on the Alabama State Department of Education.
• Ransomware Gang Leaks Data Allegedly Stolen from Florida Department of Health – The Ransomhub ransomware gang has claimed the theft of 100GB of data from the Florida Department of Health.
• CISA Takedown of Ivanti Systems Is a Wake-up Call – The exploitation of vulnerabilities in Ivanti’s software underscores the need for robust cybersecurity measures and proactive response strategies to mitigate risks and protect critical assets.
• Evolve Bank Data Breach Impacts 7.6 Million People – Evolve Bank says personal information of more than 7.6 million individuals was compromised in a ransomware attack.
• Hackers leak 39,000 print-at-home Ticketmaster tickets for 154 events – In an ongoing extortion campaign against Ticketmaster, threat actors have leaked almost 39,000 print-at-home tickets for 150 upcoming concerts and events, including Pearl Jam, Phish, Tate McCrae, and Foo Fighters.
• Neiman Marcus data breach: 31 million email addresses found exposed – A May 2024 data breach disclosed by American luxury retailer and department store chain Neiman Marcus last month has exposed more than 31 million customer email addresses, according to Have I Been Pwned founder Troy Hunt, who analyzed the stolen data.
• 10B Passwords Pop Up on Dark Web ‘RockYou2024’ Release – The passwords, dumped on a cyber-underground forum on July 4 by a hacker called “ObamaCare,” were collected from a variety of older and more recent breaches.
• Hacker Busted for ‘Evil Twin’ Wi-Fi That Steals Airline Passenger Data – Australian cops arrest man found with a portable Wi-Fi access device in his carry-on luggage, allegedly used for standing up scam Wi-Fi networks on flights.
• Formula 1 governing body discloses data breach after email hacks – FIA (Fédération Internationale de l’Automobile), the auto racing governing body since the 1950s, says attackers gained access to personal data after compromising several FIA email accounts in a phishing attack.
• Proton launches free, privacy-focused Google Docs alternative – Proton has launched ‘Docs in Proton Drive,’ a free and open-source end-to-end encrypted web-based document editing and collaboration tool.
• City of Philadelphia says over 35,000 hit in May 2023 breach – The City of Philadelphia revealed that a May 2024 disclosed in October impacted more than 35,000 individuals’ personal and protected health information.
• 5 Tips to Minimize the Costly Effects of Data Exfiltration – The more sensitive data an organization collects, the more at risk it is to a cyberattack. Here’s how to limit the damage.
• Fujitsu says “advanced” malware was to blame for cyberattack, confirms customer data leaked – It wasn’t ransomware, since the malware tried hard to remain hidden
• Advance Auto Parts: 2.3M people’s data accessed when crims broke into our Snowflake account – Letters from CISO Ethan Steiger suggest the data related to job applications
• Massive AT&T data breach exposes call logs of 109 million customers – AT&T is warning of a massive data breach where threat actors stole the call logs for approximately 109 million customers, or nearly all of its mobile customers, from an online database on the company’s Snowflake account.
• Rite Aid confirms data breach after June ransomware attack – Pharmacy giant Rite Aid confirmed a data breach after suffering a cyberattack in June, which was claimed by the RansomHub ransomware operation.
• Australian Spycatchers Snatch Pair of Married Russian Operatives – Both are accused of espionage and face a maximum penalty of 15 years imprisonment each for their crimes.

Podcasts

• Smashing Security – 379: Private nights, evil twins, and crypto home invasions