<img src="https://secure.ruth8badb.com/159098.png" alt="" style="display:none;">

IT Security Newsletter - 5/30/2023

SHARE

Top News

Huge Tesla leak reveals thousands of safety concerns, privacy problems

The German publication Handelsblatt is in possession of more than 23,000 internal files and documents from Tesla after an employee leaked the data. The files include personal information on more than 100,000 current and former employees, as well as thousands of reports of problems with Tesla's advanced driving assistance systems, Autopilot, and "Full Self-Driving." The earliest complaints in the data trove date back to 2015, and the most recent to March 2022. READ MORE...

Breaches

Industrial Giant ABB Confirms Ransomware Attack, Data Theft

Swiss industrial giant ABB confirmed this week that it was recently targeted in a ransomware attack and that the cybercriminals exfiltrated some data. The company has issued a press release and an FAQ describing the incident, with many details - including indicators of compromise (IoCs) - being withheld due to the ongoing law enforcement investigation. READ MORE...

Hacking

New hacking forum leaks data of 478,000 RaidForums members

A database for the notorious RaidForums hacking forums has been leaked online, allowing threat actors and security researchers insight into the people who frequented the forum. RaidForums was a very popular and notorious hacking and data leak forum known for hosting, leaking, and selling data stolen from breached organizations. Threat actors who frequented the forum would hack into websites or access exposed database servers to steal customer information. READ MORE...

Malware

Alien versus Predator? No, this Android spyware works together

The Android Predator spyware has more surveillance capabilities than previously suspected, according to analysis by Cisco Talos, with an assist from non-profit Citizen Lab in Canada. Predator and its loader Alien have been around since at least 2019, and are part of a larger suite developed by Cytrox, now called Intellexa. The software, which is designed to spy on and extract data from the devices it's slipped into, is available for Google Android and Apple iOS. READ MORE...


New York county still dealing with ransomware eight months after attack

The fallout from an eight-month-old cyber attack on a county in Long Island, New York has devolved into mud-slinging as leaders try to figure out just what is going on. Suffolk County was hit with a ransomware attack in early September 2022, which led county executive Steve Bellone to issue nine separate emergency declarations, Long Island publication Newsday said - the most recent of which was enacted earlier this month. READ MORE...

Information Security

Phishing Domains Tanked After Meta Sued Freenom

The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta, which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while monetizing traffic to those abusive domains. Freenom is the domain name registry service provider for five so-called "country code top level domains." READ MORE...


Travel-Themed Phishing, BEC Campaigns Get Smarter as Summer Season Arrives

As the summer holiday season draws near, phishing scams with travel-themed lures have been gaining momentum, posing a significant challenge to individuals and organizations. A recent survey from McAfee found that nearly a third (30%) of adults have fallen victim or know someone who has fallen victim to an online scam when bargain hunting for travel deals, with a full two-thirds of victims losing up to $1,000. READ MORE...

Exploits/Vulnerabilities

How Safe Is Your Wearable Device?

In 2018, 34-year-old Bobbi Leverette was lying in bed beside her newborn baby when her heart suddenly took on a rapid, life-threatening rhythm. Fortunately, following an earlier diagnoses of a dangerous heart condition, she had been fitted with a wearable defibrillator, which detected her irregular heart pattern and administered a shock treatment that saved her life. Although wearable devices save lives, attacks on wearables are on the rise. READ MORE...


Clever 'File Archiver In The Browser' phishing trick uses ZIP domains

A new 'File Archivers in the Browser' phishing kit abuses ZIP domains by displaying fake WinRAR or Windows File Explorer windows in the browser to convince users to launch malicious files. Earlier this month, Google began offering the ability to register ZIP TLD domains, such as bleepingcomputer.zip, for hosting websites or email addresses. Since the TLD's release, there has been quite a bit of debate over whether they are a mistake and could pose a cybersecurity risk to users. READ MORE...

Encryption

Green hills forever: Windows XP activation algorithm cracked after 21 years

It has never been too hard for someone with the right amount of time, desperation, or flexible scruples to get around Windows XP's activation scheme. And yet XP activation, the actual encrypted algorithm, loathed since before it started, has never been truly broken, at least entirely offline. Now, far past the logical end of all things XP, the solution exists, floating around the web's forum-based backchannels for months now. READ MORE...

On This Date

  • ...in 1908, Mel Blanc, the original voice of Bugs Bunny, Daffy Duck, and dozens of other cartoon characters, is born in San Francisco, CA.
  • ...in 1911, Ray Harroun wins the first Indianapolis 500, pioneering the use of a rear-view mirror to spot approaching competitors.
  • ...in 1922, the Lincoln Memorial is dedicated in Washington, D.C. by former President William Howard Taft.
  • ...in 1989, student demonstrators in Beijing's Tienanmen Square unveil a 33-foot statue depicting the "Goddess of Democracy," constructed of foam and papier-mache.