← Risky Bulletin
Loading summary
Transcript1 lines
- [00:04]
A
China bans Israeli and US cybersecurity products Sean Planky is renominated for CISA Director Ram Price hikes are likely to impact the cost of firewalls and lumen sinkholes. The Kim Wolf DDOS Botnet this is the Risky bulletin prepared by Catalyn Campanu and read by me, Amberly Jack Today is January 16th and this podcast episode is brought to you by cloud security company Prowler. In today's top story, China has instructed local companies to stop using cybersecurity products from some American and Israeli vendors, according to Reuters. VMware, Fortinet, Palo Alto Networks and Check Point are included in the list of banned companies. Officials cited national security concerns for the restrictions. Russia is doubling fines for selling unregistered SIM cards. A new bill will increase the penalty to 1 million rubles, or $13,000. Last year, Russian telcos began collecting SIM card owner data to counter their use in Ukrainian drones. The US Department of Homeland Security will launch a new program to help secure critical infrastructure. The alliance of National Councils for Homeland Operational Resilience, or anca, is set to replace the former Critical Infrastructure Partnership Advisory Council, or cpac. The DHS shut down CPAC last year. Anchor will serve as a communications hub between the public and private sectors and will help operators defend against threats. The Trump administration has re nominated Sean Planke for the role of CISA director. Planki was nominated for the position last year but did not complete the confirmation process in the Senate. Both Democratic and Republican senators blocked the previous appointment. The U.S. senate has passed a bill allowing victims of non consensual deepfake pornography to sue those who produced or distributed the material. The Defiance act passed unanimously. The bill has also been introduced in the US House with multiple sponsors from both parties. A recent spike in RAM prices is expected to impact the firewall industry. Firewall prices are predicted to increase this year due to doubling memory costs. Investment advisory firm Wedbush says firewall companies will see thinner margins in 2026. French telco Free Mobile has been fined 42 million euros over a 2024 data breach. The details of more than 5 million customers were exposed, including names, addresses and bank account numbers. The French privacy watchdog Sunil said the company failed to implement basic security measures and misled customers in its notification. Email Hackers have stolen data about more than 750,000 Canadian stock market investors. The incident was a result of a phishing attack in August last year. The Canadian Investment Regulatory Organisation is currently notifying affected individuals. A hacker has stolen data about school students in the Australian state of Victoria. The breach affects all current and former state school students. Stolen data includes names, email addresses and encrypted passwords. The names and personal details of more than 4,500 ICE agents have reportedly been leaked by an insider. The list includes names, work emails, phone numbers and positions. The data was released after the shooting of Renee Goode in Minneapolis last week. The leaked site was immediately targeted with DDoS attacks. Russian man Oleg Nevadov has been confirmed as the leader of the Blk Buster ransomware group. He was added to the EU's most wanted list by German authorities last week. Nevadov was arrested in Armenia in June 2024 but was released three days later. He then fled to Russia. In leaked chats from the ransomware group, Nevadov bragged about calling Russian officials to request passage home. Internet infrastructure company Lumen has Sinkholed more than 550 command and control servers for the Kinwolf DDoS botnet malware on almost 250,000 devices was cut off. Kimwulf reorganized after the takedown. At a fraction of its original size, the botnet is known for large scale DDoS attacks and the use of residential proxy infrastructure. Microsoft, together with law enforcement agencies, has shut down the Red VDS criminal marketplace. The site sold access to compromised RDP servers. The servers were then used to carry out phishing, BEC scams, account takeovers and other crimes. Police raids have taken place in Germany, but no arrests have been announced. The operator of the Steel Sea Info stealer has been identified as a Russian speaker living in an Eastern European country. Security firm Cyberark traced the operator after finding and exploiting vulnerabilities in the malware's infrastructure. The company's researchers found the bugs after analyzing the malware's source code, which was leaked early last year. The Node JS team has patched a memory exhaustion bug. The flaw allowed attackers to crash servers using large nested data structures. It was discovered by Vercel and impacts most Node JS applications, including Next js, Node JS frameworks and many performance monitoring tools. Shipping platform BlueSpark Global has patched several vulnerabilities in its BlueVoy X logistics service. The bugs could have allowed threat actors to access customer accounts and track freight shipments. The vulnerabilities allowed full access to the platform's API without the need to authenticate, which could then be used to create admin accounts. Mandiant has released a set of net NTLM V1 rainbow tables. They will help security researchers recover NTLM keys in less than 12 hours using consumer hardware. More than a dozen models of headphones and speakers are vulnerable to a flaw in the Google Fast Pair protocol. The Whisper Pair attack allows threat actors to hijack users Bluetooth accessories in certain scenarios. The attackers can also track the devices via the Google Find Hub. Google awarded the researchers $15,000 and notified device manufacturers. And finally, AI company Anthropic has donated $1.5 million to the Python Software Foundation. The funds will be used to improve the security of the Python ecosystem for projects like CPython and PYPY. That's all for this podcast edition. Today's show was brought to you by our sponsor, Prowler. Find them at prowler. Com. Thanks for your company.