← Risky Bulletin
Loading summary
Transcript1 lines
- [00:04]
A
China has breached all of Singapore's major telcos Microsoft announces two new security features A hacktivist leaks data from a stalkerware provider, and researchers map out GRU information warfare units based on their insignia. This is the risky bulletin prepared by Catalyn Kim Panu and read by me, Claire Airdrop. Today is the 11th of February, and this podcast episode is brought to you by Trail of Bits. In today's top story, a Chinese cyber espionage group has breached all four of Singapore's major telcos. The breaches occurred last year. Authorities spent 11 months evicting the hackers from the compromised networks. Singapore's Cyber Security Agency says the breaches used zero days in the telco's firewalls and rootkits to maintain persistence. The agency attributes the hack to a group it tracks as UNC388. The group regularly exploits networking and enterprise gear such as Fortinet, Juniper and VMware. In other news Microsoft will roll out two new security features in Windows 11. Baseline security mode will enable runtime integrity safeguards to prevent tampering or unauthorised changes. Windows user transparency and Consent will prompt users to allow apps access to sensitive resources. Intel has updated its CPU technology for confidential computing tasks. Version 1.5 of the Trust Domain extensions adds live migration and Trust domain partitioning. Both features support cloud vendors who want to protect user data while it's being processed. Google's security team cooperated with intel to audit the code before release. They identified 35 flaws, including one vulnerability that could have allowed full compromise of TDX execution environments. The flaws have been fixed. Discord is rolling out age verification checks in March. All users will be required to verify their age by taking a video selfie or uploading a government id until age is verified. Users will receive a teenage appropriate experience. In October, identity documents were stolen from a third party used by Discord for age verification. The Federal Trade Commission has sent warnings to 13 brokers who sold data about Americans to foreign adversaries. The companies are accused of failing to follow the U.S. protecting Americans Data from Foreign Adversaries act of 2024. The law forbids brokers from selling sensitive data to countries such as China, Russia, Iran and North Korea. A hacktivist has leaked more than 530,000 records from a Ukrainian stalkerware company, Structura. The data includes email addresses and partial payment information of people that bought spyware and phone tracking services. The hacktivist, who goes by the hand handle Wicked, has published the data on a hacking forum. Russia's Internet watchdog has restricted access to Telegram. Officials said the app has failed to crack down on fraud and terrorism. Russia previously blocked access to Telegram in August and October last year. In June, the Russian government launched its competing messaging app Max. Meantime, the Central bank of Russia will build a database to hold the financial information of every citizen. The the database will store details of citizens bank accounts and payment cards. Individuals will not be permitted to own more than 20 cards in total, with a limit of five cards per bank. The Indian government has launched a new offline age verification app. The app will use information from the country's Aadhaar biometrics database. It'll allow users to prove they're above a certain age without sharing their date of birth. The process is intended primarily for policing and hospitality. The Nigerian government is working on a national cyber security framework. It's expected to go live this year and will require companies to meet minimum cybersecurity requirements. Those include breach reporting timelines, threat intelligence sharing and response plans. A 29 year old has been arrested in Poland for hacking an electronics marketplace. His arrest comes eight years after he breached the market. Moreleigh the man has also admitted to leaking the personal details of more than 2 million users. Dutch police have detained a 21 year old on cybercrime charges. The suspect allegedly sold a phishing kit on Telegram that could intercept one time passwords named Joker otp. The kit called victims to ask for the code when attackers were trying to access accounts with valid credentials. A Chinese national has been sentenced in absentia to 20 years in a US prison for laundering funds from Cambodian cyberscam compounds. Darren Lee was part of a group that laundered more than $73 million through shell companies and international bank accounts. Lee is currently not in US custody. He was arrested in 2024, but last year he cut off his ankle monitor and fled the country. Russian authorities have granted political asylum to a Spaniard with connections to the no Name 057 hacktivist group Enrique Arias. Gil was placed on the EU's most wanted list in September. He is accused of running the Russian disinformer TE channel and promoting no names DDoS attacks to Spanish speaking audiences. Gil has filed paperwork to become a Russian citizen. Security researchers say they've used military unit patches to map the internal structure of Russia's information operations. Finnish security firm Check first analysed 118 photographs of insignia patches and military pennants. The Information operations troops were established in 2014 inside Russia's military intelligence service, the GRU. Check first ident identified units, their chains of command and facility locations. Check first also tracked down the FSB's SIGINT units based on their metals. And finally, adblocker vendors appear to have adopted Chrome's new manifest V3 extensions API. Goethe University in Frankfurt found no significant reduction in ad blocking effectiveness compared to manifest V2. Researchers also didn't find a noticeable difference in ad blocking efficiency on Chrome compared to Firefox. And that is all for this podcast. Ed Today's show is brought to you by our sponsor, Trail of Bits. Find them@trailerbits.com thanks for your company.