Loading summary
Transcript1 lines
- [00:04]
A
A worm hits vs code users F5 was breached via its own devices back in 2023. Career Telecom's CEO says he'll resign following a recent security breach, and the Boy Scouts will award cybersecurity merit badges. This is the Risky bulletin prepared by Catalyn Kim Panu and read by me, Claire airdrop. Today is the 22nd of October and this podcast episode is brought to you by Dropzone. In today's top story, a visual studio codeworm is targeting the developer community. The Glass Worm malware spreads using VS Code extensions distributed in the official and open VSX marketplaces. The malware's primary aim is to steal Funds. It supports 49 different cryptocurrency wallet apps. It also collects GitHub, NPM and OpenVSX credentials to inject itself into other extensions and libraries. Coy Security says the worm uses the blockchain for command and control and has Google Calendar as a backup. It also uses unprintable Unicode characters to complicate analysis. In other news, a recently reported breach at F5 began earlier than initially thought. The breach was discovered in August this year, but Bloomberg says the US tech company was initially compromised in 2023. The hackers exploited a vulnerability in the company's own products. Shortly after the intrusion was discovered, the company ended support for its big IP Next product. The CEO of Korea Telecom says he will resign following an investigation into a recent security breach. Hackers stole almost $170,000 from customer accounts via the company's micropayments platform. The thefts have been traced to fake mobile towers installed that harvested customer information. Kim Yongsub told reporters he intends to take responsibility for the breach, which will include stepping down. A former developer for an American surveillance vendor was targeted with iOS spyware. Jay Gibson developed iOS exploits for trenchant after he left the company. He says Apple warned him he was a victim of an attack with mercenary Spyware. He told TechCrunch he was fired after being unfairly blamed for a leak of sensitive documents from the company's Chrome exploits team. The Russian government is considering the introduction of online age verification checks. Russian Internet users may soon be required to show government ID to access certain websites. The age checks will be enforced on websites with adult content, violence, profanity, propaganda or antisocial behaviour. Hackers have leaked further data about US government officials, including staff from the nsa. The group's initial leak at the weekend included data from the Department of Homeland Security and the Department of Justice. The additional data covers staff from the US Air Force Defence Intelligence Agency, the Federal Trade Commission, Federal Aviation Administration Centres for Disease Control and Prevention and the Bureau of Alcohol, Tobacco, Firearms and Explosives. The personal details of 17 Israeli senior military scientists have been leaked. The Handala hacking group accused the individuals of helping to build Israel's armed forces. A week earlier, handala also doxxed 15 Israeli officials it accused of war crimes. Previous reporting has linked the group to Iranian intelligence services. Japanese office supply company Ascool has halted online orders following a cyber attack. Several small retailers that depend on askl have also suspended online orders. The ransomware attack occurred on Sunday. Hackers have gained access to 1,600 customer email accounts from Australian telco Dodo. The INC incident occurred on Friday and led to at least 34 cases of SIM swapping attacks against Dodo mobile accounts. The company has shut down its email system to prevent further attacks. Hackers have stolen $3.44 million worth of crypto from Defi platform Typus Finance. Last week, hackers exploited a vulnerability to drain funds from one of its smart contracts. Typus says it filed a police report less than two hours after the hack. A man's been sentenced to 24 weeks in a UK prison for spamming London underground commuters with an SMS blaster. The British Transport Police arrested 31 year old Kong Ji Chen in July after he was seen loitering in metro stations without actually taking any trains. He was carrying an SMS blaster inside a large green suitcase. Chen initially claimed he did not know what was in the suitcase he'd been given. He later pleaded guilty. A 25 year old has been arrested in Belarus over running a cybercrime service that registered and traded bank accounts. The service had more than 1,700 users who registered bank accounts in different regions and sold access to them on the platform. Bank accounts were registered across several former Soviet states and used to launder stolen funds. More than 70 individuals were detained in the operation. Meta has suspended more than 8 million Facebook and Instagram accounts linked to online scams this year. The company has linked the accounts to scam compounds in Myanmar, Laos, Cambodia, the UAE and the Philippines. Last year, the company suspended 2 million accounts linked to scam compounds. A cluster of malicious Chrome extensions is injecting code into the WhatsApp web client to send spam messages. The cluster includes 131 extensions with an install base of almost 21,000. Their campaign is primarily targeting Brazilian users. Socket Security says it notified Google, but the extensions are still available in the Chrome Web Store. A vulnerability in the Better Auth authentication framework allows attackers to mint API keys with elevated privileges for any user. The vulnerability is in a plugin used for building systems where users log in using API keys. According to zeropath, exploitation involves a single unauthenticated post request. Multiple unpatched vulnerabilities are exposing users of Canadian router vendor Mercu. The bugs can allow attackers to reset passwords and run malicious code on the devices. A security researcher notified the company of the flaws a year ago, but they remain unpatched. Researchers also notified the company that its support portal had been hacked in June last year, but did not receive a response. And finally, Scouting America has announced two new merit badges for AI and cybersecurity achievements. Members can gain the badges by passing the organization's new AI and cybersecurity training courses. Boy Scouts can receive the cybersecurity badge by learning how to spot malware and phishing emails, setting strong passwords and using firewalls. And that is all for this podcast edition. Today's show was brought to you by our sponsor, DropZone. Find them at DropZone AI thanks to your company. Sam.