← Risky Bulletin
Loading summary
Transcript1 lines
- [00:04]
A
The Senate confirms a new Cybercom and NSA chief the US will establish an Interagency Cyber Unit, the UK's online crime centre will launch in April and the Karuna iOS hacking kit was the work of L3Harris. This is the Risky bulletin prepared by Catalyn Kim Panu and read by me, Claire Aird. Today is the 11th of March and this podcast episode is brought to you by Thinxt, the makers of the much loved Canary. In today's top story, the U.S. senate has confirmed Army Lt. Gen. Joshua M. Rudd as the next head of Cyber Command and the National Security Agency. He was confirmed in a 7129 vote on Tuesday. He'll replace Army Lt. Gen. William Hartman, who's been serving as interim chief for both agencies. Both Cybercom and the NSA have been without a congressionally approved leader since last year. President Donald Trump fired Air Force General Timothy Hawke in April. In other news, the Trump administration says it will establish an interagency body to combat foreign hackers targeting the us. The group will focus on offensive cyber operations. It'll include representatives from the Pentagon, the FBI and the Justice Department. It'll follow principles set out in the US Cyber Strategy released last week. The document greenlights the use of private security firms for offensive cyber operations. Meanwhile, the UK is also launching an interagency body, this one dedicated to fighting online fraud. From April, the online crime centre will focus on fraud and high volume cybercrime. It'll be led by the Home Office and the National Crime Agency and will have a budget of £31 million. The OCC will work with telecoms and tech platforms to detect and block fraud operations. Canadian federal agencies take an average of eight months to report privacy breaches despite the country's state seven day reporting requirement. Some took more than four years to report incidents to the Canadian Privacy Commissioner. Canada introduced the seven day reporting requirement in 2022. The province of Alberta, Canada has allocated $40 million to update the software used to provide government services. Officials say as many as 66 legacy applications need security updates. The funding follows a recent spike in cyber attacks. A breach of the Western Australian government's Microsoft 365 environment has been traced back to poor security controls. A report from the state's auditor found that government agencies used legacy authentication methods, weak MFA and have failed to enable dlp. This led to the data of residents being stolen and leaked in 2024. Hackers also stole 71,000 Australian dollars from a state account following a BEC attack. Colombia's election agency was hit by cyber attacks during Sunday's parliamentary elections. Officials did not provide specifics about the attacks. Government officials also reported websites impersonating the agency and publishing fake election Results. The Karuna iOS exploit kit documented by Google last week has been linked to American company L3Harris. Two former employees told TechCrunch that that Karuna was created, at least in part, by L3Harris subsidiary Trenchant. In February, former Trenchant executive Peter Williams was sentenced to seven years in prison for selling his employer's exploits to a Russian zero day broker. TechCrunch did not confirm that Karuna was the specific set of exploits that Williams sold. Software vulnerabilities have overtaken weak credentials as the leading entry point into Google Cloud environments for the first time, the company says almost half of intrusions in the Latter Part of 2020 were attacks against third party software running on customer cloud servers. Since Google began tracking these stats two years ago, compromised customer instances have largely been attributed to weak or missing passwords. Threat actors are using a modified security tool to steal sensitive data from Salesforce customers. The attacks leverage a version of Aura Inspector, a Salesforce scanner that was developed by Google Mandiant. Salesforce says hackers are using the tool to scan the Internet for misconfigured experience cloud servers. The attackers also modified the tool with new features to automate the theft of customer data. Hackers are exploiting a new authentication bypass vulnerability in Ivanti's endpoint Manager platform. The flaw was patched in early February. On Monday, CISA added the vulnerability to its database of actively exploited bugs after receiving reports of ongoing attacks. It was one of three bugs added to the Kev list this Google has patched nine vulnerabilities in the Looker Studio business intelligence tool. The vulnerabilities could have allowed attackers to steal data from other businesses. The flaws were in database connectors that feed data into the service. Russia has launched a campaign to Compromise Signal and WhatsApp accounts of foreign diplomats and military personnel. Dutch intelligence agencies have confirmed attacks against its country's officials. The attacks attempt to trick victims into sharing device pairing codes. Those codes are later used to grant access to victims accounts to spy on their communications. A new botnet has infected more than 14,000 devices since August. Devices infected with the CADNET botnet are sold via an anonymous residential proxy service named Doppelganger. According to Lumen's security team, most of the infected devices are ASUS routers. HivePro researchers have discovered what appears to be the first cryptocurrency clipboard hijacker that targets Linux users. The malware named clipx daemon works in a similar way to Windows alternatives. It intercepts the operating system copy paste clipboard and replaces cryptocurrency addresses with ones controlled by an attacker. And finally, Microsoft will turn on Windows Hot Patching for all eligible devices in May. The feature installs security updates without requiring a reboot. The company launched Hot patching for Windows 11 last year, and that is all for this podcast edition. Today's show was brought to you by our sponsor, thinxt. Find them at Canary Tools. Thanks for your company.