Loading summary
Transcript1 lines
- [00:04]
A
Norway finds remote control features in its Chinese electric buses the U.S. cyber Corps program may saddle students with debt. Edge and Chrome get AI based scareware blockers and a Conti member has been extradited to the us. This is the risky bulletin prepared by Catalyn Kim Panu and read by me, Claire aird. Today is the 3rd of November 18th and this podcast episode is brought to you by Sublime Security, an email security platform that's not a black box in today's top story, Norway is concerned its Chinese made electric buses could be remotely disabled. During an audit, Oslo's public transportation agency found that its buses from Chinese carmaker Utong had remote control capabilities. The features were identified in the software diagnostics, module and battery systems. Similar features were not found in electric buses that were made in the Netherlands. Oslo's public transportation agency operates more than 300 Utong buses. Another 550 are used elsewhere in Norway. Participants in a US program that trains cybersecurity experts may be faced with debt due to a lack of government jobs. The U.S. cyber Corps program was established 25 years ago. It provides free cybersecurity training on the condition that students work for the government for a set period of time once completed. Cyberscoop reported that many participants Governments have had job offers rescinded this year following federal budget cuts and hiring freezes. If students do not get a government job, they're required to repay the costs. Russian telecom operators are blocking calls and SMS messages used for two factor authentication. The block is affecting logins and new user sign ups to Telegram and WhatsApp. In August, Russia started blocking voice calls in the apps it's also attempting to control in app messaging. Germany is considering using public funds to pay Deutsche Telekom to replace Huawei gear. The costs could exceed 2 billion euros. Most NATO allies have blocked Huawei from their telecommunications networks. Iranian hackers have leaked the names of employees at a major Israeli defence contractor, the Cybertufan Group said it breached Maya Defence in early 2024. As well as employee names and photos, the group also released internal docum and CCTV footage from inside factories. Maya Defence makes drones, missiles and launch systems for the Israeli government. Hackers have stolen $10.8 million worth of crypto assets from the Garden Defi platform. The hack occurred on Friday. The company has offered the attacker a 10% bounty to return the stolen assets. More than a quarter of Garden's activity has been linked to crime, such as laundering funds hacked from other platforms. Microsoft has added a new security feature to its Edge web browser. The scareware Blocker uses a local computer vision model to block full screen pop ups and fake warnings. The feature was added in Edge version 142. It will only run on systems with more than 2 gigabytes of RAM and 4 CPU cores. A similar system that uses an LLM to detect scams was added to Chrome last week. A Ukrainian man has been extradited to the US to face hacking charges related to the Conti ransomware. Alexi Alexeyevich Litvin Nenko was arrested in Ireland in 2023. The 43 year old was allegedly a member of the gang for two years. From 2020, Thai authorities have arrested 24 individuals accused of online scamming. 21 of the suspects are Filipino nationals. Officials say the scammers were operating near Bangkok. They fled from Myanmar following a crackdown on compounds last month. Meantime, Cambodian Authorities have arrested 111 people following a raid at a scam compound in the country's capital. Most of the suspects were Indonesian nationals, officials said. The raid is part of a larger crackdown on cyber scam operations. Singaporean authorities have seized $115 million in assets belonging to a Cambodian scam compound operator, the Prince Holding Group and its founder, Chen Ji Was was sanctioned last month by the US Treasury. The group ran scam compounds in Cambodia, where it used kidnappings and threats of violence. Seized assets included bank accounts, 11 cars, six properties and one yacht. An Arizona man faces multiple charges for leading the 764 online terror network. Baron Kane Martin has been accused of extorting children for sexual content, running a murder for hire operation and animal torture. He was arrested in December last year. The 764 community is an officer offshoot of the. Com online crime community. Australia's federal police has created two new cyber task forces. Task Force Pompolid will target online networks that exploit young children to produce violent or extremist materials. Task Force Thunder will focus on cybercrime across the Pacific region. An elderly Canadian couple has lost $1 million to online scammers. The couple, in their 70s, fell victim to a tech support scam that showed error messages on their laptop. The scammers called the couple daily for five months, posing as Canadian authorities. The scammers convinced the victims to purchase gold from a fake investment portal and transfer Bitcoin via ATMs. More than 400 Cisco iOS XE routers across Australia have been infected with malware. Owners of the hacked routers had failed to deploy a 2023 security update. The update patched a zero day that was abused by the Chinese cyber Espion Group. Salt Typhoon, Australia's cybersecurity agency, says exploitation was still ongoing last month. And finally, a recent Linux privilege escalation vulnerability is being exploited in the wild by a ransomware group. The attacks leverage a 2024 vulnerability in the nftable's kernel component to gain root access. Attacks have been confirmed by cisa. It's not known which group is using the bug. And that is all for this podcast edition. Today's show was brought to you by our sponsor, Sublime Security. Find them at subl.security thanks to your company.