Loading summary
Transcript1 lines
- [00:04]
A
The UK will bail out Jaguar Land Rover following its cyber attack. Hackers try to extort a ransom using children's photos, Dutch police arrest two teens over sniffing wi fi for Russian spies and a recent Go Anywhere MFT bug is being exploited. This is the risky bulletin prepared by Catalyn Kimpanu and read by me, Claire airdrop. Today is the 29th of September and this podcast episode is brought to you by Authentic in today's top story, the UK government will underwrite a 1.5 billion pounds loan guarantee to help Jaguar Land Rover recover from its recent cyber attack. The company's production lines halted in August when it was hit by ransomware. The shutdown is expected to continue into October. According to recent reports, the company did not have cyber insurance. In other news, the UK government is introducing a digital ID system. The IDs will be stored on people's phones. The scheme will be available to all UK citizens and legal residents. It will be mandatory for anyone seeking employment, as it will be used to confirm a person's eligibility to work in the country. Hackers have stolen the personal data of more than 8,000 children from a London nursery. A group Calling itself Radiant has has released photos and contact details of 10 children on the Dark Web. They're threatening to publish more unless the parent company, Keto International, pays a ransom. Keto operates nurseries and preschools in the US the uk, India and China. A hacker has breached a company that provides monitoring software for US Law enforcement. The software, from Texas company Remotecom, is used to track Internet, PC and smartphone activity of paroled individuals in 49 US states. A hacker using the name Wicked leaked data about police officers, parolees and the software itself. According to Straight arrow News, a U.S. attorney's office was given permission from the court to hack Telegram servers. The hack targeted an account linked to a child exploitation case. Courtwatch News did not provide further specific details, but said officials obtained permission through the court due to Telegram's general refusal to respond to law enforcement requests. A Moscow IT company has leaked sensitive documents about Russian payment company A7. According to the leaked files, the Kremlin used the A7 A5 crypto token to launder money from Russia into the West. This helped the Kremlin bypass sanctions, pay bribes and interfere in elections. The company has been tied to sanction Moldovan and Russian oligarch Ilan Shaw. Shaw fled Moldova after stealing $1 billion from the country's banking system and being sentenced to 15 years in prison. He's since been financing pro Kremlin parties in an attempt to overturn the country's pro EU leadership. Dutch authorities have arrested two teenagers accused of spying for Russia. The 17 year olds were allegedly recruited via Telegram and tasked with hacking related assignments. They were paid to walk past sensitive locations with a wifi sniffer. The locations included the Canadian Embassy as well as the headquarters of Europol and Eurojust. Cloudsec has discovered an underground operation that compromises routers and servers and rents them to other botnet operators. It's been spotted deploying payloads for DDoS and crypto mining botnets like Rondodocs, Mirai and Morte. Hackers are exploiting a recently patched vulnerability in fortragoanywhere file transfer servers. According to Watchtower Labs. The attacks began a week before patches were released. The deserialization vulnerability allows threat actors to run commands on remote systems. The vulnerability has a severity rating of 10. Fortra recently urged customers to take their admin consoles offline until they apply the patch. And finally, Unitree G1 humanoid robots are sending sensor and other telemetry data to servers in China without user consent. The data is collected every five minutes, according to a team of researchers who reverse engineered the robot's firmware earlier this month. A separate report also revealed Bluetooth vulnerabilities in the G1. Those flaws could be exploited to access customers internal networks. And that is all for this podcast edition. Today's show was brought to you by Authentic. Find them@goauthentic IO thanks to your company.