← Risky Bulletin
Loading summary
Transcript1 lines
- [00:04]
A
Two YouTube channels help dismantle a Chinese scam operation Cloudflare, Zscaler and Palo Alto disclose Salesloft related breaches A ransomware attack disrupts vehicle production at Jaguar Land Rover and we have a new record DDoS attack. This is the risky bulletin prepared by Catalan Kim Panu and read by me, Claire Aird. Take today is the 3rd of September and this podcast episode is brought to you by Push Security. In Today's top story, two YouTube scam baiting channels have helped dismantle a fraud ring. U.S. authorities have charged 28 suspects and arrested 25 of them last week in California, New York, Texas and Michigan. Chinese citizens who were in the US illegally were among the suspects. The group allegedly stole more than $65 million, much of it from retired Americans. They worked with call centres in India, China to trick victims into sending funds to the group's money mules. Videos recorded by the YouTube channel Scammer Payback and Trilogy Media played a key role in identifying the group's members. In other news, more victims of last month's Salesloft hacked are notifying their customers. They include security firms Cloudflare, Tenable, Zscaler, Palo Alto Networks, Spy Cloud and Tanium, along with SaaS platforms package PagerDuty and Exclaimer and cloud platform Cloudinary. The attackers stole authentication tokens used by SalesLoft's Drift AI system to access data on other platforms. The attackers then accessed customer data and attempted to identify even more authentication tokens to continue moving between cloud systems. A ransomware attack has disrupted vehicle production at UK automaker Jaguar Land Rover. Retail activities have also been impacted. No threat actor has taken credit for the attack, yet the us, Australia and New Zealand have tested a new cyber defence kit. The new Joint Cyber Hunt kit is a collection of equipment and software designed to identify network intrusions. The kits are operated by a nine person team and are intended to be easily moved and deployed when needed. The US is expected to purchase the first systems later this year. The U.S. department of Homeland Security has reactivated a contract with Israeli surveillance vendor Paragon Solutions. The contract was put on hold last October by the Biden administration. Paragon will provide its hacking tools to the Cyber division of the Homeland Security Investigations Unit. The contract is worth $2 million. Cloudflare says it mitigated a new record DDoS attack of 11.5 terabits per second. The attack was more than 50% larger than the previous record. Cloudflare says most of the traffic came from Google Cloud and lasted only 35 seconds. Chinese company TP Link has failed to patch a vulnerability in its routers for more than a year. The bug is in its implementation of the protocol that Internet service providers use to manage routers at customer premises. Known as TR069, the flaw lets attackers remotely take over the routers. TP Link was notified about the bug in May last year, but has yet to release a patch. American industrial cooling systems company Copeland has released a firmware Update to fix 10 vulnerabilities. The company's compliance components are used to manage H Vac and refrigeration systems. The vulnerabilities were discovered by security firm Armis. Two of the critical flaws allow remote control through predictably generated passwords. This access can be used to sabotage refrigeration systems and disable emergency functions. And finally, hackers have stolen $8.4 million worth of crypto assets from decentralized exchange platform Bunny. The company paused transaction processing on Tuesday when, while it investigates the hack, the exploit targeted security vulnerabilities in the platform's Ethereum smart contracts. And that is all for this podcast edition. Today's show was brought to you by our sponsor, Push Security. Find them@PushSecurity.com thanks for your company.