Troy Hunt

DECEMBER 23, 2023

It's that time of the year again, time to head from the heat to the cold as we jump on the big plane(s) back to Europe. The next 4 weekly updates will all be from places of varying degrees colder than home, most of them done with Scott Helme too so they'll be a little different to usual. For now, here's a pretty casual Christmas edition, see you next week from the other side 🙂 References Sponsored by: Unpatched devices keeping you up at night?

Mobile 229

Mobile Marketing 229

Security Affairs

DECEMBER 23, 2023

The LockBit ransomware claims to have hacked accountancy firm Xeinadin threatens to leak the alleged stolen data. The LockBit ransomware claims responsibility for hacking the Xeinadin accountancy firm and threatens to disclose the alleged stolen data. Xeinadin has over 60,000 clients across the UK and Ireland. In 2021, a significant endorsement came from Exponent, one of the leading private equity investors in the UK, propelling the firm to become one of the top 20 accountancy firms in the count

Accountability 141

Accountability Ransomware Data breaches Hacking 141

Penetration Testing

DECEMBER 23, 2023

OpenSSH, a critical component in secure networking, has recently faced a formidable challenge. A now-patched security vulnerability, with a CVSS score of 9.8, threatened the very core of its secure channel operations. Identified as... The post CVE-2023-51385 and CVE-2023-6004 – A Dual OpenSSH Threat appeared first on Penetration Testing.

Penetration Testing 136

Penetration Testing 136

Security Affairs

DECEMBER 23, 2023

Mobile virtual network operator Mint Mobile suffered a new data breach, threat actors had access to customers’ personal information. Mint Mobile experienced a recent data breach, exposing customers’ personal information to unauthorized access by threat actors. Mint Mobile is a mobile virtual network operator (MVNO) that offers prepaid mobile phone services.

Mobile 136

Mobile Data breaches Wireless Data collection 136

Advertisement

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

Software

Bleeping Computer

DECEMBER 23, 2023

A new Python project called 'Wall of Flippers' detects Bluetooth spam attacks launched by Flipper Zero and Android devices.

137

137

The Hacker News

DECEMBER 23, 2023

Two British teens part of the LAPSUS$ cyber crime and extortion gang have been sentenced for their roles in orchestrating a string of high-profile attacks against a number of companies. Arion Kurtaj, an 18-year-old from Oxford, has been sentenced to an indefinite hospital order due to his intent to get back to cybercrime "as soon as possible," BBC reported.

Cybercrime 102

Cybercrime 102

Security Boulevard

DECEMBER 23, 2023

Imagine standing at the entrance to a vault where your most valuable possessions are stored. The door doesn’t open with just one key; you need several to unlock it. That’s the essence of multi-factor authentication (MFA) in a nutshell. Instead of a single password, MFA requires multiple proofs of identity to grant access to digital … Best Practices in Multi-Factor Authentication for Enhanced Security Read More » The post Best Practices in Multi-Factor Authentication for Enhanced Security appeare

Authentication 69

Authentication Passwords 69

Security Boulevard

DECEMBER 23, 2023

Full Presenter List: Sophie Stephenson, Majed Almansoori, Pardis Emami-Naeini, Rahul Chatterjee Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott ; and via the organizations YouTube channel.

IoT 64

IoT Accountability Architecture Education 64

Security Boulevard

DECEMBER 23, 2023

Having found myself roped into assisting as co-administrator a couple of Facebook groups with security/privacy issues, I thought I should, perhaps, share what little I know about defending your group against scam and spam posts and comments by tightening up group settings. Caveat: I’ve never really wanted to spend a lot of time administering Facebook […] The post Group Therapy – security and privacy in Facebook groups appeared first on Security Boulevard.

Scams 59

Scams 59