Catalin Cimpanu
According to two reports, Google has allegedly sent an email to some customers to notify them that the company is legally bound to provide some of their confidential data to the US government in the case of investigations.
I honestly thought everyone already knew this, but nice from Google to notify users of it.
Catalin Cimpanu
HotNews[.]ro, one of the largest and most popular news sites in Romania, has been flooded with pro-Russian troll comments for the past two years.
Those comments were usually downvoted and auto-collapsed by other user's votes, who obviously knew what was happening.
The site recently redesigned its comments system to remove the ability to downvote comments and the entire user comments section is just Putin praisers and stupid unrelated anti-EU and "woke liberals" type of comments now
Catalin Cimpanu
@zeljkazorz @GossiTheDog was about to ask the same
Is this related to last year's breach? Did it take some time to find and thrown them out of MSRC?
Catalin Cimpanu
@rvps2001 I'm specifically interested in a non-Ukrainian source. Have you seen anything on RU Telegram channels or VK?
Catalin Cimpanu
I could not find any second source for this. Nobody in Russia seems to be complaining about ATMs being down.
Anyone else with a better view has any clues/evidence this actually took place?
Catalin Cimpanu
What MSM is focusing on after the CrowdStrike outage:
Automatic updates are bad!
...le sigh! :jennpls: :pensive_party_blob:
Catalin Cimpanu
@GossiTheDog how is it?
I've heard loads of people s**t on the game but without providing any actual coherent reason
Catalin Cimpanu
So apparently there was a fifth crypto-service that got hit by the Squarespace DNS hijacks who never disclosed the incident.
I looked at their site and social media sites to discover I actually blocked them on Twitter for spamming my tweets.
Yeah... looks like a legit business indeed! Much transparent, much trustworthy! :thinkerguns:
Catalin Cimpanu
Security researcher Evan Ikeda has published details and a PoC for an SSF vulnerability in the Havoc C2 server, a toolkit commonly used by threat actors to host malware command and control servers
https://blog.chebuya.com/posts/server-side-request-forgery-on-havoc-c2/
Catalin Cimpanu
Cloudflare says 6.8% of all the traffic it sees is malicious and needs to be mitigated
https://blog.cloudflare.com/application-security-report-2024-update
Catalin Cimpanu
Yesterday's Europol Operation Morpheus appears to have taken out ~25% of known malicious Cobalt Strike servers
Catalin Cimpanu
Recorded Future says law enforcement can use infostealer logs to track down users who visit CSAM sites and uncover their identities based on their other credentials
That's actually pretty damn smart
https://www.recordedfuture.com/caught-in-the-net-using-infostealer-logs-to-unmask-csam-consumers
Catalin Cimpanu
Microsoft says it will issue CVEs for security issues in its cloud services
https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/
Example CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35260
Catalin Cimpanu
Meta tried to discredit researchers who identified fraudulent ads in its platforms
Catalin Cimpanu
It's time companies... do it!
Catalin Cimpanu
FCC passes rules to require broadband providers to file confidential reports on BGP defenses they have or plan to use
https://www.fcc.gov/document/fcc-proposes-internet-routing-security-reporting-requirements
Catalin Cimpanu
Cisco has rolled out patches for the Webex application to fix a bug that allowed unauthorized access to Webex meetings and metadata information.
The company says the bugs were exploited by security researchers at the end of May.
Cisco is notifying customers who had their data collected during the research.
Catalin Cimpanu
Security researcher Alexander Hagenah has released TotalRecall, a tool that extracts and displays data from the Recall feature in Windows 11.
Catalin Cimpanu
How about you f*** off instead
Catalin Cimpanu
Microsoft not saying a peep about the Recall privacy scandal is a huge tell of how much the company is focused on security
We should have had a statement by now that Recall is either re-engineered or removed
Cybersecurity reporter for Risky Business#infosec #cybersecurity #security
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.