Insecure IT News: Recent Episodes
Branden Ushio
Jan 9, 2020
This is your Insecure IT News update for January 9, 2020. I am Branden Ushio
From Bleeping Computer: Google has removed over 1.7k app infected with the Joker Malware from the Play store. — https://www.bleepingcomputer.com/news/security/google-removed-over-17k-joker-malware-infected-apps-from-play-store/
From Dark Reading: Federally Funded low-income phones come preinstalled with unremovable Chinese Malware — https://www.darkreading.com/threat-intelligence/chinese-malware-found-preinstalled-on-us-government-funded-phones/d/d-id/1336771
From Threatpost: Ring said that four employees were fired because they for inappropriate access to customers' connected video feeds. — https://threatpost.com/four-ring-employees-fired-spying/151689/
From the Hacker News: Immediately update your free and open-source Firefox web browser to the latest version available on Mozilla's website. — https://thehackernews.com/2020/01/firefox-cyberattack.html
That is your insecure it news update for today and until next time: If you leave your computer unlocked expect your coworkers to change your wallpaper.
Get full access to Insecure IT News at insecureit.substack.com/subscribe
This is your Insecure IT News update for Jan 8, 2020, I am Branden Ushio
From InfoSecurity: Google has tweaked its Project Zero disclosure policy — https://www.infosecurity-magazine.com/news/google-shifts-90day-bug/
From The Hacker News: Tiktok SMS Vulnerability — https://thehackernews.com/2020/01/hack-tiktok-account.html
From Graham Cluley: Las Vegas Shutdown by Ransomware — https://www.grahamcluley.com/city-of-las-vegas-wakes-up-to-a-cyber-attack/
And this last story is a bit of a twofer and so
From Graham Cluely and Threatpost: Travelex is still down and they are dealing with it poorly — https://www.grahamcluley.com/travelex-ransomware/ https://threatpost.com/sodinokibi-ransomware-travelex-fiasco/151600/
That is your daily InsecureIT News update. If you would like to support the show head over to insecureitnews.com and subscribe to receive daily email briefings and until Next Time: 99 little bugs in the code, take one down, pass it around, 139 little bugs in the code
Get full access to Insecure IT News at insecureit.substack.com/subscribe
Jan 7, 2020
From Security Week: Google Has Released its first Patch Bulletin of 2020— https://www.securityweek.com/androids-january-2020-update-patches-40-vulnerabilities
From Naked Security: US Military Branches Ban TikTok— https://nakedsecurity.sophos.com/2020/01/07/us-military-branches-ban-tiktok-following-pentagons-warning/
From Threatpost: Facebook is fighting Deepfakes… Trust them— https://threatpost.com/facebook-cracks-down-deepfake-videos/151590/
From Security Week: Everyone is watching us now. ToTok is back in the Google Play Store.— https://www.securityweek.com/popular-mideast-app-accused-spying-back-google-play
From Ars Technica: PGP SHA1 Forgeries— https://arstechnica.com/?p=1639935
Get full access to Insecure IT News at insecureit.substack.com/subscribe
Jan. 6, 2020
Austria is being Hacked- https://www.infosecurity-magazine.com/news/austria-foreign-ministry/
Ransomware Shuts down a The Heritage Company - https://www.tripwire.com/state-of-security/security-data-protection/company-told-employees-to-seek-other-work-after-ransomware-attack/
InfoTrax was fined by FTC - https://www.bleepingcomputer.com/news/security/infotrax-gets-slap-on-the-wrist-after-being-breached-20-times/
DHS Warns about Iran - https://www.bleepingcomputer.com/news/security/us-govt-says-irans-cyberattacks-can-disrupt-critical-infrastructure/
If you would like an Email briefing delivered to you every morning, head over to insecureitnews.com and subscribe.
And Until next time, Good Security increases Shareholder Value
Get full access to Insecure IT News at insecureit.substack.com/subscribe