The FBI is warning consumers to be aware of scammers impersonating high-level company executives to trick employees into transferring money.
Security
Passware's Cracking Tool Can Unlock Macs With T2 Chip
Passware’s forensic cracking tool can now be used on Macs that have Apple’s T2 security chip, a report says on Thursday.
GiveSendGo Data Breach Affects Donors of 'Freedom Convoy'
Attackers have breached the systems of GiveSendGo, a Christian fundraising platform. People who donated to the Freedom Convoy in Canada.
FBI: BlackByte Ransomware Attacks Critical Infrastructure
The FBI and Secret Service have seen signs of BlackByte ransomware attacking at least three critical infrastructure sectors in the U.S.
Security Friday: NDAs and Special Guests – TMO Daily Observations 2022-02-11
Andrew Orr and host Kelly Guimont discuss security news and sit down with John Kheit to talk about NDAs and using them for good or…less good.
Appointment Booker 'FlexBooker' Suffers Second Data Leak
The vpnMentor research team discovered a data leak from FlexBooker, a company that makes online appointment booking tools for businesses.
FBI Flash Report Warns of Attacks With LockBit 2.0 Ransomware
The FBI has issued a flash report this week that details indicators of compromise (IOC) linked to LockBit 2.0 ransomware.
iOS 15.3.1 Fixes an Issue With Braille Displays Not Working
Apple has released iOS 15.3.1 on Thursday that that fixes a problem with an accessibility feature. It also contains security fixes.
Instagram Security Checkup Expands to Users Worldwide
Instagram Security Checkup is a feature that people can use if their accounts may have been hacked. It’s rolling out to people globally.
ExpressVPN Bug Bounty Reward Increases to $100,000
The ExpressVPN bug bounty reward has increased to US$100,000, the company announced on Tuesday, ten times higher than the previous reward.
Security Friday: Everything Bad is New Again – TMO Daily Observations 2022-02-04
Andrew Orr and Kelly Guimont discuss Security Friday updates, including some suggested beverage pairings for each topic.
Intuit Warns Customers of Tax Phishing Emails
Intuit has released security warnings for customers about tax phishing emails some people have received, and tips to spot them.
'UpdateAgent' Mac Trojan Can Steal Data and Inject Adware
UpdateAgent is the name of a Mac trojan that Microsoft has been tracking since October, although it first appeared in September 2020.
Intel Expands Bug Bounty Program With Project Circuit Breaker
Project Circuit Breaker is an expansion of Intel’s bug bounty program that hosts targeted time-boxed events on specific new platforms.
Here's How to Blur Your House on Apple Maps and Google Maps
Did you know you can blur your house on Apple Maps and Google Maps? This capability is open to everyone, here’s what you can do.
Civicom Data Leak Affects Over 100,000 Files
Video conference company Civicom has had a data leak, found by the Website Planet Security team. Over 100,000 files were included.
Treasury Considers ID.Me Alternatives Over Privacy Concerns
The Treasury Department is looking into ID.me alternatives for accessing the IRS website over privacy concerns.
CEO Blake Hall this week said that the company also used one-to-many technology, which compares selfies taken by users as part of the verification process against a larger database. The company said it maintained an internal database of selfies taken by users and compared new selfies against it using Amazon’s controversial Rekognition technology. As of January 25, 20.9 million users’ selfies had been verified against that database, the company said.
Microsoft Stopped an Insane 3.47 Tbps DDoS Attack
Microsoft’s Azure cloud division shared that it stopped a 3.47 Tbps DDoS attack, and two other attacks that were over 2.5 Tbps.
Security Friday: Not Entirely Bad News – TMO Daily Observations 2022-01-28
Andrew Orr joins host Kelly Guimont to discuss Security Friday news and updates, including fixes and a tip for passwords on iOS.
'OSX.DazzleSpy' is a Fully-Featured macOS Implant for Espionage
OSX.DazzleSpy is a new macOS implant targeting Hong Kong pro-democracy websites. It affects the Safari browser on macOS.
Facebook Rolls Out End-to-End Encrypted Chats for Everyone
End-to-end encrypted chats are now available for all users of Facebook Messenger, the company announced. This includes group chats and calls.
Last year, we announced that we began testing end-to-end encryption for group chats, including voice and video calls. We’re excited to announce that this feature is available to everyone. Now you can choose to connect with your friends and family in a private and secure way.
These secure chats remain opt-in only, instead of encrypted by default like actual private messaging apps.
Researchers Create First Silk-Based Physical Unclonable Function
Researchers from the Gwangju Institute of Science and Technology in South Korea developed a silk-based physical unclonable function (PUF).
An NFT on OpenSea Can Steal Your IP Address
An NFT found on the OpenSea marketplace can steal visitors’ IP addresses, according to a repot from Motherboard.
Of course, websites often collect and store visitors’ IP addresses in virtue of how the sites function. OpenSea itself likely collects the IP addresses of visitors, like plenty of other sites, apps, or services. But here, an outside third party—the NFT seller—is able to gather information themselves on the people viewing the NFT, potentially without them knowing.
Successor to 'Shrootless' Bug Attacks Mac SIP Feature
Researchers at Perception Point write about CVE-2022-22583, a successor to Shrootless that could let attackers bypass Mac SIP.