⇄ Σ = Mᄃ² ⇆
- keybase
- https://ecksmc.keybase.pub
- https://twitter.com/exksmc
- CoSo PLP
- https://counter.social/@ecksmc
- Twitter 2.0
- https://twitter.com/3ck5mc
E = Mc2 - Energy Milk Coffee
Fáilte Abhaile 🏴 “a nod’s as guid as a wink tae a blind horse”
ta be aff yer heid helps
Joined Nov 2017
House Votes to Extend—and Expand—a Major US Spy Program
The US House of Representatives voted on Friday to extend the Section 702 spy program. It passed without an amendment that would have required the FBI to obtain a warrant to access Americans’ information. - Section 702 permits the US government to wiretap communications between Americans and foreigners overseas.
Cybersecurity researchers have discovered a credit card skimmer that's concealed within a fake Meta Pixel tracker script in an attempt to evade detection.
Sucuri said that the malware is injected into websites through tools that allow for custom code, such as WordPress plugins like Simple Custom CSS and JS or the "Miscellaneous Scripts" section of the Magento admin panel.
Credit card skimmer hidden in fake Facebook pixel tracker report:
https://blog.sucuri.net/2024/04/credit-card-skimmer-hidden-in-fake-facebook-pixel-tracker.html
The right pentesting approach can provide valuable insights and direction to help organizations strengthen their security posture and navigate the complex threat landscape with increased confidence and peace of mind.
Exploring How Penetration Tests Are Classified – Pentesting Aspirant Guide 2024
"SSH is a vital tool for the safe operation of a networked world – anything that undermines it is really bad news"
In discovering malicious code that endangered global networks in open-source software, Andres Freund exposed our reliance on insecure, volunteer-maintained tech
One engineer’s curiosity may have saved us from a devastating cyber-attack
Google Public DNS’s approach to fight against cache poisoning attacks
http://security.googleblog.com/2024/03/google-public-dnss-approach-to-fight.html
Hackers have successfully manipulated a default plugin within the Notepad++ package, potentially compromising the security of countless systems.
The plugin in question, “mimeTools.dll,” is a standard component of Notepad++ that provides encoding functionalities
https://asec.ahnlab.com/ko/63738/
ASEC has provided the following indicators of compromise (IoCs) for users to check their systems:
ICYMI
posted about this a while back
Detect when your installed Chrome extensions have changed owners.
https://github.com/classvsoftware/under-new-management
Intermittently checks your installed extensions to see if the developer information listed on the Chrome Web Store has changed. If anything is different, the extension icon will display a red badge, alerting you to the change.
more here:
Because Facebook collects data even when you’re logged off, you should be aware of what information is getting tracked. Facebook uses tracking cookies that are stored on your computer or mobile device. These cookies are files that contain logged information about your online activity.
How To Stop Facebook From Tracking You [2024 Guide]
https://allaboutcookies.org/how-to-turn-off-facebook-tracking
Free VPN Apps on Google Play Turn Phones into Proxies
Several free Android VPN apps have been found to support a malicious residential proxy operation named ‘Proxylib.’
https://restoreprivacy.com/free-vpn-apps-on-google-play-turn-phones-into-proxies/
Some of us would be happy being rated 7.5 out of 10, just sayin'
Two DNSSEC vulnerabilities were disclosed last month with similar descriptions and the same severity score, but they are not the same issue
'Mass surveillance' fears over law change plans in UK
The UK tech industry has deep concerns over government plans to amend a law dubbed a "snooper's charter".
Ministers insist their changes to the Investigatory Powers Act is intended to keep UK citizens safe.
But, in a statement, trade body techUK said the changes were neither balanced nor proportionate.
German authorities took down the Nemesis Market, a major online marketplace for drugs, cybercrime services and stolen credit card data.
Investigators seized the Nemesis Market platform’s server infrastructure in Germany and Lithuania on Wednesday
Press release from the Frankfurt am Main Public Prosecutor's Office - ZIT - and the Federal Criminal Police Office
new variant of the wiper malware AcidRain, known as AcidPour, has been discovered by SentinelOne’s threat intelligence team, SentinelLabs.
https://threadreaderapp.com/thread/1769726024600768959.html
AcidRain and AcidPour have a similar reboot mechanism.
https://www.sentinelone.com/labs/acidrain-a-modem-wiper-rains-down-on-europe/
More here:
https://www.infosecurity-magazine.com/news/acidpour-wiper-linux-ukraine/
The International Monetary Fund (IMF) recently detected a cybersecurity incident that involved nearly a dozen email accounts getting hacked.
In a statement issued last week, the United Nations financial institution said it detected the security breach on February 16, 2024.
https://www.imf.org/en/News/Articles/2024/03/15/pr2488-imf-investigates-cyber-security-incident
The IMF told Reuters that the list of hacked accounts did not include the ones of Managing Director Kristalina Georgieva or other top officials.
New research has shed light on the profound impact of ransomware attacks on the IT and construction sectors these industries bore the brunt of nearly half of all incidents in 23
https://www.ontinue.com/resource/deep-dive-into-new-2023-threat-intelligence-report/
the report forecasts continued challenges in 2024, with artificial intelligence (AI) exploitation, IoT vulnerabilities and evolving ransomware operations expected to remain key concerns. the rise of hacktivism and the proliferation of hack-for-hire services sound additional alarm bells
new phishing campaign is targeting U.S. organizations with the intent to deploy a remote access trojan called NetSupport RAT.
Israeli cybersecurity company Perception Point is tracking the activity under the moniker Operation PhantomBlu.
The starting point is a Salary-themed phishing email that purports to be from the accounting department and urges recipients to open the attached Microsoft Word document to view the "monthly salary report."
BTW ProtonVPN free version now won't let you pick what server you want or country it auto-picks the nearest country from the free countries available and the nearest server inside that country
bummer before you could pick between Japan, Netherlands, Poland, Romania or the US and all had more than ten servers one in different regions in each country
guess the free version was getting too popular
Google has an interesting game you can play called odd one out, where you're presented with 4 images, one of which is AI generated.
It's scary how hard it is to get right
https://artsandculture.google.com/experiment/odd-one-out/wAHNn4JsVTFOiw
eSIM Vulnerabilities: SIM Swappers Exploit Flaws, Hijack Phone Numbers
According to a new report, SIM-swapping crimes are rising worldwide, mainly committed by eSIM (Embedded Subscriber Identity Modules) users.
https://www.cysecurity.news/2024/03/esim-vulnerabilities-sim-swappers.html
ICYMI
Sim-swap fraud: How your bank account can be emptied ...
https://www.theguardian.com/money/2024/feb/19/sim-swap-how-your-bank-account-can-be-emptied-by-phone
⇄ Σ = Mᄃ² ⇆
- keybase
- https://ecksmc.keybase.pub
- https://twitter.com/exksmc
- CoSo PLP
- https://counter.social/@ecksmc
- Twitter 2.0
- https://twitter.com/3ck5mc
E = Mc2 - Energy Milk Coffee
Fáilte Abhaile 🏴 “a nod’s as guid as a wink tae a blind horse”
ta be aff yer heid helps
Joined Nov 2017