It's 5:05! Daily cybersecurity and open source briefing

🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/its505-free-access-on-all-podcast-platforms 📌 Dear Jen, Merrick, and Lina. What's up with Microsoft? 🇺🇸 Mark Miller, New York City↗ "Dear Director Easterly, Attorney General Garland, and Chair Khan. I write to request that your agencies take action to hold Microsoft responsible for its negligent cybersecurity practices."&nb...

🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/its505-free-access-on-all-podcast-platforms 📌 Microsoft Makes Access to Cloud Logging Free After Criticisms from Storm-0558 Breach 🇦🇺 Edwin Kwan, Sydney, Australia ↗ Microsoft is expanding access to cloud logging to all customers for free, with more becoming available in September, 2023. This came after they received strong...

🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/its505-free-access-on-all-podcast-platforms 📌 Unintentional Data Leak by VirusTotal Exposes 5,600 Account Details 🇦🇺 Edwin Kwan, Sydney, Australia ↗ VirusTotal has suffered a data leak. The popular online service was launched in 2004 and is used to analyze suspicious files and URLs to detect malicious content or malware. Th...

🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/its505-free-access-on-all-podcast-platforms 📌 Australian Cyber Crime Reporting Resource 🇦🇺 Edwin Kwan, Sydney, Australia ↗ The Australian Cybersecurity Centre, ACSC, is urging all Australians to report cyber crimes using their easy online service. The reporting can be done anonymously and reports by individuals will be refe...

🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/505-updates 📌 Cloud Build Vulnerable to Supply Chain Attacks 🇦🇺 Edwin Kwan, Sydney, Australia ↗ Security researchers have discovered a design flaw in Google Cloud Build, which can allow for supply chain attacks.  Cloud Shared Responsibility Model: Time for an (R)Evolution? 🇺🇸 Chris Hughes, Virginia Beach, Virginia ↗ Th...

🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/its505-free-access-on-all-podcast-platforms 📌 Thousands of Container Images Leaking Secrets 🇦🇺 Edwin Kwan, Sydney, Australia ↗ Researchers from a German university recently published a paper revealing that tens of thousands of container images hosted on Docker Hub contained confidential secrets. Google DeepMind 🇺🇸 Hillary C...

🎙️ Free access to “It’s 5:05!” on your favorite podcast platforms: bit.ly/its505-free-access-on-all-podcast-platforms 📌 What's Your Social Media OpSec? 🇦🇺 Edwin Kwan, Sydney, Australia ↗ Sharing on social media is a good way to keep in touch with friends, but sometimes that can get you in trouble. A Russian neighbor officer was recently killed near his home and it was believed that he may have be...

Listen to the full episode on your favorite streaming platform: https://bit.ly/available-on-all-platforms📌. Edwin Kwan: Spike in Attacks Using Infected USB Drives Do using USB drivers as an initial infection vector still work today? Well, what is old is new again. Security researchers at Mandiant have observed a threefold increase in the number of attacks using infected USB drives to steal secret...

Listen to the full episode on your favorite streaming platform: https://bit.ly/available-on-all-platforms📌. Edwin Kwan: Account Takeovers using Evil QR Logging in via QR code is something that more websites are starting to embrace. Security researcher. Kuba Gretzky, from breakdev.org, published an article demonstrating how attackers could take over accounts by convincing users to scan supplied QR...

Listen to the full episode on your favorite streaming platform: https://bit.ly/available-on-all-platforms📌. Edwin Kwan: Ghostscript allows remote code access Popular open source PDF library, Ghostscript, has been discovered to have a critical vulnerability that allows for remote code execution. The vulnerability can be exploited upon opening a malicious file. Katy Craig: Tax services playing fast...

Resources for this episode available at 505updates.com . From Edwin Kwan in Sydney, Australia : Early this week, critical infrastructure service provider Ventia took some of its key systems offline to contain a cyber incident. The company provides management, maintenance and operation services for critical infrastructure to more than 400 sites across defense, electricity, water, and gas industries...

Resources for this episode available at 505updates.com . From Edwin Kwan in Sydney, Australia : The New South Wales cashless gambling trial suffered a cyber attack. The state's gaming minister said that it would soon announce an oversight panel, which among other focuses, will also be looking into the data security and data privacy of trial participants. From Olimpiu Pop in Transylvania, Romania :...

Resources for this episode available at 505updates.com . From Edwin Kwan in Sydney, Australia : As small households embrace green energy and install solar panels, they could unknowingly be exposing their home networks. Your home solar system could be connecting to the manufacturer's servers to send data that is displayed on the app. From Olimpiu Pop in Transylvania, Romania : The European AI Act i...

Resources for this episode available at 505updates.com . From Edwin Kwan in Sydney, Australia : Security researchers have discovered two spyware in the Google Play Store that have been installed by up to 1.5 million users. Both apps have similar malicious behaviors, such as launching silently without any user interaction. From Katy Craig in San Diego, California : In a jaw dropping twist, approxim...

Resources for this episode available at 505updates.com . From Edwin Kwan in Sydney, Australia : Mastadon has recently patched for vulnerabilities. One of those vulnerabilities is TootRoot. Attackers can exploit the vulnerability by using media files on Toots to perform attacks like denial of service and arbitrary remote code execution.  From Olimpiu Pop in Transylvania, Romania : Natural lang...

Resources for this episode available at 505updates.com. From Edwin Kwan in Sydney, Australia: A proof of concept program has been recently published that exploits an unresolved security vulnerability in Microsoft Teams. The program allows the bypass of Microsoft Teams file sending restraints to deliver malware from an external account. From Olimpiu Pop in Transylvania, Romania: OWASP moves fast. I...

Resources for this episode available at 505updates.com. From Edwin Kwan in Sydney, Australia: Mitre has recently released their CWE Top 25 Most Dangerous Software Weaknesses list for 2023. This list demonstrates the currently most common and impactful software weaknesses.  From Katy Craig in San Diego, California: Driverless cars may be the future, but are they ready for prime time? According...

Resources for this episode available at 505updates.com. From Edwin Kwan in Sydney, Australia: WordPress plugin, Ultimate Member, is vulnerable to a privileged escalation vulnerability that allows attackers to gain administrator access to the WordPress site.  From Trac Bannon in Salem, Massachusetts: Over the past few weeks, a number of US soldiers opened their mail and found a pretty cool gif...

Resources for this episode available at 505updates.com. From Edwin Kwan in Sydney, Australia: A high school in Illinois recently demonstrated how not to do a false password reset. The high school decided to set all the students' passwords to be change me exclamation mark. That's right. They changed all the students' password to the same password.  From Hillary Coover in Washington, DC: When s...

Resources for this episode available at 505updates.com. From Hillary Coover in Washington, DC: Many of you might be thinking enough with the Chinese balloon story, but did you know it was fitted with American technology? From Edwin Kwan in Sydney, Australia: It's bad enough when apps you use suffers a data breach. It's worse when apps you didn't know you have gets breached.  From Katy Craig i...

Resources for this episode available at 505updates.com. From Edwin Kwan in Sydney, Australia: Everyone deserves privacy by default. That's Proton's slogan. This week they announced the global launch of their password manager, Proton Pass.  From Katy Craig in San Diego, California: The US Army's Criminal Investigation Division (CID) is sounding the alarm advising soldiers who received unsolici...

Resources for this episode available at 505updates.com. From Edwin Kwan in Sydney, Australia: The JavaScript NPM registry has a manifest confusion vulnerability which can allow the installation and execution of malicious files without the user's knowledge.  From Ian Garrett in Arlington, Virginia: Microsoft Sysmon just got a beefy upgrade. Sysmon is a free Microsoft Sysinternals tool that can...

Resources for this episode available at 505updates.com. From Edwin Kwan in Sydney, Australia: There is a new version of Super Mario 3 making its way on gaming forums and social media groups. It's a Trojanized version. From Katy Craig in San Diego, California: APT37 is taking surveillance to a whole new level. They're using a Go-based backdoor to exploit a real-time data transform platform called A...

Resources for this episode available at 5:05updates.com. From Katy Craig in San Diego, California: Get ready for an AI showdown folks. Meta's new open source AI chatbots were just offered up to people and they're using them for sex. From Edwin Kwan in Sydney, Australia: Medibank Private, a health insurance provider, suffered a data breach in October, 2022, and that resulted in the compromise of 9....

It's 5:05 on Monday, June 26th, 2023. From the Sourced Podcast Network in New York city, this is Pokie Huang. Stories in today's episode come from Edwin Kwan in Sydney, Australia, Julie Chatman in Washington, DC, Katy Craig in San Diego, California, Hillary Coover in Washington, DC, and Marcel Brown in St. Louis, Missouri. Let's get to it! Australia's First Cyber Security Coordinator Announced 🇦🇺...