Cyber security news, vulnerabilities, breaches, updates & education. #CyberSecurity #Malware #Cybercrime #CyberSec #News #Infotech #CyberNews #Hackers #Exploits

New York, NY
Joined May 2020
Throwback to AOL Proggies and Punterz and just learnt @finkd even made his own Prog Vader Fader.... thats actually reall cool to know he was involved in the early days of the internet warez//hacking scene a bit. Wonder what @elonmusk was doing those days hah #AOL #MarkZuckerberg
1
2
243
The Cyber Post retweeted
the SCARLETTGROUP lists NBC Universal on their DLS
1
3
34
1,237
The Cyber Post retweeted
Andrii and the SOC Prime team have just launched LogTotal and I find the concept quite interesting You can upload a collection of security logs, run detection rules against the events, correlate the matches into potential attack chains, and use AI to help interpret the results. What I particularly like is the architecture. Instead of throwing millions of log events at an LLM, it starts with detection rules and correlation, using AI later in the process to help investigate and explain the findings. Another interesting detail is the approach to privacy. Sensitive identifiers can be pseudonymized locally before uploading the logs. The sanitizer is even available as open source, with a CLI that can run completely offline. So if you don't want to rely on JavaScript delivered by a website, you can inspect the code and sanitize your logs in your own environment before uploading. Sanitizer: github.com/socprime/logtotal… I think that's a sensible direction for AI-assisted security investigations. It also makes retrospective log analysis accessible without having to set up an entire SIEM infrastructure. I haven't tested it myself yet, and I'd be more interested in the quality of the detections and correlations than the advertised rule count or processing speed. But the approach makes sense to me. Definitely worth a closer look.
LogTotalは、ログファイルの調査を自動化する、手頃な価格でプライバシーに配慮したオンラインサービスです。セットアップ不要ですぐに使え、高速に動作し、経験の浅い方からベテランまで、あらゆるアナリストが使いやすい設計です。エクスポートしたログを110万件以上の振る舞い検知ルールを用いて分析し、SOC Primeが厳選したアクティブな脅威のリストに照らして、ルールのヒットを相関付けることで攻撃チェーンを構築します。攻撃チェーンに加えて、ルールヒットの中から外れ値を検出し、AIによるインシデントレポートも生成するため、個々の詳細とその背景にある全体像の両方を把握できます。機密データはアップロード前にローカル環境でサニタイズでき、相関分析の精度を損なうことなくログのプライバシーを保護します。
11
60
2
342
22,277
The Cyber Post retweeted
Thailand: Chinese fugitive Wu, 37, linked to a money-laundering network that moved more than US$70 million through over 133 bank accounts, was arrested in Bangkok on October 16. Wanted in China over his alleged involvement in a loan-sharking syndicate, Wu reportedly recruited people to open bank accounts, collected their banking details and supplied them to criminal networks for money laundering. He also managed cryptocurrency and foreign-currency exchanges and arranged visas for members of transnational crime groups. Wu had been hiding in Thailand for years, using forged residence documents, altered vehicle registration plates and even changing his car's colour to avoid detection. Immigration police eventually tracked him to a luxury house in Bangkok's Saphan Sung district. His visa had expired nearly four years earlier, and authorities are preparing to deport him to China.
2
19
1
150
16,138
The Cyber Post retweeted
NBC Universal has allegedly been breached by fairly new Scarlett Group. Claimed data includes banking details (sample wire transfer), a CRM dump and unannounced upcoming films. @NBCUniversal has not commented
4
17
1,526
The Cyber Post retweeted
黑客也有被黑的一天。 荷兰反诈博主 Deeveeaaar 黑进了一群朝鲜"远程程序员"的电脑,打开摄像头——对面是几个穿朝鲜军装的年轻人,当场僵住。 这帮人平时在领英上装求职者,用 AI 编简历、开 VPN 藏位置,混进欧美公司后偷数据、偷加密货币,上缴平壤。 这不是孤例:美、日、韩等十一国今年7月联合警告,朝鲜"IT 工人"计划2024年一年就给平壤搞了约8亿美元。 等下,这骗子桌面怎么还有CS游戏??🤪
334
1,231
113
9,989
2,195,535
‼️ AI agents broke into the SCADA system of Booz Allen's mock factory and took over the control room's screens. One realised it could now send commands to every controller in the plant and "make the operator screens lie". Another hacked a robotic arm and moved it in minutes.
37
154
30
779
43,885
The Cyber Post retweeted
A hacker accessed Denmark's national ID database. 8.8 million records. the password was "123456". The administrator account at Pays ApS, a 2-person IT company with legal access to the country's central civil registration database used 123456 as its password. at least three accounts did. including the admin. and the hacker was in for 21 days and 17 hours. The Danish digital affairs minister called it an "extremely serious incident." In the week after the breach became public, Danes setting up credit fraud alerts went from 250,000 to nearly 970,000. the hacker told the newspaper Politiken the access wasn't difficult. The CPR contains names, addresses, national ID numbers, church membership, and legal incapacitation records for 11 million people. protected by 123456. at a 2-person company. that had legal access to it.
BREAKING: A hacker accessed Denmark's national ID database with the password "123456," exposing details of 8.8 million people
78
372
60
1,616
52,161
The Cyber Post retweeted
“WHALE JAMES” ARRESTED IN TURKEY IN $1.5 BILLION CRYPTO FRAUD PROBE Billionaire Richard James Schueler, known as “Whale James”, has reportedly been arrested in a dawn raid in Istanbul by Turkish intelligence and police. He was allegedly wanted under an INTERPOL Red Notice and is accused of involvement in a cryptocurrency fraud network linked to international operations. During the raid, officers reportedly seized $4 MILLION IN CASH, 64 LUXURY WATCHES, JEWELLERY, FIREARMS AND ELECTRONIC EQUIPMENT. Investigators are reportedly examining suspected cryptocurrency fraud involving connections across the United States, Finland and Spain. #WhaleJames #Crypto #Turkey #BreakingNews #NotGuiltyTV
9
16
3
203
47,550
The Cyber Post retweeted
Replying to @OpenAINewsroom
> Abdulrahman Alfozan, 35, a Saudi national, was arrested Friday... on suspicion of hiding an audio recording device in an executive conference room at the company’s San Francisco headquarters xitter.cf/SmokeAwayyy/status/211…
Replying to @SmokeAwayyy
Screenshot of Alfozan's X bio and pictures of the device.
17
40
8
435
262,031
🚨 BREAKING: Hackers broke into Meta’s private GitHub repo and stole their source code. They got in with an employee's stolen credentials and took personal data on ~1,500 people, mostly US employees, stored there against Meta policy…
135
811
138
4,724
276,389
The Cyber Post retweeted
This #FBI is taking the fight to them. If you target Americans with online scams and fraud, this FBI will find you and bring you to justice. foxnews.com/us/operation-bla…
131
267
19
1,017
65,287
The Cyber Post retweeted
A really excellent reverse-engineering report on a hardware backdoor implant in the LEDGER NANO X. @joegrand completed the reverse-engineering analysis of the backdoor implant in the crypto hardware wallet six months ago. grandideastudio.com/media/le…
10
56
5
275
19,946
The Cyber Post retweeted
🤖 Alice betrayed her own: Yandex's AI reportedly revealed the locations of the company's data centers to a supposed Ukrainian drone operator On October 8, Yandex blurred the locations of its data centers on its maps, apparently in an attempt to protect them from Ukrainian strikes. However, according to the independent outlet SOTA, a journalist posing as a Ukrainian drone operator asked Yandex's AI assistant, Alice, to help locate the company's remaining data centers. The AI replied that it “understood the task,” provided the addresses of key facilities, and even wished the supposed operator good luck. Alice, Alice, what have you done? 😂
☄️ Yandex services go down across several countries: After drone strikes on its data centers, the company invokes force majeure Over the past few days, Ukrainian drones have struck three Yandex data centers. The latest attack targeted a facility in Vladimir, Russia. And the digital detox wasn't limited to Russia. Users in Belarus, Kazakhstan, and Serbia are reporting widespread outages affecting the company's services. 🚕 People are having trouble booking taxis, ordering food, and paying for purchases. Disruptions have been reported across Yandex Go, Yandex Music, Yandex Disk, Yandex Pay, search, and Alice-powered smart home devices. Users are also reporting problems with third-party services, including Lamoda, Vkusno i Tochka, and Magnit. But here's the funniest part: Yandex has suddenly added drone attacks to its list of force majeure events, which could exempt the company from liability for failing to meet its obligations. 🤡 Apparently, the consequences of war count as circumstances beyond anyone's control. At least when they affect your own business.
39
429
46
2,025
77,262
Man this case just gets crazier and crazier…. Who’s behind this ?
Ledger Flex sold at Singapore Airport confirmed to contain a spy implant! @BenYorke found suspicious marks on his @Ledger and sent it to me rather than using it, that was probably the best decision here. youtube.com/watch?v=Nf4FEFlg… xitter.cf/BenYorke/status/210908…
41
The Cyber Post retweeted
NEW: 🇵🇱 Poland’s National Prosecutor’s Office has found that the Pegasus spyware system used by the country’s previous government was not fully under the control of Polish security agencies, potentially allowing its Israeli manufacturer, NSO Group, to access sensitive data collected from Polish citizens. According to prosecutors, an analysis by Poland’s Internal Security Agency (ABW) found that NSO Group could access infrastructure used to process and store operational data. Information transmitted through the system was also leaving Polish territory. Prime Minister Donald Tusk called the findings a crime against the state and described the affair as one of the biggest scandals in Poland’s history since the fall of communism. Tusk warned that sensitive information belonging to thousands, potentially tens of thousands, of Polish citizens could have been exposed to a foreign country without adequate control. He also claimed there was no doubt that Pegasus manufacturer NSO Group cooperated with Israeli security services. Pegasus is a powerful surveillance tool capable of accessing mobile phones and extracting messages, browsing history and location data. Depending on the capabilities deployed, it can also access microphones and cameras. The spyware was purchased under the previous Law and Justice (PiS) government, which has faced allegations that it was used to monitor political opponents, journalists and other public figures. The former administration denies wrongdoing, arguing that Pegasus was necessary for national security and used with court approval. Justice Minister Waldemar Żurek said the system’s use endangered Poland’s national security. A parliamentary inquiry has also heard that judges who authorised surveillance were not fully informed about Pegasus’s capabilities.
31
486
62
1,037
96,471
“ACTUALIZACIÓN: Puedo confirmar que la cadena de suministro de Ledger también está comprometida en Europa. @Ledger debería iniciar un retiro inmediato de productos para proteger a los usuarios. Acabo de comprar un segundo dispositivo en una ubicación diferente de Mediamarkt hoy, grabé el proceso de desempaquetado y descubrí spyware una vez más (video enlazado en el segundo tuit). El dispositivo estaba comprometido de exactamente la misma manera, presentando modificaciones idénticas (como cables adicionales y un módulo LTE). Esto indica que se trata de un problema generalizado en lugar de un incidente aislado, que potencialmente afecta el inventario de Ledger en tiendas MediaMarkt y Saturn en toda Europa (que comprende más de 1.000 tiendas en 11 países). Mi hipótesis inicial era que estos dispositivos eran devoluciones que parecían sin abrir a los empleados y simplemente se volvieron a vender como nuevos; sin embargo, un empleado de MediaMarkt confirmó que el dispositivo que compré no era una devolución, y que los Ledger devueltos se envían directamente de vuelta al fabricante en lugar de revenderse. Los registros de la tienda muestran que el inventario se originó en Aqipa GmbH. Aunque el CTO de Ledger no estaba seguro de si Aqipa actúa como el distribuidor directo entre Ledger y MediaMarkt, parece que es el caso. Dado que Aqipa distribuye en toda Europa, cualquier tienda minorista física que reciba existencias a través de ellos podría estar en riesgo. Envié el primer ledger a mark y el segundo está yendo a ledger ahora, para que puedan analizarlo. Si compraste un ledger de alguien que no sea la tienda oficial de ledger, ¡asegúrate de revisar tu dispositivo!!” h/t @0xJohannes_
98
268
44
1,291
208,447
❗️ AI is already killing people. A Russian drone that killed 3 in Zaporizhzhia in July left the strike decision to an Nvidia Jetson Orin chip, Ukrainian investigators say. Nvidia says it is a consumer product sold to students.
220
698
85
6,626
581,446