Threat Wire

View Top 200 Chart

Back to Rankings Page

Latest Episodes:

The Biggest Hacks of 2021 - ThreatWire Dec 21, 2021

Show notes

The biggest hacks of 2021! All that coming up now on ThreatWire.

Click for links and more info ⬇️⬇️⬇️

#threatwire #hak5

Links: Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/eSH5_Si3G94

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: https://www.youtube.com/watch?v=Qx-PHk2cgqM https://www.theverge.com/2021/10/6/22712365/twitch-data-leak-breach-security-confirmation-comments https://www.washingtonpost.com/video-games/2021/10/08/twitch-hack-leak-minimum-wage-pay-hasan/

https://www.youtube.com/watch?v=mdTnhUJFnno&t=285s https://news.linkedin.com/2021/april/an-update-from-linkedin https://threatpost.com/data-500m-linkedin-users-online/165329/

https://www.youtube.com/watch?v=QjLvIDWnc3w https://www.colpipe.com/news/press-releases/media-statement-colonial-pipeline-system-disruption https://www.bleepingcomputer.com/news/security/largest-us-pipeline-shuts-down-operations-after-ransomware-attack/

https://www.bloomberg.com/news/articles/2021-03-07/hackers-breach-thousands-of-microsoft-customers-around-the-world https://www.cnn.com/2021/06/01/business/jbs-cyberattack-meat-shortage/index.html https://www.bleepingcomputer.com/news/security/computer-giant-acer-hit-by-50-million-ransomware-attack/

https://www.youtube.com/watch?v=ysFB6JKTs5U https://www.ncsc.gov.uk/information/log4j-vulnerability-what-everyone-needs-to-know https://www.zdnet.com/article/apache-releases-new-2-17-0-patch-for-log4j-to-solve-denial-of-service-vulnerability/ https://www.zdnet.com/article/belgian-defense-ministry-confirms-cyberattack-through-log4j-exploitation/

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆ Our Site → https://www.hak5.org Shop → http://hakshop.myshopify.com/ Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1 Support → https://www.patreon.com/threatwire Contact Us → http://www.twitter.com/hak5 Threat Wire RSS → https://shannonmorse.podbean.com/feed/ Threat Wire iTunes → https://itunes.apple.com/us/podcast/threat-wire/id1197048999 -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

____________________________________________ Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.

Log4Shell & Log4j Explained - ThreatWire Dec 14, 2021

Show notes

Log4Shell & Log4j Explained, Google Disrupts Major Botnet, and NPM Packages Steal Discord Creds! All that coming up now on ThreatWire.

#threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/ysFB6JKTs5U

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: https://arstechnica.com/information-technology/2021/12/minecraft-and-other-apps-face-serious-threat-from-new-code-execution-bug/ https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce https://www.randori.com/blog/cve-2021-44228/ https://arstechnica.com/information-technology/2021/12/the-log4shell-zeroday-4-days-on-what-is-it-and-how-bad-is-it-really/ https://www.lunasec.io/docs/blog/log4j-zero-day/ https://twitter.com/chvancooten/status/1469340927923826691 https://twitter.com/AlyssaM_InfoSec/status/1470463098523955202 https://twitter.com/llkkaT/status/1470411739829350407 https://twitter.com/eastdakota/status/1469800951351427073 https://github.com/YfryTchsGD/Log4jAttackSurface https://gist.github.com/SwitHak/b66db3a06c2955a9cb71a8718970c592 https://www.bleepingcomputer.com/news/security/hackers-start-pushing-malware-in-worldwide-log4shell-attacks/

https://www.microsoft.com/security/blog/2021/12/11/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation/ https://nakedsecurity.sophos.com/2021/12/13/log4shell-explained-how-it-works-why-you-need-to-know-and-how-to-fix-it/

https://blog.google/technology/safety-security/new-action-combat-cyber-crime/ https://blog.google/threat-analysis-group/disrupting-glupteba-operation/ https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/1_Complaint.pdf https://www.cnet.com/tech/google-breaks-up-botnet-infecting-1-million-devices/

https://arstechnica.com/information-technology/2021/12/malicious-packages-sneaked-into-npm-repository-stole-discord-tokens/ https://jfrog.com/blog/malicious-npm-packages-are-after-your-discord-tokens-17-new-packages-disclosed/ https://thehackernews.com/2021/12/over-dozen-malicious-npm-packages.html

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

Government Employee Phones Hacked, Cryptocurrency Scams On The Rise - ThreatWire Dec 07, 2021

Show notes

Click for links and more info ⬇️⬇️⬇️

Spyware was found on government employee phones, several popular routers are riddled with flaws, and cryptocurrency scams are on the rise! All that coming up now on ThreatWire.

#threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/ZmoP-GgpKEE

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: https://www.reuters.com/technology/exclusive-us-state-department-phones-hacked-with-israeli-company-spyware-sources-2021-12-03/ https://www.bleepingcomputer.com/news/security/us-state-dept-employees-phones-hacked-using-nso-spyware/ https://www.vice.com/en/article/5dggxk/us-state-department-employees-targeted-with-nso-group-malware https://www.commerce.gov/news/press-releases/2021/11/commerce-adds-nso-group-and-other-foreign-companies-entity-list https://arstechnica.com/information-technology/2021/12/iphones-of-us-diplomats-hacked-using-0-click-exploits-from-embattled-nso/ https://threatpost.com/pegasus-spyware-state-department-iphones/176779/

https://www.iot-inspector.com/wp-content/uploads/2021/11/Chip-IoT-Inspector-Router-Sicherheit-Test.pdf https://www.iot-inspector.com/blog/extracting-decryption-keys-dlink/ https://www.bleepingcomputer.com/news/security/nine-wifi-routers-used-by-millions-were-vulnerable-to-226-flaws/ https://www.iot-inspector.com/blog/router-security-check-2021/

https://thehackernews.com/2021/12/hackers-steal-200-million-worth-of.html https://www.vice.com/en/article/akvewk/hackers-steal-dollar150m-from-crypto-exchange-billed-as-most-trusted https://www.vice.com/en/article/pkpp4n/hackers-steal-dollar119m-from-web3-crypto-project-with-old-school-attack https://www.vice.com/en/article/epxxe7/received-some-random-cryptocurrency-it-might-be-a-phishing-scam https://www.cnet.com/personal-finance/crypto/what-to-do-if-your-bitcoin-ether-or-other-cryptocurrency-gets-stolen/

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

Android Eavesdropping Vulnerability Patched by MediaTek; GoDaddy Hacked - ThreatWire Nov 30, 2021

Show notes

Apple Sues NSO Group, GoDaddy Discloses Another Hack, and Attackers Could Eavesdrop on Your Phone Using a MediaTek Vulnerability! All that coming up now on ThreatWire.

#threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): xxx

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: Apple Suing NSO Group over Pegasus Spyware: https://citizenlab.ca/2018/09/hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries/ https://www.bleepingcomputer.com/news/apple/new-zero-click-iphone-exploit-used-to-deploy-nso-spyware/ https://www.apple.com/newsroom/pdfs/Apple_v_NSO_Complaint_112321.pdf https://www.vice.com/en/article/7kbvyb/apple-sues-nso-group-for-hacking-its-users https://threatpost.com/apple-nso-lawsuit-pegasus-spyware/176565/ https://www.cnet.com/tech/mobile/apple-sues-pegasus-for-spyware-maker-how-to-check-if-your-iphone-has-nso-group-software/ https://www.cnet.com/tech/mobile/apple-sues-pegasus-spyware-developer-what-you-need-to-know/

GoDaddy Data Breach https://www.sec.gov/Archives/edgar/data/1609711/000160971121000122/gddyblogpostnov222021.htm https://www.bleepingcomputer.com/news/security/godaddy-data-breach-hits-12-million-managed-wordpress-customers/ https://threatpost.com/godaddys-latest-breach-customers/176530/ https://www.wordfence.com/blog/2021/11/godaddy-tsohost-mediatemple-123reg-domain-factory-heart-internet-host-europe/

MediaTek Eavesdropping Vulnerability https://www.counterpointresearch.com/global-smartphone-ap-market-share/ https://www.bleepingcomputer.com/news/security/mediatek-eavesdropping-bug-impacts-30-percent-of-all-android-smartphones/ https://research.checkpoint.com/2021/looking-for-vulnerabilities-in-mediatek-audio-dsp/ https://thehackernews.com/2021/11/eavesdropping-bugs-in-mediatek-chips.html

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

Robinhood Hacked - 7 Million Users Affected - ThreatWire Nov 16, 2021

Show notes

Click for links and more info ⬇️⬇️⬇️

BIOS Flaws Hit Intel Processors, Robinhood was Hacked and 7 Million are Affected , and the FBI’s Email Server was used to Send Spoofed Emails ! All that coming up now on ThreatWire.

#threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/j3vQJNMiTMk

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: https://www.bleepingcomputer.com/news/security/high-severity-bios-flaws-affect-numerous-intel-processors/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00562.html

https://www.bleepingcomputer.com/news/security/fbi-system-hacked-to-email-urgent-warning-about-fake-cyberattacks/ https://twitter.com/spamhaus/status/1459451401269043201 https://twitter.com/vinnytroia/status/1459515619838251010 https://thehackernews.com/2021/11/fbis-email-system-hacked-to-send-out.html https://krebsonsecurity.com/2021/11/hoax-email-blast-abused-poor-coding-in-fbi-website/ https://www.fbi.gov/news/pressrel/press-releases/fbi-statement-on-incident-involving-fake-emails

https://blog.robinhood.com/2021/11/8/data-security-incident https://www.vice.com/en/article/epxdmn/robinhood-hackers-internal-tool-security-features https://www.bleepingcomputer.com/news/security/7-million-robinhood-user-email-addresses-for-sale-on-hacker-forum/ https://www.cnet.com/tech/services-and-software/robinhood-data-breach-exposed-7-million-customers/

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

Facebook to Delete Facial Recognition Records for 1 Billion Users - ThreatWire Nov 09, 2021

Show notes

Click for links and more info ⬇️⬇️⬇️

Facebook is deleting over 1 billion users facial recognition records, an android bug is being actively exploited so update now, and the US is offering a huge reward to anyone who ousts Darkside ransomware leaders ! All that coming up now on ThreatWire.

#threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/fgqraGM-RnE

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: https://about.fb.com/news/2021/11/update-on-use-of-face-recognition/ https://www.facebook.com/help/122175507864081 https://www.bleepingcomputer.com/news/technology/facebook-to-delete-1-billion-faceprints-in-face-recognition-shutdown/ https://thehackernews.com/2021/11/facebook-to-shut-down-facial.html

https://source.android.com/security/bulletin/2021-11-01 https://www.bleepingcomputer.com/news/security/android-november-patch-fixes-actively-exploited-kernel-bug/ https://thehackernews.com/2021/11/google-warns-of-new-android-0-day.html https://threatpost.com/android-patches-exploited-kernel-bug/175931/

https://www.state.gov/reward-offers-for-information-to-bring-darkside-ransomware-variant-co-conspirators-to-justice/ https://www.bleepingcomputer.com/news/security/us-targets-darkside-ransomware-rebrands-with-10-million-reward/ https://www.bleepingcomputer.com/news/security/blackmatter-ransomware-claims-to-be-shutting-down-due-to-police-pressure/ https://threatpost.com/feds-offer-10-million-bounty-on-darkside-info/176030/

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

CyberAttackers Use Squid Game To Lure In Victims - ThreatWire Nov 02, 2021

Show notes

Click for links and more info ⬇️⬇️⬇️

Trojan Source affects source code, attackers are using Squid Game to lure in victims, and watch out for this new spam campaign! All that coming up now on ThreatWire.

#threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/D4QMssZgaXM

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: Trojan source code: https://trojansource.codes/trojan-source.pdf https://www.trojansource.codes/ https://github.com/nickboucher/trojan-source https://blog.rust-lang.org/2021/11/01/cve-2021-42574.html https://threatpost.com/trojan-source-invisible-bugs-source-code/175891/ https://www.zdnet.com/article/this-sneaky-trick-could-allow-attackers-to-hide-invisible-vulnerabilities-in-code/ https://thehackernews.com/2021/11/new-trojan-source-technique-lets.html

Squid Game: https://www.proofpoint.com/us/blog/threat-insight/ta575-uses-squid-game-lures-distribute-dridex-malware https://www.zdnet.com/article/ta575-criminal-group-using-squid-game-lures-for-dridex-malware/ https://www.techrepublic.com/article/you-definitely-dont-want-to-play-squid-game-themed-malware-is-here/ https://www.cnet.com/tech/services-and-software/researchers-spot-dangerous-squid-game-themed-phishing-emails/

SquirrelWaffle: https://blog.talosintelligence.com/2021/10/squirrelwaffle-emerges.html https://www.bleepingcomputer.com/news/security/emotet-botnet-disrupted-after-global-takedown-operation/ https://threatpost.com/squirrelwaffle-loader-malspams-packing-qakbot-cobalt-strike/175775/ https://www.bleepingcomputer.com/news/security/spammers-use-squirrelwaffle-malware-to-drop-cobalt-strike/

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

YouTubers Targeted In Malware Attacks; REvil Goes Offline - ThreatWire Oct 26, 2021

Show notes

Weekly security and privacy news, brought to you by Shannon Morse. ThreatWire is a weekly news journalism show covering security and privacy topics for network admins, information security professionals, and consumers.

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/B1MjSqwXaTk

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links:

YT:

https://www.bleepingcomputer.com/news/security/massive-campaign-uses-youtube-to-push-password-stealing-malware/

https://www.bleepingcomputer.com/news/security/google-youtubers-accounts-hijacked-with-cookie-stealing-malware/

https://thehackernews.com/2021/10/hackers-stealing-browser-cookies-to.html

https://arstechnica.com/information-technology/2021/10/how-hackers-hijacked-thousands-of-high-profile-youtube-accounts/

https://www.zdnet.com/article/google-disrupts-massive-phishing-and-malware-campaign/

https://threatpost.com/google-youtube-channel-hijackers-cryptocurrency-scams/175617/

Sim swapper:

https://www.vice.com/en/article/jgmep7/sim-swapper-doxes-and-swats-his-accomplice

https://www.justice.gov/usao-md/pr/defendant-who-stole-more-16000-cryptocurrency-and-orchestrated-swat-attack-his-accomplice

REvil:

https://www.bleepingcomputer.com/news/security/revil-ransomware-shuts-down-again-after-tor-sites-were-hijacked/

https://www.cnet.com/tech/services-and-software/notorious-ransomware-group-knocked-offline-according-to-report/

https://thehackernews.com/2021/10/feds-reportedly-hacked-revil-ransomware.html

https://www.zdnet.com/article/multiple-governments-involved-in-coordinated-takedown-of-revil-ransomware-group-reuters/

https://threatpost.com/revil-servers-offline-governments/175675/

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

OpenSea Had A Malicious NFT Problem - ThreatWire Oct 19, 2021

Show notes

Click for links and more info ⬇️⬇️⬇️

OpenSea had a malicious NFT problem, a twitch hack update, and whatsapp officially adds end to end encrypted backups! All that coming up now on ThreatWire. #threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/Qx-PHk2cgqM

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: Opensea https://research.checkpoint.com/2021/check-point-research-prevents-theft-of-crypto-wallets-on-opensea-the-worlds-largest-nft-marketplace/ https://thehackernews.com/2021/10/critical-flaw-in-opensea-could-have-let.html https://threatpost.com/opensea-nfts-cryptowallet-balances/175453/

Twitch https://blog.twitch.tv/en/2021/10/15/updates-on-the-twitch-security-incident/?utm_referrer=https://t.co/ https://www.bleepingcomputer.com/news/security/twitch-downplays-this-months-hack-says-it-had-minimal-impact/ https://threatpost.com/twitch-leak-emails-passwords/175390/ https://www.zdnet.com/article/twitch-downplays-massive-breach-says-no-passwords-or-login-credentials-leaked/

Whatsapp https://about.fb.com/news/2021/10/end-to-end-encrypted-backups-on-whatsapp/ https://www.bleepingcomputer.com/news/security/whatsapp-rolls-out-ios-android-end-to-end-encrypted-chat-backups/ https://www.zdnet.com/article/whatsapp-starts-slowly-rolling-out-encrypted-backups/

Thumbnail Credit: https://cryptoslate.com/wp-content/uploads/2021/03/opensea-sea-1024x538.jpg

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

Facebook Was Down?! Facebook Outage Causes Conspiracies - ThreatWire Oct 05, 2021

Show notes

Click for links and more info ⬇️⬇️⬇️

Fraudsters stole millions from veterans, SMS infrastructure was hacked, and Facebook is having a worst week ever! All that coming up now on ThreatWire. #threatwire #hak5

Watch this on youtube (video may be “private” until the scheduled publish time): https://youtu.be/roznl90rljU

Shop ThreatWire Merch Directly! - https://snubsie.com/shop

Shop ThreatWire Merch on Teespring! - https://morsecode.creator-spring.com/

Support ThreatWire! https://www.patreon.com/threatwire

Follow Shannon on Social Media: https://snubsie.com/links

Links: Fraudsters Stole From Veterans: https://www.bleepingcomputer.com/news/security/transnational-fraud-ring-stole-millions-from-army-members-veterans/ https://threatpost.com/transnational-fraud-military-members/175298/ https://www.zdnet.com/article/fraudster-jailed-for-stealing-us-military-health-records-millions-in-benefits/ https://www.zdnet.com/article/army-contractor-sentenced-for-stealing-1-5-million-from-veterans-through-dod-benefit-sites/

SMS Infrastructure Was Hacked: https://www.syniverse.com/products/operator-messaging https://www.businessinsider.com/syniverse-hackers-access-billions-of-texts-through-breach-2021-10 https://www.sec.gov/Archives/edgar/data/1839175/000119312521284329/d234831dprem14a.htm https://www.vice.com/en/article/z3xpm8/company-that-routes-billions-of-text-messages-quietly-says-it-was-hacked

Facebook Down: https://arstechnica.com/information-technology/2021/10/facebook-instagram-whatsapp-and-oculus-are-down-heres-what-we-know/ https://www.bleepingcomputer.com/news/technology/facebook-whatsapp-and-instagram-down-due-to-dns-outage/ https://www.cbsnews.com/news/facebook-whistleblower-frances-haugen-misinformation-public-60-minutes-2021-10-03/ https://arstechnica.com/tech-policy/2021/09/facebooks-latest-apology-reveals-security-and-safety-disarray/ https://www.wsj.com/articles/facebook-whistleblower-frances-haugen-says-she-wants-to-fix-the-company-not-harm-it-11633304122?mod=djemalertNEWS https://www.cnet.com/news/facebook-whistleblower-to-testify-before-congress-how-to-watch/?ftag=COS-05-10aaa0b&PostType=link&ServiceType=twitter&UniqueID=ACA16F60-2556-11EC-B5CD-A6BE4744363C&TheTime=2021-10-04T21%3A04%3A33 https://www.vice.com/en/article/4avjqb/conspiracy-theories-about-facebook-outage-spread-even-without-facebook https://9to5mac.com/2021/10/04/instagram-facebook-whatsapp-down/ https://krebsonsecurity.com/2021/10/what-happened-to-facebook-instagram-whatsapp/

Thumbnail Credit: https://cdn.pixabay.com/photo/2015/09/26/13/38/facebook-959060_1280.jpg

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected