Dan Goodin

Microsoft Patch Tuesday, July 2022 Edition

Microsoft Patch Tuesday, July 2022 Edition

| | CVE-2022-22022, CVE-2022-22029, CVE-2022-22038, CVE-2022-22039, CVE-2022-22041, CVE-2022-22047, CVE-2022-30206, CVE-2022-30221, CVE-2022-30226, Dan Goodin, Greg Wiseman, Immersive Labs, Kevin Breen, Microsoft Patch Tuesday July 2022, rapid7, Security Tools, Sergiu Gatlan, Tenable, Time to Patch
Microsoft today released updates to fix at least 86 security vulnerabilities in its Windows operating systems and other software, including a weakness in all supported versions of Windows that Microsoft warns is ...
Krebs on Security
Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

| | A Little Sunshine, Amtrak, Apple, BitBucket, Breadcrumbs, Dan Goodin, Doxbin, Electronic Arts, emergency data request, Everlynn, Flashpoint, Genesis, Globant, Iqor, KT, Lapsus$, Lapsus$ Jobs, Michelin, Microsoft, Mobile Device Management, Mox, Ne'er-Do-Well News, Nvidia, Recursion Team, Russian Market, Samsung, SASCAR, SIM swapping, slack, source code theft, swatting, T-Mobile, T-Mobile Atlas, WhiteDoxbin
KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month ...
Krebs on Security
Actions Target Russian Govt. Botnet, Hydra Dark Market

Actions Target Russian Govt. Botnet, Hydra Dark Market

| | Ars Technica, Asus, Beserk Bear, Cyclops Blink, Dan Goodin, Dragonfly 2.0, FBI, Federal Security Service, Garantex, German Federal Criminal Police Office, GRU, Hydra Market, Main Intelligence Directorate, Ne'er-Do-Well News, NotPetya, Ransomware, Russian FSB, Sandworm, TRISIS, triton, U.S. Department of Justice, U.S. Department of Treasury, Voodoo Bear, VPNFilter, WatchGuard, Web Fraud 2.0
The U.S. Federal Bureau of Investigation (FBI) says it has disrupted a giant botnet built and operated by a Russian government intelligence unit known for launching destructive cyberattacks against energy infrastructure in ...
Krebs on Security
Exploiting (and Patching) a Zero Day RCE Vulnerability in a Western Digital NAS

Another 0-Day Looms for Many Western Digital Users

| | Ars Technica, Dan Goodin, Latest Warnings, MyBook Live, MyCloud OS 3, MyCloud OS 5, Pedro Ribeiro, PWN2OWN, Radek Domanski, The Coming Storm, Time to Patch, Western Digital
Countless Western Digital customers saw their MyBook Live network storage drives remotely wiped in the past month thanks to a bug in a product line the company stopped supporting in 2015, as ...
Krebs on Security
Panel Discussion: John Strand, Christopher Nickerson, & Deviant Ollam - Awareness Con 2019

Iowa Prosecutors Drop Charges Against Men Hired to Test Their Security

| | A Little Sunshine, Ars Technica, Chad Leonard, Chris Nickerson, Coalfire, Dallas County, Dallas County Attorney Charles Sinnard, Dan Goodin, Gary DeMercurio, Justin Wynn, Matthew Linholm, Sen. Zach Whiting, State Sen. Amy Sinclair, Tom McAndrew
On Sept. 11, 2019, two security experts at a company that had been hired by the state of Iowa to test the physical and network security of its judicial system were arrested ...
Krebs on Security