Profitable Misery

How Silicon Valley turned isolation into a business model, and what we can do about it

U.S. Indicts 14 North Koreans in Fake IT Worker Scheme

The 14 indicted North Koreans generated at least $88 million over six years.

After Salt Typhoon Hack, Wyden Calls For Telecom Security Mandates

Under Wyden's proposed bill, the Federal Communications Commission (FCC) would be required to issue security mandates for telecoms systems, aimed at preventing "unauthorized interceptions"

Threat Actors Exploit Flaw in Cleo File Transfer Tools ‘En Masse’

Threat actors are exploiting a vulnerability (CVE-2024-50623) in Cleo file transfer tools.

🎓️ Vulnerable U | #093

Big Vulnerable U Announcement, US Telcos still currently owned by China, Scattered Spider arrests, Crypto Supply Chain attacks, and much more!

The Loneliness Tax: We're All Paying It

Zero Days to Zero Friends - What is the real threat?

Russian APT Secret Blizzard Piggybacks on Other Groups' Infrastructure

The FSB-affiliated group has taken over other APT teams' C2 servers and tools

U.S. Officials Tell Americans to Use Encrypted Apps as Scope of Cyberattack Grows

At least eight U.S. telecom firms and dozens of nations have been tied up in the unprecedented Salt Typhoon attack, according to new details from U.S. officials.

Solana's Web3.js Library Compromised in Supply Chain Attack

Two unauthorized library versions - 1.95.6 and 1.95.7 - have since been unpublished, and Solana app developers should upgrade to version 1.95.8

Attacks Target Cisco ASA Flaw From 2014

The flaw is a cross-site scripting vulnerability and a botnet has been seen exploiting it

FTC Prohibits Two Data Brokers From Selling Sensitive Location Data

The FTC is cracking down on data brokers Gravy Analytics Inc. and Mobilewalla, alleging they tracked and sold sensitive location data linked to places like medical or religious facilities, without consent.

Global Crackdown on Cybercrime Nets 5,500 Arrests