🔓 [CyberFacts Weekly - 0x07] FBI Portal Abused to Mass Email / Breached Robinhood Data for Sale / New Rowhammer-class Vulnerability / Backdooring Rust Crates
This weekend I had two interesting experiences that got my nerd spirit boil hot: I brought my 6yo son to his first cyber-security conference (NoHat 2021 on...
🔓 [CyberFacts Weekly - Issue 0x06] Notes from Black Hat Locknote - New Hacker-for-hire Group Discovered by Trend Micro / Vulns in Critical Network Protocol / Practical HTTP Header Smuggling / BusyBox Affected by 14 New Vulns / PS5 Unlock Keys Extracted / INTERPOL Hits Prolific Ransomware Ring / Flash Beams Reboot RPi2s / Pwn2Own Austin 2021
Greetings! 👋 Just back from Black Hat Europe, which was great as it's been more than 2 years without an on-site conference (at least for me). Was a very nice...
🔓 [CyberFacts Weekly - Issue 0x05] It's (Almost) the Season to be Jolly 🎅
Oh oh oh! I guess I’m a little early this year, but after having spent the Halloween weekend at home with no adequate trick or treating because of the rain,...
🔓 [CyberFacts Weekly - Issue 0x04] Happy Halloween 🎃
Greetings! 🎃 Interesting week in Europe, right? It's interesting to see the parallel between (1) the social protests happening in Italy about the regulations...
🔓[CyberFacts Weekly - Issue 0x03] Twice the Content, New Workflow
Hello! 👋 I should have never skipped last week's CyberFacts Weekly, because...guess what, now I had to process twice the load! 🥵 But last week was definitely...
🔓 [CyberFacts Weekly - Issue 0x02] The Week of Massive Leaks" subtitle: "Twitch leak (128GB) / Telegraph DB exposed (10TB) / Full iOS 15 decompiled source code / FB/IG/WA disappeared from the Internet / New ESP-persistent UEFI bootkit found / LeakIX 2.0 vs. exposed services / Pandora Papers is the new Panama Papers / SMS-routing service compromised for years / Phrack #70 is out / Apache CVE-2021-41773 patched / SOS.dev pilot to secure OSS / Ransomware gang arrested in Ukraine
I think this week's featured image by the @archillect AI is very appropriate, given the 3 massive leaks that happened (plus FB/IG/WA downtime, although not...
🔓 [CyberFacts Weekly - Issue 0x01]: Malware targeting gamers / VSCode extension with command injection / OWASP turns 20 / Chrome fixes an RCE / AirTags can carry XSS payload / PoC exploit for VMware CVE-2021-22005 / More Apple bug bounty drama / Android bankers / Bitcoin ATMs vulnerable to tampering / New SolarWinds details / When ransomware hits hospitals / Bug in ApplePay Express Mode with VISA / Threat actors posing as Amnesty
Hello ☺️ The second issue of CyberFacts Weekly is out and I have to say that I'm quite happy to see a (slowly) growing interest around both this weekly...
🔓 [CyberFacts Weekly - Issue 0x00] AlphaBay’s founder is back / Donation sites abuse for card testing / Apple Tracking Transparency lets trackers track / AI can introduce vulnerabilities in code / Valid PEs that evade integrity checks / High-res satellite imagery as a service / BulletProofLink PAAS operation / How UAE spy program recruited an NSA hacker
Hello 👋 And welcome to the first issue of the CyberFacts Weekly 🥳 I've started to systematically keep an archive of my readings since early 2021. There are...