DecryptedTech Feed (3739)
After Admitting Breach, Okta Attempted to Downplay the Impact
Posted on Thursday, 24 March 2022
in
Security Talk
Written by
Sean Kalinich
On the 22nd of March Okta finally confirmed that they were breached in January for a period of 5 days. The breach, according to information now disclosed, happened due to the compromise of an account of a support engineer. The…
Read 1258 times
Google Message and Phone Dialer App Quietly Collecting User Data without Consent
Posted on Wednesday, 23 March 2022
in
Security Talk
Written by
Sean Kalinich
Once again Google has been caught with their hands in the personal data collection cookie jar. It seems that their Messages and Phone Dialer Apps were sending information about your calls and messages without giving the user any chance to…
Read 875 times
Microsoft Confirms Lapsus$ Attack and Data Theft release TTPs on the Group
Posted on Wednesday, 23 March 2022
in
Security Talk
Written by
Sean Kalinich
Microsoft has finally acknowledged the attack and theft of source code by the Lapsus$ group (tracked as DEV-0537). According to the announcement, a single user account was compromised to gain limited access to their systems and source code. The public…
Read 759 times
Okta, like Microsoft, Is Investigating Claims by Lapsus$ that They Have Been Breached
Posted on Tuesday, 22 March 2022
in
Security Talk
Written by
Sean Kalinich
Earlier today we covered the leak of Microsoft source code by the Lapsus$ group. The group leaked a portion of the data they claim to have stolen in the form of a 37GB dump. This dump has added to the…
Read 817 times
Lapsus$ Leaks Some of the Source Code they Claim they Stole from Microsoft
Posted on Tuesday, 22 March 2022
in
Security Talk
Written by
Sean Kalinich
Yesterday we reported that the source code stealing group, Lapsus$, claimed they have breached and stollen source code from Microsoft. They made the announcement on their Telegram account by posting a screenshot of the projects they claimed to have access…
Read 840 times
Elden Ring has a Flaw that Invaders are Using to Corrupt Game Saves
Posted on Monday, 21 March 2022
in
In Other News
Written by
Sean Kalinich
Elden Ring, from developer FromSoftware seems to have a flaw that is allowing an interesting attack for PC players. The flaw allows invaders, malicious players that enter another player’s world to cause a game crash, this crash leads the player…
Read 951 times
Lapsus$ Claims They have Some Microsoft Azure Source Code, Microsoft is Investigating the Claim
Posted on Monday, 21 March 2022
in
Security Talk
Written by
Sean Kalinich
The Lapsus$ group has been in the news recently for theft of source code form some high-profile targets. These targets have included companies like NVIDIA, Samsung, Vodafone, and Ubisoft. The NVIDIA event was noteworthy as it included a claim that…
Read 1272 times
New Browser in the Browser Attack Improves on Phishing Campaigns
Posted on Monday, 21 March 2022
in
Security Talk
Written by
Sean Kalinich
Phishing, regular and spear, is a very common method of compromising accounts and gaining access to a network. In many incidents, the initial compromise can be traced back to a compromised account via some sort of phishing message. This happens…
Read 680 times
SolarWinds Says Remove Web Help Desk from Public Access to Avoid Possible Attack
Posted on Thursday, 17 March 2022
in
Security Talk
Written by
Sean Kalinich
Recently a SolarWinds Web Help Desk client reported an attempted attack on their externally facing Web Help Desk instance. The attack was caught by their EDR system which was able to block the attempt. However, the reported attack, after a…
Read 691 times
Open Source Community Takes a Hit as One Developer Pushes Destructive Content as a Form of Protest
Posted on Thursday, 17 March 2022
in
Security Talk
Written by
Sean Kalinich
Since the beginning of the Russian invasion of Ukraine we have seen a massive increase in what can only be called cyber warfare. This battle is not just being fought at the state level though. Even APT groups have gotten…
Read 796 times
MFA Flaw used by State Threat Actors to Move Around your Network
Posted on Wednesday, 16 March 2022
in
Security Talk
Written by
Sean Kalinich
Multi-Factor Authentication is often seen as an answer to account compromise, or at least a partial answer to this issue. The problem is that MFA is that while it can help with account compromise, it is certainly not the end…
Read 555 times
Microsoft Says Ads in Windows 11 File Explorer Were Not Meant for Us to See
Posted on Wednesday, 16 March 2022
in
Security Talk
Written by
Sean Kalinich
Yesterday we reported that insider builds of Microsoft’s Windows 11 were displaying ads for other Microsoft services inside File Explorer. Like most people, we felt this was not a good thing and the news went around the internet at a…
Read 804 times
Phishing Campaign Targeting Ukraine uses Fake AntiMalware Update
Posted on Tuesday, 15 March 2022
in
Security Talk
Written by
Sean Kalinich
Ukrainian Security Officials are warning of an active phishing campaign. The campaign involves emails that impersonate government agencies and include links to what appear to be critical security updates. The payload of the campaign delivers Cobalt Strike and a few…
Read 527 times
Microsoft Testing Ads in File Explorer as Part of Preview Builds of Windows 11
Posted on Tuesday, 15 March 2022
in
Security Talk
Written by
Sean Kalinich
Microsoft, famous for bad marketing moves, is looking to make another one. In this case the mistake has not hit the general public but is in a preview build of Windows 11. The mistake is shoveling ads to people for…
Read 1001 times
The Slippery Slope of Censorship Happening Around the Russian Invasion of Ukraine
Posted on Monday, 14 March 2022
in
My Ramblings
Written by
Sean Kalinich
The internet is a great thing. It has allowed peoples of different nations and geographical locations to meet, talk, share information and ideas. The massively connected world we live thanks to the internet is one where information of all kinds…
Read 822 times
Why the ZuckerVerse is not the Wonderful Thing Some Might Think it is
Posted on Monday, 14 March 2022
in
In Other News
Written by
Sean Kalinich
The concept of an immersive virtual reality world is one that is often talked and written about. It also has been the subject of several movies. When it is the topic of books and movies, it is rarely a good…
Read 699 times