Episode 34 - Black Friday Special

Trigger warning, this episode is over an hour long; do not time anything with the length of this episode. This Week in InfoSec21st November 2008: The Conficker worm was first discovered. It spread quickly by exploiting a vulnerability that was addressed via the patch described in Microsoft's out-of-band bulletin MS08-067 four weeks prior. It infected millions of computers, at the time more than any worm since 2003.https://twitter.com/todayininfosec/status/1330292959766573056?s=2022nd November 1987: Chicago TV stations WGN and WTTW had their signals overridden in 2 separate incidents by a man in a Max Headroom mask. To this day, the perpetrator is unknown. The second incident was...uh...wow...just wow. It's a must-watch.  Video: https://youtu.be/tWdgAMYjYSshttps://allthatsinteresting.com/max-headroom-hackhttps://twitter.com/todayininfosec/status/1330512600539521027?s=2024th November 2014: The Washington Post published an article which included a picture of TSA master keys. As a result, a short time later functional keys were 3-d printed using the [unblurred] key patterns displayed in the picture.  https://www.washingtonpost.com/local/trafficandcommuting/where-oh-where-did-my-luggage-go/2014/11/24/16d168c6-69da-11e4-a31c-77759fc1eacc_story.htmlhttps://twitter.com/todayininfosec/status/1331385955916402690?s=20 Tweet of the Weekhttps://twitter.com/geoffbelknap/status/1331690657170157568?s=20An outage with Amazon's web infrastructure left smart-home enthusiasts unable to use basic household items.Amazon Web Services is a huge part of the company's business and the backbone of the internet's most popular sites and services.A widespread US outage late on Wednesday disrupted many of those services.Robot vacuums and smart doorbells suddenly stopped working in people's homes.https://www.bbc.co.uk/news/technology-55087054I Cut the 'Big Five' Tech Giants From My Life. It Was Hellhttps://gizmodo.com/i-cut-the-big-five-tech-giants-from-my-life-it-was-hel-1831304194 Billy Big BallsA Hacker Nearly Stole $8 Million From An Aussie Hedge Fund Using A Fake Zoom InviteA fake Zoom invite has led to the demise of a successful Sydney-based hedge fund and nearly cost it $8.7million after a hacker was able to send off fake invoices on behalf of the firm.On Monday, the AFR reported that Levitas Capital was forced to close after its major client Australian Catholic Super withdrew its funds in the wake of the September cyber attack.The hedge fund's cyber investigators have pinpointed a fake Zoom invite opened by one of the fund's cofounders Michael Fagan or Michael Brookes.https://www.gizmodo.com.au/2020/11/a-hacker-nearly-stole-8-million-from-an-aussie-hedge-fund-using-a-fake-zoom-invite/ Lost All The Money! Industry NewsMicrosoft Announces Pluton Processor for Better Hardware Security#ISSE2020: Focus on 2020's Crypto Successes Rather than Efforts to Break itNCSC Issues Warning About Expected #BlackFriday Scams#COVID19 Drives Massive Multi-Cloud AdoptionFines Less of a Concern than Reputational Damage for Public Sector SecurityHome Depot Settles with US States Over 2014 Data BreachDDoS Attacks Against Online Retailers Increase Four-Fold During PandemicDefining Codes of Conduct to Enable Post Brexit GDPR ComplianceGDPR Has Had Successes, Requires Public Knowledge of Data Spread Javvad's Weekly NewsUp to 350,000 Spotify Users Targeted by Credential StuffersBeware of Black Friday Deals That Are Too Good To Be TrueData Breach of Online Kids’ Game Exposed Personal Data of 46 Million Parents and ChildrenSpotify Hit by Credential Stuffing Attack, 300K+ Accounts VulnerableFraud Operation Targets Spotify Users With Leaked DatabaseThom calling it:Manchester United Investigating Cybersecurity IncidentUK Football Club Says No Evidence of Fan Data Being Breachedhttps://www.databreachtoday.eu/manchester-united-investigating-cybersecurity-incident-a-15438 Rant of the WeekLeaked docs from inside Amazon’s Global Security Operations Center reveal company’s use of Pinkerton operatives—private intel—to spy on workers and the extensive monitoring of labor unions, environmental activists, and other social movementshttps://www.vice.com/en/article/5dp3yn/amazon-leaked-reports-expose-spying-warehouse-workers-labor-union-environmental-groups-social-movementshttps://twitter.com/josephfcox/status/1330924178875109376?s=20 The Little PeopleThis week we are joined by the opinionated but equally correct Tricia Howard @TriciaKicksSaaS  Come on! Like and bloody well subscribe!