U.S. cybersecurity agency CISA has acknowledged that while the CrowdStrike outage is *not* a cyberattack, it has observed malicious actors "taking advantage" of the s(h)ituation for "phishing and other malicious activity" and warned organizations to "avoid clicking on phishing emails or suspicious links."

More: https://www.cisa.gov/news-events/alerts/2024/07/19/widespread-it-outage-due-crowdstrike-update

Southwest’s tech debt hurt it back in 2022 but it seems to be doing it some favors today.

Old Windows taketh away, but sometimes old Windows giveth.

https://www.digitaltrends.com/computing/southwest-cloudstrike-windows-3-1/

EDIT: Fix date

EDIT: @peterbutler pushed me to do a little more research, and I’m more comfortable saying it the underlying software probably dates to Windows NT or XP.

Discord continues to be a breeding ground for malicious activity by hackers and now APT groups, with it commonly used to distribute malware, exfiltrate data, and targeted by threat actors to steal authentication tokens.

https://www.bleepingcomputer.com/news/security/discord-still-a-hotbed-of-malware-activity-now-apts-join-the-fun/

Signal messenger has investigated rumors spreading online over the weekend of a zero-day security vulnerability related to the 'Generate Link Previews' feature, stating that there is no evidence this vulnerability is real.

https://www.bleepingcomputer.com/news/security/signal-says-there-is-no-evidence-rumored-zero-day-bug-is-real/

I read through 70,000 words of Apple's privacy policy and associated guides so you don't have to.

Apple's advertising business has grown massively in recent years, with ads appearing in the App Store, News and Stocks apps. Part of this is its personalized advertising. Everything you do in the App Store is tracked, every tap of the screen and scroll of a page.

https://www.wired.com/story/apple-privacy-data-collection/

#apple #wired #data #privacy #news #advertising #infosec

Hmm, CVE-2022-41099 BitLocker Security Feature Bypass Vulnerability

Not sure if this is the issue I reported, will have to bindiff the actual patch to make sure...