For TechCrunch, I wrote about Unit 221B, a cybersecurity company that's recently made a name for itself by tracking today's top English-speaking hacking groups, including Scattered Spider, and helping to disrupt their operations. Now the company has raised $5 million to focus on the threat.
Zensec has a good article on the Akira ransomware group's tactics taken directly from their DFIR experience on 16+ incidents. A few key take-aways:
- Initial Access: Please, please please patch your Internet-facing VPN and firewall devices including your Sonicwall, Cisco ASA and Watchguard devices.
- Patch our Veeam software. They used vulnerable Veeam installs to perform privilege escalation
- Block access to Anydesk.com and remotedesktop.google.com if you don't use those services
#cybersecurity #ransomware
https://zensec.co.uk/blog/unmasking-akira-the-ransomware-tactics-you-cant-afford-to-ignore/
NEW: When “Goodbye” isn’t the end: Scattered LAPSUS$ Hunters hack on
Others seem to have interpreted their "goodbye" message differently than I had. Were they lying or did people just not understand a significant statement in their message?
And while headlines focus on them hitting a bank, I think we need to take a closer look at their attacks on the aviation sector.
https://databreaches.net/2025/09/21/when-goodbye-isnt-the-end-scattered-lapsus-hunters-hack-on/
#databreach #ScatteredSpider #ShinyHunters #LAPSUS$ #CollinsAerospace #airlines #airports
The Guardian have a look inside the crisis at Jaguar Land Rover.
There's no new information, other than sources at the company saying they don't realistically know when they will be able to restart production.
https://www.theguardian.com/business/2025/sep/20/jaguar-land-rover-hack-factories-cybersecurity-jlr
If any journalists want a list of top impacted airports to check: https://infosec.exchange/@nieldk/115237394885804514
BBC have Dublin and Cork added.
@cirriustech @[email protected] here are the “top ten” airports using vMUSE. See any you recognize in Europe as listed in current incident ;) 1. London Heathrow (LHR) 2. Glasgow Airport (GLA) 3. Berlin Schönefeld (SXF) 4. Dublin Airport (DUB) 5. Cork Airport (ORK) 6. Cologne Bonn Airport (CGN) 7. Mazatlán International Airport (Mexico) 8. Zihuatanejo International Airport (Mexico) 9. Monterrey International Airport (Mexico) 10. Velana International Airport (Maldiverne)
Linkedin will auch Deine Daten für seine KI
Ab November stehen alle Nutzerdaten auf Linkedin zum Training Künstlicher Intelligenzen zur Verfügung – außer, die Nutzer widersprechen.
#Datenschutz #Entertainment #GenerativeAI #LinkedIn #Microsoft #Werbebranche #SocialMedia #Wirtschaft #news
For privacy researchers, this thread is interesting. iOS allow apps to make network requests after push notifications.
Instagram (and others) appear to be using this to profile devices, eg retrieve device uptime without their customer opening Instagram.
This one probably needs more eyes on it. https://mastodon.social/@mysk/115204746326765802