| @davidshipley | |
| Website | www.beauceronsecurity.com |
Here's another Recall issue I see.
I have the sensitive information filter option enabled, highlighted. If I update my credit card on Microsoft's website, it captures the card number, CVV and details, and indexes it into the text database too and stores it under 'credit card', accessible in search.
The only details obscured are by me altering the screenshot to remove some PII.
(If anybody is wondering, I also tried it with a real card number)
Chilling. Worth a read.
Across Europe and further afield, the picture is similar: Counterterrorism agencies are grappling with a new generation of attackers, plotters and acolytes of extremism who are younger than ever and have fed on ultraviolent and potentially radicalizing content largely behind their screens.
Phishing-as-a-service (PhaaS) platform Tycoon2FA, known for bypassing multi-factor authentication on Microsoft 365 and Gmail accounts, has received updates that improve its stealth and evasion capabilities.
Ten npm packages were suddenly updated with malicious code yesterday to steal environment variables and other sensitive data from developers' systems.
Kevin Beaumont
BleepingComputer
Ars Technica
