Collection of the {cyber,info}security resources and links I have found insightful and shared during week #03 of 2023. Exploits released for two Samsung Galaxy App Store vulnerabilities Two vulnerabilities in the Galaxy App Store, Samsung’s official repository for its devices, could enable attackers to install any app in the Galaxy Store without the user’s knowledge or to direct victims…

Collection of the {cyber,info}security resources and links I have found insightful and shared during week #02 of 2023. Fortinet: Govt networks targeted with now-patched SSL-VPN zero-day Fortinet says unknown attackers exploited a FortiOS SSL-VPN zero-day vulnerability patched last month in attacks against government organizations and government-related targets. ”The discovered Windows sample attributed to the attacker displayed artifacts of…

Collection of the {cyber,info}security resources and links I have found insightful and shared during week #01 of 2023. Slack’s private GitHub code repositories stolen over holidays Slack suffered a security incident over the holidays affecting some of its private GitHub code repositories. The immensely popular Salesforce-owned IM app is used by an estimated 18 million users at workplaces…

Collection of the {cyber,info}security resources and links I have found insightful and shared during week #52 of 2022. Ukraine shuts down fraudulent call center claiming 18,000 victims A group of imposters operating out of a Ukrainian call center defrauded thousands of victims while pretending to be IT security employees at their banks. They contacted the victims, claimed that their…

Collection of the {cyber,info}security resources and links I have found insightful and shared during week #51 of 2022. Eufy camera security breach admission leaves many questions unanswered Early December, Paul Moore, a security researcher, revealed a frightening security situation with Eufy home security products including camera-equipped doorbells. …

Collection of the resources and links I have found insightful and shared during week #50 of 2022. Google introduces end-to-end encryption for Gmail on the web Once enabled, Gmail client-side encryption will ensure that any sensitive data delivered as part of the email’s body and attachments can not be decrypted by Google servers. Gmail E2EE beta is currently available…