Post · bonfire.cafe

@campuscodi@mastodon.social · 3 hours ago

-DigiCert hacked with a malicious screensaver file
-Ransomware negotiators get four years in prison
-Trellix discloses security breach
-Another Russian hacker arrested vacationing in the wrong place
-Secessionist party leaks Albertans personal data
-Fakestortion campaign hits cPanel sites
-Rockstar stock went up after the hack (leaked financials were spectacular)
-Hacker leak exposes Hungarian-Kremlin propaganda coordination

Podcast: https://risky.biz/RBNEWS559/
Newsletter: https://news.risky.biz/risky-bulletin-digicert-hacked-with-a-malicious-screensaver-file/

Risky.Biz

DigiCert hacked with a malicious screensaver file

In other news: Ransomware negotiators get four years in prison; Trellix discloses security breach; another Russian hacker arrested while vacationing in the wrong place.

https://risky.biz

Risky Bulletin: DigiCert hacked with a malicious screensaver file

DigiCert got hacked via a malicious screensaver file, two ransomware negotiators each get four years in prison, Trellix discloses a securi [Read More]

Jonas

@magnetic_tape@infosec.exchange · 2 hours ago

@campuscodi
I'd be curious to know if age of the responders falling for it was a factor. Like millenials won't fall for .SCR but would fall for older and weirder executables formats like .COM .BAT or ($DEITY forbid) .PIF

Zack Whittaker

@zackwhittaker@mastodon.social · 2 hours ago

@campuscodi a malicious screensaver?! what is this, 1997?

hnapel

@hnapel@mastodon.social · 3 hours ago

@campuscodi

This is very serious! The postmortem seems honest and that's OK, but having your certificate authorities breached is a nail in the coffin of the whole trust system.

Catalin Cimpanu

@campuscodi@mastodon.social · 3 hours ago

-DDoS attacks prevent new Ubuntu installs
-Wasabi hacked for $5m
-US lab develops GPS spoofing detector
-New Windows Run app
-Ask Jeeves shuts down
-NSA is testing Mythos
-White House questions tech companies on AI defenses
-Minnesota bans AI nudification apps
-Russia bans import of dual-use satellite terminals
-Russia starts fining gaming companies
-Pharmacist investigated for installing spyware
-Versus admin extradited to US
-Uganda raids scam centers
-SafeMoon co-founder flees to Russia

Catalin Cimpanu

@campuscodi@mastodon.social · 3 hours ago

-North Korea stole 3/4 of all crypto this year
-Malicious Ruby gems and Go modules
-Mini Shai-Hulud spreads to PHP
-New Shadow-Earth-053 APT
-AccountDumpling campaign compromises 30k Facebook users
-Antiy accuses SentinelOne of "psychological warfare"
-Copy Fail vulnerability exploited in the wild
-Android VRP rewards, Chrome go down
-Cisco looks at PQC migration status across 9 protocols
-Bsides Exeter 2026 videos