Coming in cold with custom Snow malware A previously unknown threat group using tried-and-tested social engineering tactics – Microsoft Teams chat invitations and helpdesk staff impersonation – is also using custom malware in its data-stealing attacks, according to Google’s Threat Intelligence Group.… READ MORE HERE…

Silicon often from US, but the kit from APAC and elsewhere America’s telco regulator has clarified its ban on foreign-made routers also includes mobile hotspots and domestic routers that use a 5G cellular connection to the internet.… READ MORE HERE…

Leak-site bragging meets breach hunters as Have I Been Pwned flags millions of records Carnival Corporation, the world’s largest cruise company, is dealing with choppy waters after Have I Been Pwned flagged what it claimed were 7.5 million unique email addresses all allegedly tied to one of its subsidiaries. … READ MORE HERE…

Demonstrated in China, probably applicable elsewhere Black Hat Asia  Developers of rented internet of things infrastructure – stuff like public EV chargers and shared e-bikes – are prioritizing user convenience over security, and leaving themselves exposed to wide-scale denial of service attacks on their services.… READ MORE HERE…

Push to protect minors risks hitting everyone online Proton’s boss has waded into the age verification fight with a warning that sounds less like child safety and more like an identity checkpoint for the entire internet.… READ MORE HERE…