Shannon Morse

ACTION ALERTS + Extra Stories You Should Know About! (Patreon)

Published:

2021-12-01 20:00:05

Imported:

2022-07

Content

Here are some additional stories I couldn't fit into ThreatWire for this week but are important to know!

Cisco Talos discovered a new windows installer zero day exploit in the wild, used on fully patched systems:

https://thehackernews.com/2021/11/warning-hackers-exploiting-new-windows.html

Using Huawei AppGallery? Over 9 million android devices were infected with trojans that can steal info via the AppGallery:

https://www.bleepingcomputer.com/news/security/over-nine-million-android-devices-infected-by-info-stealing-trojan/

Four banking trojans were targeting over 300k android devices:

https://thehackernews.com/2021/11/4-android-banking-trojan-campaigns.html

Kraken Security Labs showed off this cool and totally unsophisticated (and cheap!) way you can bypass biometric fingerprint sensor authentication:

https://www.bleepingcomputer.com/news/security/biometric-auth-bypassed-using-fingerprint-photo-printer-and-glue/

DuckDuckGo is introducing a tool that can help keep apps from tracking you on Android: https://arstechnica.com/gadgets/2021/11/duckduckgo-wants-to-stop-apps-tracking-you-on-android/

See other important news stories? You can always share those with me via Discord or right here on the Patreon page! As always, I give shoutouts to Alliance members if I use your story links in the show!

Files

Biometric auth bypassed using fingerprint photo, printer, and glue

Researchers demonstrated that fingerprints could be cloned for biometric authentication for as little as $5 without using any sophisticated or uncommon tools. Although fingerprint-based biometric authentication is generally considered superior to PINs and passwords in terms of security, the fact that imprints can be left in numerous public places makes it ripe for abuse.