ACTION ALERTS & STUFF YOU SHOULD KNOW! (Patreon)

This is your exclusive bonus news alert just for patrons. Thank you for supporting this weekly content, and make sure to check out all the other perks that come with your membership!

Thanks again for subscribing and trust your technolust.

Twilio suffered a hack which exposed the Signal numbers for 1900 users: https://www.bleepingcomputer.com/news/security/twilio-hack-exposed-signal-phone-numbers-of-1-900-users/

LockBit had a data leak and blamed Entrust: https://www.bleepingcomputer.com/news/security/lockbit-ransomware-blames-entrust-for-ddos-attacks-on-leak-sites/

CISA just added 7 more vulnerabilities to their Known Exploited Vulnerabilities Catalog:

https://www.bleepingcomputer.com/news/security/cisa-adds-7-vulnerabilities-to-list-of-bugs-exploited-by-hackers/

Some zero days were fixed in Apple’s latest Safari update:

https://www.bleepingcomputer.com/news/security/apple-releases-safari-1561-to-fix-zero-day-bug-used-in-attacks/

Along with a patch for iOS and MacOS which fixes some additional zero days: https://www.bleepingcomputer.com/news/security/apple-security-updates-fix-2-zero-days-used-to-hack-iphones-macs/

Also, a researcher found that iOS VPNs leak traffic data: https://arstechnica.com/information-technology/2022/08/ios-vpns-still-leak-traffic-more-than-2-years-later-researcher-claims/

Researchers at Bitdefender found some Android apps that are actually malware: https://www.bleepingcomputer.com/news/security/android-malware-apps-with-2-million-installs-found-on-google-play/

Plus, researchers have already found a way to circumvent Android 13 security settings: https://www.bleepingcomputer.com/news/security/malware-devs-already-bypassed-android-13s-new-security-feature/

This Janet Jackson HDD crashing vulnerability is like rick rolling but funnier: https://www.bleepingcomputer.com/news/security/janet-jacksons-music-video-is-now-a-vulnerability-for-crashing-hard-disks/

Google blocks a huge DDOS attack: https://www.bleepingcomputer.com/news/security/google-blocks-largest-https-ddos-attack-reported-to-date/

Facebook is testing out default E2EE and Encrypted backups for messenger: https://thehackernews.com/2022/08/facebook-testing-default-end-to-end.html

Zoom had to patch their patch: https://arstechnica.com/information-technology/2022/08/zoom-patches-critical-vulnerability-again-after-prior-fix-was-bypassed/

Here’s a great write up about the John Deere jailbreak shown off at DEF CON: https://arstechnica.com/information-technology/2022/08/a-new-jailbreak-for-john-deere-tractors-rides-the-right-to-repair-wave/

Share this with folks who might need to be warned: there a new Paypal phishing scam making it’s rounds: https://krebsonsecurity.com/2022/08/paypal-phishing-scam-uses-invoices-sent-via-paypal/