POPULARITY
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Another Israeli spyware vendor surfaces. Win11 to delete restore points more quickly. The EU accelerates its plans to abandon Microsoft Azure. The EU sets timelines for Post-Quantum crypto adoption. Russia to create a massive IMEI database. Canada and the UK create the "Common Good Cyber Fund". U.S. states crack down on Bitcoin ATMs amid growing scams. Congressional staffers cannot use WhatsApp on gov devices. LibXML2 and the problems with commercial use of OSS. A(nother) remote code execution vulnerability in WinRAR. Have-I-Been-Pwned gets a cool data visualization site. How is ransomware getting in? Windows to offer "safe" non-kernel endpoint security? Proactive age verification coming to porn sites. How? Canada (also) says "bye bye" to Hikvision. Germany will be banning DeekSeek. The whole EU may follow. Cloudflare throttled in Russia? What must the U.S. do to compete in global exploit acquisition? Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow Melissa.com/twit 1password.com/securitynow hoxhunt.com/securitynow canary.tools/twit - use code: TWIT
Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.comChapters:00:00 - PreShow Banter™ — Names on Cups01:39 - Year of the [European Union] Linux Desktop Finally Arrives? | BHIS - Talkin' Bout [infosec] News 2025-06-3003:34 - Story # 1: You should probably delete any sensitive screenshots you have in your phone right now.10:55 - Story # 2: Ongoing Campaign Abuses Microsoft 365's Direct Send to Deliver Phishing Emails14:07 - Story # 3: The year of the European Union Linux desktop may finally arrive24:46 - Story # 4: Restricted data once again leaked on War Thunder forums27:04 - Story # 5: Scale AI Leaks Meta, Google, xAI Confidential Files Through ‘Incredibly Janky' Document Practices31:47 - Story # 6: French police reportedly arrest suspected BreachForums administrators34:22 - Story # 7: Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages39:41 - Story # 8: CitrixBleed 2: Electric Boogaloo — CVE-2025–577742:16 - Story # 9: Millions of Brother Printers Hit by Critical, Unpatchable Bug47:05 - Story # 10: Canada orders China's Hikvision to close Canadian operations50:13 - Story # 11: US House bans WhatsApp on staff devices over security concerns53:17 - ChickenSec: Chickens are becoming 3rd most popular pet: Tractor Supply CEO56:34 - Story # 12: Norway Dam Hacked, Valve Opened But No Danger58:11 - Review your calendar invites!
Streaming is officially more popular than traditional media avenues. What this means for integrators installing the solutions to get these services. HDMI 2.2 has been released by the HDMI forum. Are we still on the HDMI train, or is GPMI the next big thing? Canada orders China-based Hikvision to shudder Canadian operations. What this means for the industry at large.The video version of this podcast can be found here.Every week we find the biggest news from the residential side of the AV industry. We discuss these topics with a panel of experts in the space. Joining us this week is Bob Archer from CE Pro and Jeremy Glowacki from Projector Central.Host: Matt ScottGuests:Bob Archer – CE ProJeremy Glowacki – Projector CentralLinks to sources:CE Pro – Streaming Higher than CableResidential Systems – HDMI 2.2 SpecificationsReuters – Canada Halts Hikvision operations in CanadaSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Sony, Scattered Spider, Hikvision, Cybercrime, Iran, BSODs, Cloudflare, Josh Marpet, and more on the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-490
In this week's Security Sprint, Dave and Andy covered the following topics:Warm Open:• The GRIP is one year old and to celebrate, we're running an anniversary sale!!• Join the GRIP in July and use promo code HOTJULY2025 to receive a 20% discount!• (TLP:CLEAR) Hostile Nation States Employing Non-State Actors• Surge in MOVEit Transfer Scanning Could Signal Emerging Threat Activity• ‘Suspended animation': US government upheaval has frayed partnerships with critical infrastructure• Short-term extension of expiring cyber information-sharing law could be on the table• Gate 15 is excited to offer a low-cost ransomware resilience exercise for executives! Contact us today for more information on this great opportunity!Main Topics:Iranian Cyber Actors May Target Vulnerable US Networks and Entities of Interest. CISA, the Federal Bureau of Investigation (FBI), the Department of Defense Cyber Crime Center (DC3), and the National Security Agency (NSA) published Iranian Cyber Actors May Target Vulnerable US Networks and Entities of Interest. This joint fact sheet details the need for increased vigilance for potential cyber activity against U.S. critical infrastructure by Iranian state-sponsored or affiliated threat actors. Defense Industrial Base companies, particularly those possessing holdings or relationships with Israeli research and defense firms, are at increased risk. At this time, we have not seen indications of a coordinated campaign of malicious cyber activity in the U.S. that can be attributed to Iran. Beazley Report: U.S. Executives Misjudge Their Cyber Preparedness. U.S.-based executives feel more prepared to counter cyber threats, potentially indicating a false sense of security because many companies lack the ability to be adequately preparedness, according to a new report from specialist insurer Beazley. According to the report, Spotlight on Tech Transformation & Cyber Risk 2025, the perception of cyber resilience rose to 81% from 73% a year ago. Hostile Events:• A violent ambush in Idaho leaves 2 firefighters dead and 1 injured. What to know about the attack• Suspect Identified in Deadly Ambush of Idaho Firefighters• Chilling ‘coincidence' of Idaho shooting sends internet sleuths into overdrive• Gunman started Idaho blaze and then fatally shot 2 firefighters in ambush attack, officials say• Here's a timeline of how the Canfield Mountain ambush shooting unfolded• Multiple firefighters reportedly shot while responding to fire near Coeur d'Alene• Europol: New report - major developments and trends on terrorism in Europe in 2024Quick Hits:• Canadian Centre for Cyber Security - Vulnerabilities impacting Citrix NetScaler ADC and NetScaler Gateway - CVE-2025-5349, CVE-2025-5777 and CVE-2025-6543 • Over 1,200 Citrix servers unpatched against critical auth bypass flaw• The State of Ransomware 2025• Scattered Spider hackers shift focus to aviation, transportation firms • Scattered Spider's Calculated Path from CFO to Compromise • M&S fashion rivals ‘benefited from its pause on online orders after cyber-attack' • Ransomware attack contributed to patient's death• Canada orders Chinese CCTV biz Hikvision to quit the country ASAP• FBI PSA - Criminals Posing as Legitimate Health Insurers and Fraud Investigators to Commit Health Care Fraud• 50 Customers of French Bank Hit by Insider SIM Swap Scam; An intern at Société Générale is believed to have facilitated the theft of more than EUR1mn (USD1.15mn) from the bank's customers.• State of CPS Security 2025: Building Management System Exposures • H1 2025 Crypto Hacks and Exploits: A New Record Amid Evolving Threats
Sony, Scattered Spider, Hikvision, Cybercrime, Iran, BSODs, Cloudflare, Josh Marpet, and more on the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-490
Sony, Scattered Spider, Hikvision, Cybercrime, Iran, BSODs, Cloudflare, Josh Marpet, and more on the Security Weekly News. Show Notes: https://securityweekly.com/swn-490
CISA warns organizations of potential cyber threats from Iranian state-sponsored actors.Scattered Spider targets aviation and transportation. Workforce cuts at the State Department raise concerns about weakened cyber diplomacy. Canada bans Chinese security camera vendor Hikvision over national security concerns.Cisco Talos reports a rise in cybercriminals abusing Large Language Models. MacOS malware Poseidon Stealer rebrands.Researchers discover multiple vulnerabilities in Bluetooth chips used in headphones and earbuds. The FDA issues new guidance on medical device cybersecurity. Our guest is Debbie Gordon, Co-Founder of Cloud Range, looking “Beyond the Stack - Why Cyber Readiness Starts with People.” An IT worker's revenge plan backfires. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On today's Industry Voices segment, Debbie Gordon, Co-Founder of Cloud Range, shares insights on looking “Beyond the Stack - Why Cyber Readiness Starts with People.” Learn more about what Debbie discusses in Cloud Range's blog: Bolstering Your Human Security Posture. You can hear Debbie's full conversation here. Selected Reading CISA and Partners Urge Critical Infrastructure to Stay Vigilant in the Current Geopolitical Environment (CISA) Joint Statement from CISA, FBI, DC3 and NSA on Potential Targeted Cyber Activity Against U.S. Critical Infrastructure by Iran (CISA, FBI, DOD Cyber Crime Center, NSA) Prolific cybercriminal group now targeting aviation, transportation companies (Axios) U.S. Cyber Diplomacy at Risk Amid State Department Shakeup (GovInfo Security) Canada Bans Chinese CCTV Vendor Hikvision Over National Security Concerns (Infosecurity Magazine) Malicious AI Models Are Behind a New Wave of Cybercrime, Cisco Talos (Hackread) MacOS malware Poseidon Stealer rebranded as Odyssey Stealer (SC Media) Airoha Chip Vulnerabilities Expose Headphones to Takeover (SecurityWeek) FDA Expands Premarket Medical Device Cyber Guidance (GovInfo Security) 'Disgruntled' British IT worker jailed for hacking employer after being suspended (The Record) Audience Survey Complete our annual audience survey before August 31. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here's our media kit. Contact us at cyberwire@n2k.com to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices
The Scattered Spider group targets the aviation sector, Russia throttles traffic from Cloudflare, a Mexican cartel hired hackers to track an FBI official, and Canada tells Hikvision to cease operations. Show notes
Hikvision, een Chinese fabrikant van onder andere beveiligingscamera's, moet op last van de Canadese regering volledig uit Canada vertrekken. Dat heeft de Canadese minister Mélanie Joly voor Industrie aangekondigd op X. Niels Kooloos vertelt erover in deze Tech Update. In haar post op X laat Joly weten dat ze 'informatie en bewijs' van de Canadese inlichtingendiensten heeft gehad waaruit blijkt dat Hikvision de nationale veiligheid van Canada in gevaar brengt. Wat voor informatie en bewijs de inlichtingendiensten precies hebben aangeleverd is echter niet bekend. In Nederland hangen ook camera's van Hikvision, onder andere bij ministeries, politiebureaus en in treinen van de NS. Er is al jaren discussie over een verbod, maar sinds de eerste Kamervragen zijn er op nationaal niveau nog geen harde maatregelen genomen. Wel haalde de gemeente Amsterdam afgelopen jaar nog 1200 Chinese camera's weg uit angst voor spionage door China. Verder in deze Tech Update: Terwijl Jeff Bezos op huwelijksreis gaat, vindt er bij Amazon een scheiding met Nintendo plaats De nieuwe band The Velvet Sundown heeft bijna een half miljoen luisteraars op Spotify, maar nu beginnen luisteraars zich af te vragen of die muziek wel écht door mensen wordt gemaakt See omnystudio.com/listener for privacy information.
Kia ora,Welcome to Monday's Economy Watch where we follow the economic events and trends that affect Aotearoa/New Zealand.I'm David Chaston and this is the international edition from Interest.co.nz.And today we lead with news we are now halfway through 2025, closer to the next summer holiday break than the last one. We may need it more this time because economic 'progress' is hard to find.Looking ahead this week, the big end of month data dumps for May from the RBNZ will give us an updated look at mortgage and term deposit activity. The ANZ will also update us on their business sentiment survey for June. Then later in the week the June updates from the real estate industry will be released.In Australia it will also be about retail and trade updates for May.The week end with the US on another summer holiday break, this one for their Independence Day. Their June labour market report will come a day earlier this week (another low +129,000 is expected), preceded by PMI updates from all over. Markets also expect the US to announce tariff actions after the so-called 90 day pause. But Trump deadlines mean little in war and other diplomatic areas so don't be surprised if they mean little here too. He will go head if they don't hurt his own businesses, pull back if they do.Of more importance to us will be the results of both Chinese and Japanese data and surveys.In China, deflationary pressures not helped by the tariff war are keeping China's industrial profits in a low zone. They barely hit ¥600 bln in May and that was their lowest level for a May month since 2019 and -9.1% lower than May 2024. For the five months they were down -1.1% so the pace of decline is unfortunately building.Across the Pacific in the US, the squeeze on American household incomes shows up in the latest data for personal incomes and spending, this data for May. Incomes were only +1.7% higher than a year ago. Decreases in income support for struggling households is showing up in this data. And after inflation, they will be going backwards on the income front. On the consumption front, spending was up +2.2% from a year ago, also lower than the May 2.4% CPI inflation.This is a sure sign of rising economic stress that is spreading.The final reading of the University of Michigan survey of June consumer sentiment was out overnight and it confirmed the spreading household stress. This survey has been stuck at one of its worst readings on record for two months after plunging almost -30% in the first four months of 2025. Over the 80 years of the survey, a drop this large this fast has almost always predicted a recession. Sentiment readings improved slightly at the start of June but were -18% lower than at the start of the year to indicate Americans expect much higher prices and a much slower economy in the coming year. It should be no surprise this is the outcome of the changed US public policy direction - but the financial markets are ignoring this signal; willfully it seems.They seem to be overlooking these same survey results that show sentiment has fallen fastest this year for the most well-off consumers, whose post-pandemic spending spree helped insulate the American economy from recession then. They aren't there to do it this time, according to the UofM survey data.In Canada, they got weekend news that Trump is going to use tariffs to punish them for trying to tax US Big Tech companies via its Digital Services Tax initiative. The US wants free access to Canada and tax-free. Earlier the Canadians had confirmed the DST, which had been passed by their Parliament, would go into effect on June 30.Separately, Canada has ordered one of the world's largest video surveillance equipment manufacturers, State-owned Hikvision, to cease operations there on national security grounds. The order bars Hikvision from conducting business in Canada and prohibits government departments and agencies from purchasing its products. Existing installations of Hikvision equipment across government properties are under review to ensure their eventual removal. Hikvision cameras and monitoring systems are widely available in Australia and New Zealand.Economic sabotage may be spreading, but so are climate risks. It is early in the northern hemisphere summer season still, but both the US and Europe are struggling with dangerous heat dome conditions. China is not immune. These are sure to have economic implications if they extend through to September as expected.The UST 10yr yield is now at 4.27%, and unchanged from Saturday.The price of gold will start today at US$3,273/oz, and little-changed from Saturday. A week ago it was at US$3365/oz so a -2.8% fall from then.American oil prices are +50c softer from Saturday at just on US$65/bbl while the international Brent price is now just on US$67.50/bbl.The Kiwi dollar is now just on 60.6 USc, up +20 bps from Saturday. A week ago it was at 59.7 USc so a net +1.5% appreciation. Against the Aussie we are -10 bps softer at 92.7 AUc. Against the euro we are unchanged at 51.7 euro cents. That all means our TWI-5 starts today at 68.1 and +10 bps firmer than Saturday. A week ago it was at 67.7 so a net +40 bps gain.The bitcoin price starts today at US$107,509 and up +0.6% from this time Saturday. Volatility over the past 24 hours has stayed low at just on +/-0.6%.You can get more news affecting the economy in New Zealand from interest.co.nz.Kia ora. I'm David Chaston. And we will do this again tomorrow.
Businesses across Canada brace for more U-S tariffs. Canada orders China's Hikvision to close Canadian operationsThe CEO of B-C's Interior Health Authority stepping aside. Iran holds mass funeral for military personnel, secientists, killed in Israeli attacks. UN Secretary Antonio Guterres criticizes system of aid delivery in Gaza, calling it 'unsafe.' The world's fourth richest man, Jeff Bezos, and former TV host, Lauren Sánchez tied the knot in extravagant ceremony in Venice. Canada Day celebrations take place in London's Trafalgar Square.
Hikvision y su distribuidor Sisegusa lanzan en Bolivia su nueva tecnología de audio bidireccional. Michel Dorado y Denis Solís lideran esta ofensiva con DVRs compatibles y una estrategia directa al cliente final.
Gracias a una inteligencia artificial multimodal que entiende texto, imagen y contexto al mismo tiempo, Hikvision ha presentado AcuSeek NVR , un sistema revolucionario que permite encontrar evidencias con solo describir lo que ves.
Sisegusa presentó en Bolivia los nuevos Power X DVR y Turbo 8.0 de HIKVISION, una línea de videograbadores inteligentes con analítica avanzada, IA y reconocimiento facial que redefine la protección perimetral en infraestructuras empresariales.
We're coming back to Barcelona for one of the biggest trade shows for the AV industry. Integrated Systems Europe 2025 comes to the Fira from February 4-7 in Spain, and we're on the path to see what innovative solutions we can expect to see.Jiaqi Leclercq, Pan-Eu Marketing Director for HIKVISION joins us to talk about what they will have in store for their stand at H420 in Hall 3. We also discuss the sustainability of LED screens and what HIKVISION is doing to keep screens going through repair services.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
Episode Summary: This episode covers brute-force attacks on the password reset functionality of Hikvision devices, a macOS SIP bypass vulnerability, Linux rootkit malware, and a novel ransomware campaign targeting AWS S3 buckets. Topics Covered: Hikvision Password Reset Brute Forcing URL: https://isc.sans.edu/diary/Hikvision%20Password%20Reset%20Brute%20Forcing/31586 Hikvision devices are being targeted using old brute-force attacks exploiting predictable password reset codes. Analyzing CVE-2024-44243: A macOS System Integrity Protection Bypass URL: https://www.microsoft.com/en-us/security/blog/2025/01/13/analyzing-cve-2024-44243-a-macos-system-integrity-protection-bypass-through-kernel-extensions/ Microsoft details a macOS vulnerability allowing attackers to bypass SIP using kernel extensions. Rootkit Malware Controls Linux Systems Remotely URL: https://cybersecuritynews.com/rootkit-malware-controls-linux-systems-remotely/ A sophisticated rootkit targeting Linux systems uses zero-day vulnerabilities for remote control. Abusing AWS Native Services: Ransomware Encrypting S3 Buckets with SSE-C URL: https://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-c Attackers are using AWS s SSE-C encryption to lock S3 buckets during ransomware campaigns. We cover how the attack works and how to protect your AWS environment.
The recent pager explosions in Lebanon have led the Indian government to fasttrack the implementation of its guidelines regarding surveillance equipment, which came out earlier this year. The fresh guidelines are likely to come into effect this month and will likely affect Chinese vendors who make up a bulk of the CCTV market in the country. The new guidelines prioritize security, data protection, and the promotion of “Make in India” products. In this episode, we discuss the implications for Chinese players like Hikvision and Dahua, the rise of domestic companies like CP Plus, and how these measures are in line with other governments too which are cracking down heavily on Chinese CCTV equipment. Host Dia Rekhi is joined by Varun Gupta of Counterpoint Research and Ausma Bernot, Expert of Surveillance Tech & Governance to understand how India is reshaping its surveillance landscape. ET Podcasts now has a new show. 7@7 is your quick, sharp sub-5-minute daily roundup of financial news from India and the world. Tune in to Apple Podcasts, Spotify, Amazon Prime Music, Jio Saavn, Youtube or wherever you get your podcasts from! Check out Dia's other interesting episodes like: Behind CCI's Allegations Against Amazon, Flipkart, Can Hosur be a Jamshedpur Plus?, What Makes India The Emerging GCC Capital?, Taxing Times for Infosys, Quantum Computing: Understanding Qubits And The Future, and more! You can follow Dia Rekhi on social media: Linkedin & Twitter Catch the latest episode of ‘The Morning Brief' on ET Play, The Economic Times Online, Spotify, Apple Podcasts,JioSaavn, Amazon Music and Youtube.See omnystudio.com/listener for privacy information.
CP Plus, one of the most popular CCTV camera-makers in India, gets 80% of its supplies for its parent company, Aditya Infotech Ltd (AIL), from the Chinese security-equipment manufacturer Dahua Technology.Dahua and Hikvision, another Chinese surveillance-tech firm, are facing sanctions in the UK, US, Australia, and other countries, for their connection to the Chinese government.But in India growing surveillance tech market, both these companies enjoy more than a 50% market share. And bringing them under control is turning out to be complicated for the government.Tune in.Daybreak is produced from the newsroom of The Ken, India's first subscriber-only business news platform. Subscribe for more exclusive, deeply-reported, and analytical business stories.
ArriveSCAM - Le fédéral vous prend pour des valises Shamelessplug Join Hackfest/La French Connection Discord Join Hackfest us on Mastodon Conférence du RISQ - 21 février 2024 Cisco Engage - Repentigny - 8 février 2024 Conférence du RISQ - 21 février 2024 ALTSECCON - Halifax - 4-5 avril 2024 Conference CYBERECO - Montréal - 23-25 avril 2024 Conférence NorthSec - Montréal - 16-19 mai 2024 FutureCon Montreal CyberSecurity Conference 2024 - 13 June, 2024 Sujet d'opinion ArriveSCAM - les fonctionnaires nous prennent pour des valises Articles L'Association canadienne de la sécurité (CANASA) a récemment pris une décision cruciale en bannissant Hikvision comme commanditaire. LinkedIn Des compagnies de sécurité du Québec montrent la porte à un controversé fabricant chinois de caméras de surveillance Un post de Jonathan Morin sur une boîte de plan de sécurité incendie: attention à la sécurité de l'information! Un post de Michelle Blanc sur la preuve de concept d'un drone tueur avec reconnaissance faciale Un Flipper pour ouvrir un coffre-fort? C'est bien mieux qu'une pomme de terre! Reportage à Radio-Canada du journaliste Christian Noël de la Colline parlementaire. Premier à avoir sorti la nouvelle sur l'orientation du gouvernement fédéral de bannir le Flipper Zero. Il voulait un avis d'un spécialiste et ingénieur alors en tant qu'enseignant à l'ÉTS j'ai collaboré au reportage avec M. Guillaume Ross, chef de la sécurité chez JupiterOne. Résultat, le ministre Champagne dit qu'il va nous donner des licences ?!? Il ne comprend rien de la situation! Watch This Guy Play ‘Doom' on a Toothbrush March 11, 2024 Intelligence Officials Testify on Global Threats Before Senate Cmte. Director of National Intelligence Avril Haines, CIA Director William Burns, and FBI Director Christopher Wray joined other leaders from the intelligence community to testify on worldwide threats, before the Senate Select Intelligence Committee EV Charger Hacking Poses a ‘Catastrophic' Risk Crew Patrick Mathieu Richer Dinelle Steve Waterhouse Jacques Sauvé Francis Coats Crédits Montage audio par Hackfest Communication Musique par Locaux virtuels par Streamyard
Episode 58 dropped today!We touch on Omnilert's Gun Detection, Emergency Response problems and we broach the subject of DIY.I take shots at ADT, sorry not sorry; always shooting at Hikvision, and as always, when it's just Baer and a Microphone he can get kinda weird and he uses the f-word.One love. ✌️#securitytodaypodcast #podcast #security #teknowledgeww #accesscontrol #lowvoltage #physicalsecurity #bethebettertech #podcastlife#podcastersofinstagram #news #blackpicketfence #tkcommunity #learnandgrow#lowvoltagetechnician #industry #locksmithing #securitynews #episode #newepisode#education #technology Brought to you by Sprinter Business Solutions Member of Teknowledge World Wide S/O @runningcables on IG
Oral Arguments for the Court of Appeals for the D.C. Circuit
Hikvision USA, Inc. v. FCC
It shouldn't be a shock that Baer would punch Hikvision in the face... but this time you need to listen. #physicalsecurity #Hikvision #IPVM ChitChat: https://www.washingtonpost.com/dc-md-va/2023/06/06/carjackings-dc-maryland-virginia-data/?utm_medium=email&utm_source=rasa_io&utm_campaign=newsletter Product Highlight: https://www.motorolasolutions.com/content/dam/msi/docs/products/license-plate-recognition-systems/l6q-quick-deploy-lpr-system/l6q-quick-deploy-lpr-camera-datasheet.pdf Meat: https://ipvm.com/reports/hikvision-hacker-targeting https://ipvm.com/reports/cp-sale-hack
EPISODE 239: COUNTDOWN WITH KEITH OLBERMANN A-Block (1:43) SPECIAL COMMENT: Jack Smith is reportedly ready to indict Trump on between 30 and 45 MORE counts. And he is preparing to indict several of Trump's lawyers from the Fake Electors Scheme including (voluntary interview notwithstanding) Rudy Giuliani. And all that is reported by the same British newspaper that correctly nailed the Miami indictments two days before they were finally handed up. CNN adds that the main Trump campaign official in charge of the Fake Electors will take the immunity deal he was offered and testifying for the Special Prosecutor. If the source for Britain's "The independent" is correct, Trump could be facing as many as 77 counts in a superseding indictment, although its sources are not clear if those charges would come in a superseding indictment in Florida or might be filed in a different jurisdiction (and we have already discussed the possibility of Trump being indicted in New Jersey for The Trump Confession Tape, plus all the crimes still on the table in D.C.). There is one intriguing new twist to the seemingly trivial question of where to indict. It will, quoting the story, “depend in part on whether they feel the Trump-appointed district judge overseeing the case against him in the Southern District of Florida, Aileen Cannon, is giving undue deference” to Trump. As to the hapless Giuliani, Feinberg's source says that despite the ex-Mayor's proffer offer to prosecutors, Rudy will quote “most definitely” face at least some charges from Jack Smith's office, dating to his actions in the interval between the election and January 6th. Also: Trump showed that secret map to the co-chair of a lobbying firm taking millions from at least three Chinese tech firms closely linked to the Chinese government. The “I should not be showing the map” map? The “so don't get too close”map? Wednesday night ABC News identified the person Trump showed the classified map to as Susie Wiles, a Trump adviser and campaign official and his potential 2024 campaign chair. Last night the NEW YORK POST, of all news outlets, identified Susie Wiles as the co-chairman of Mercury Public Affairs, lobbying mouthpieces for at least three really bad, really dangerous Chinese firms including Alibaba – the online retailer and web services company that is actually partially owned BY the Chinese GOVERNMENT and which the Post says Susie Wiles' company, Mercury, is STILL receiving payments from. And the nightmare unfolds at the Supreme Court: Affirmative Action is struck down and although work-arounds are offered and President Biden lambasted the Fascist Theocratic Court's interference with the settled law of the nation and agreed that the court is not a "normal" one, when offered the cure, he shied away: "If we start the process of trying to expand the court, we're going to politicize it, maybe forever, in a way that is not healthy, that you can't get back.” President Biden? It's irredeemably politicized NOW. It's FOREVER. It is ALREADY not healthy. And we can't get it back. (17:54) THE WORST PERSONS IN THE WORLD: The 5'7" Prime Minister of the UK violates the first rule of comparative height: NEVER give away 14 inches in a photo. Pirro, Ingraham, others at Fox mock Biden's use of CPAP machine despite own physical and emotional problems; New York Mayor Eric Adams must resign: he rages against a renters' advocate, compares her to a slaveowner, insults her repeatedly. She's an 84-year old woman who escaped the holocaust yet within seconds of her remarks he played the race card against her. B-Block (28:06) THINGS I PROMISED NOT TO TELL: Not only did Joe Biden spend most of his senatorial career fighting a reputation as a hothead, but when he decided to fight it he turned to advice about how to productively focus his anger to...me? C-Block (39:10) FRIDAYS WITH THURBER: I succumb to Bothsidesism! If I have a long Biden story, I must offer a long Trump story. And Thurber wrote one, and somehow managed to do it 15 years before Trump was born. When success is mistaken for character and the worst person in the world is mistaken for "The Greatest Man In The World."See omnystudio.com/listener for privacy information.
While many countries around the world, particularly G7 states, have largely outlawed the use of Chinese surveillance technology made by companies like Huawei, ZTE, and Hikvision among others, that is not the case in Africa. Dozens of governments across the continent have installed so-called "Smart City" initiatives that use networked camera systems, including some powered by AI.While there are concerns among some civil society groups that Chinese-made surveillance technology will be misused by authoritarian governments, those concerns are often overshadowed by the need for improved security, traffic management, and other benefits promised by Smart City manufacturers.Bulelani Jili, a research fellow at Harvard University and one of the foremost scholars on the use of Chinese technology in Africa, contends that too often in the debate over the deployment of surveillance tech, in particular, outsiders tend to focus more on the supplier rather than the customer. Bulelani joins Eric and Cobus to discuss his latest research on the topic.JOIN THE DISCUSSION:Twitter: @ChinaGSProject| @stadenesque | @eric_olander | @jilibulelani | @christiangeraudFacebook: www.facebook.com/ChinaAfricaProjectYouTube: www.youtube.com/ChinaAfricaProjectFOLLOW CAP IN FRENCH AND ARABIC:Français: www.projetafriquechine.com | @AfrikChineعربي: www.akhbaralsin-africia.com | @AkhbarAlSinAfrJOIN US ON PATREON!Become a CAP Patreon member and get all sorts of cool stuff, including our Week in Review report, an invitation to join monthly Zoom calls with Eric & Cobus, and even an awesome new CAP Podcast mug!www.patreon.com/chinaafricaprojectSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Hikvision è l'azienda cinese leader nella video-sorveglianza mondiale e ci sono alcuni problemi. Compra e leggi "La Parola a don Chisciotte" ➤➤➤ https://amzn.to/3jmCYpQ Questo episodio è stato sponsorizzato da NordVPN, che supporta il Podcast e il mio lavoro. Vai su https://nordvpn.com/dufer e inserisci il nostro coupon DUFER per avere uno sconto esclusivo e 4 mesi extra gratuiti. Prova NordVPN senza rischi grazie ai 30 giorni di garanzia soddisfatti o rimborsati. L'articolo di oggi: https://www.technologyreview.com/2022/06/22/1054586/hikvision-worlds-biggest-surveillance-company/ I prossimi eventi dal vivo ➤➤➤ https://www.dailycogito.com/eventi Impara ad argomentare bene ➤➤➤ https://www.dailycogito.com/video-corso/ Il canale Youtube ➤➤➤ https://www.youtube.com/c/RiccardoDalFerro Entra nella Community ➤➤➤ https://www.patreon.com/rickdufer La newsletter gratuita ➤➤➤ http://eepurl.com/c-LKfz Daily Cogito su Spotify ➤➤➤ http://bit.ly/DailySpoty Canale Discord (chat per abbonati) ➤➤➤ https://discord.gg/pSVdzMB Tutti i miei libri ➤➤➤ https://www.dailycogito.com/libri/ Il negozio (felpe, tazze, maglie e altro) ➤➤➤ https://www.dailycogito.org/ INSTAGRAM: https://instagram.com/rickdufer INSTAGRAM di Daily Cogito: https://instagram.com/dailycogito TELEGRAM: http://bit.ly/DuFerTelegram FACEBOOK: http://bit.ly/duferfb LINKEDIN: https://www.linkedin.com/pub/riccardo-dal-ferro/31/845/b14 -------------------------------------------------------------------------------------------- Chi sono io: https://www.dailycogito.com/rick-dufer/ -------------------------------------------------------------------------------------------- La sigla è stata prodotta da Freaknchic: https://www.freaknchic.it/ La voce è della divina Romina Falconi, la produzione del divino Immanuel Casto. A cura di Stefano Maggiore. Learn more about your ad choices. Visit megaphone.fm/adchoices
L'Australie va retirer toutes les caméras avec des liens avec un lien avec la Chine des bâtiments de la défense. Un audit a en effet identifié près de 1000 équipements de surveillance suspects, construits par les sociétés Hikvision et Dahua
Welcome to Cyber Briefing, a short newsletter that informs you about the latest cybersecurity advisories, alerts and incidents every weekday. First time seeing this? Please subscribe. Hello World! It's February 13, 2023. Welcome to a new edition of Cyber Briefing by CyberMaterial. Let's review the latest cybersecurity alerts, advisories and incidents. Cyber Alerts NameCheap's email hacked to send #Metamask, DHL phishing emails #Android mobile devices from top vendors in #China have pre-installed malware Researchers uncover obfuscated malicious code in PyPI Python packages Cyber Incidents The #Israel Institute of Technology Technion suffered a ransomware attack Play Ransomware lists A 10 networks on its leak site Regal Medical Group suffered a Ransomware attack affecting 3.3 million patients Ransomware attack hit the City of #Oakland #Australia bans Hikvision and Dahua cameras from defense sites Clop ransomware claims it breached 130 organizations using GoAnywhere zero day attack Cyber Advisory CISA adds Fortra MFT, Terra Master NAS, Intel driver flaws, to its known exploited vulnerabilities catalog Subscribe and Comment. Copyright © 2023 CyberMaterial. All Rights Reserved. Follow CyberMaterial on LinkedIn, Twitter, Reddit, Instagram, Facebook, Youtube, and Medium.
GitHub Actions vulnerability, US bans sales of Huawei, TrueNAS open source hyperconverged storage, and more. Tesla finally delivers its first production Semi Artifact poisoning in GitHub Actions imports malware via software pipelines US bans sales of Huawei, Hikvision, ZTE, and Dahua equipment FBI, CISA say Cuba ransomware gang extorted $60M from victims this year Data security concerns are driving changes in US consumer behavior and demands iXsystems VP of Marketing Mario Blandini talks about TrueNAS' open source storage and how it can be leveraged in a wide range of environments Hosts: Louis Maresca, Brian Chee, and Curtis Franklin Guest: Mario Blandini Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: onlogic.com/TWIT hover.com/twit Code Comments
GitHub Actions vulnerability, US bans sales of Huawei, TrueNAS open source hyperconverged storage, and more. Tesla finally delivers its first production Semi Artifact poisoning in GitHub Actions imports malware via software pipelines US bans sales of Huawei, Hikvision, ZTE, and Dahua equipment FBI, CISA say Cuba ransomware gang extorted $60M from victims this year Data security concerns are driving changes in US consumer behavior and demands iXsystems VP of Marketing Mario Blandini talks about TrueNAS' open source storage and how it can be leveraged in a wide range of environments Hosts: Louis Maresca, Brian Chee, and Curtis Franklin Guest: Mario Blandini Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: onlogic.com/TWIT hover.com/twit Code Comments
GitHub Actions vulnerability, US bans sales of Huawei, TrueNAS open source hyperconverged storage, and more. Tesla finally delivers its first production Semi Artifact poisoning in GitHub Actions imports malware via software pipelines US bans sales of Huawei, Hikvision, ZTE, and Dahua equipment FBI, CISA say Cuba ransomware gang extorted $60M from victims this year Data security concerns are driving changes in US consumer behavior and demands iXsystems VP of Marketing Mario Blandini talks about TrueNAS' open source storage and how it can be leveraged in a wide range of environments Hosts: Louis Maresca, Brian Chee, and Curtis Franklin Guest: Mario Blandini Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: onlogic.com/TWIT hover.com/twit Code Comments
On this week's show Patrick Gray and Adam Boileau discuss the week's security news, including: UK, USA ban Chinese security cameras What is the Boa webserver and why is it everywhere? Vanuatu, Guadeloupe smashed by ransomware REvil back with more dumps despite ASD attention Much, much more This week's sponsor guest is Jake King from Elastic Security, who joins us to talk through the company's most recent threat report. There's a link to the report in our show notes. Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that's your thing. Show notes British government bans Chinese surveillance cameras from sensitive locations - The Record by Recorded Future US government bans Huawei, ZTE and Hikvision tech over ‘unacceptable' spying fears | TechCrunch What if Russian commercial aviation cuts too many safety corners? — Meduza Microsoft attributes alleged Chinese attack on Indian power grid to ‘Boa' IoT vulnerability - The Record by Recorded Future U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer – Krebs on Security Guadeloupe kickstarts continuity plan after wide-ranging cyberattack - The Record by Recorded Future Vanuatu hospital staff using pen and paper after cyber attack that crippled public sector - ABC News Extortion site used in Medibank attack goes offline after Australian gov pledges ‘offensive' actions - The Record by Recorded Future ThreatMon Ransomware Monitoring on Twitter: Risky Biz News: Australia passes new privacy bill with huge data breach fines Sandworm hacking group linked to new ransomware deployed in Ukraine - The Record by Recorded Future UK Parliament launches inquiry into national security strategy around ransomware - The Record by Recorded Future Canadian food giant refuses to pay ransom after gang threatens data leak - The Record by Recorded Future Almost 1,000 suspects arrested in Interpol operation which seized over $129 million - The Record by Recorded Future Risky Biz News: Authorities seize iSpoof in major blow to fraudsters and cybercrime groups Espionage group using USB devices to hack targets in Southeast Asia - The Record by Recorded Future WikiLeaks' Website Is Slowly Falling Apart European Parliament declares Russia a terrorism sponsor, then its site goes down | Ars Technica Hackers are spreading malware via trending TikTok challenge: report - The Record by Recorded Future Samantha Borrego iS iNfeCtEd noT pArAnOID on Twitter: elastic-global-threat-report-vol-1-2022.pdf
On this week's show Patrick Gray and Adam Boileau discuss the week's security news, including: UK, USA ban Chinese security cameras What is the Boa webserver and why is it everywhere? Vanuatu, Guadeloupe smashed by ransomware REvil back with more dumps despite ASD attention Much, much more This week's sponsor guest is Jake King from Elastic Security, who joins us to talk through the company's most recent threat report. There's a link to the report in our show notes. Links to everything that we discussed are below and you can follow Patrick or Adam on Mastodon if that's your thing. Show notes British government bans Chinese surveillance cameras from sensitive locations - The Record by Recorded Future US government bans Huawei, ZTE and Hikvision tech over ‘unacceptable' spying fears | TechCrunch What if Russian commercial aviation cuts too many safety corners? — Meduza Microsoft attributes alleged Chinese attack on Indian power grid to ‘Boa' IoT vulnerability - The Record by Recorded Future U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer – Krebs on Security Guadeloupe kickstarts continuity plan after wide-ranging cyberattack - The Record by Recorded Future Vanuatu hospital staff using pen and paper after cyber attack that crippled public sector - ABC News Extortion site used in Medibank attack goes offline after Australian gov pledges ‘offensive' actions - The Record by Recorded Future ThreatMon Ransomware Monitoring on Twitter: Risky Biz News: Australia passes new privacy bill with huge data breach fines Sandworm hacking group linked to new ransomware deployed in Ukraine - The Record by Recorded Future UK Parliament launches inquiry into national security strategy around ransomware - The Record by Recorded Future Canadian food giant refuses to pay ransom after gang threatens data leak - The Record by Recorded Future Almost 1,000 suspects arrested in Interpol operation which seized over $129 million - The Record by Recorded Future Risky Biz News: Authorities seize iSpoof in major blow to fraudsters and cybercrime groups Espionage group using USB devices to hack targets in Southeast Asia - The Record by Recorded Future WikiLeaks' Website Is Slowly Falling Apart European Parliament declares Russia a terrorism sponsor, then its site goes down | Ars Technica Hackers are spreading malware via trending TikTok challenge: report - The Record by Recorded Future Samantha Borrego iS iNfeCtEd noT pArAnOID on Twitter: elastic-global-threat-report-vol-1-2022.pdf
Picture of the Week. LastPass Breached. The US Federal Trade Commission filed a lawsuit against data broker Kochava. The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices. California, here I come! A conversation with a Ransomware Attacker. DuckDuckGo's Privacy-Enhanced eMail Forwarding. Another IoT mess care of "Hikvision" SpinRite. Closing The Loop. Wacky Data Exfiltration. We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf Hosts: Steve Gibson and Leo Laporte Sponsors: Secureworks.com/twit grammarly.com/securitynow
Picture of the Week. LastPass Breached. The US Federal Trade Commission filed a lawsuit against data broker Kochava. The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices. California, here I come! A conversation with a Ransomware Attacker. DuckDuckGo's Privacy-Enhanced eMail Forwarding. Another IoT mess care of "Hikvision" SpinRite. Closing The Loop. Wacky Data Exfiltration. We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf Hosts: Steve Gibson and Leo Laporte Sponsors: Secureworks.com/twit grammarly.com/securitynow
Picture of the Week. LastPass Breached. The US Federal Trade Commission filed a lawsuit against data broker Kochava. The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices. California, here I come! A conversation with a Ransomware Attacker. DuckDuckGo's Privacy-Enhanced eMail Forwarding. Another IoT mess care of "Hikvision" SpinRite. Closing The Loop. Wacky Data Exfiltration. We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf Hosts: Steve Gibson and Leo Laporte Sponsors: Secureworks.com/twit grammarly.com/securitynow
Picture of the Week. LastPass Breached. The US Federal Trade Commission filed a lawsuit against data broker Kochava. The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices. California, here I come! A conversation with a Ransomware Attacker. DuckDuckGo's Privacy-Enhanced eMail Forwarding. Another IoT mess care of "Hikvision" SpinRite. Closing The Loop. Wacky Data Exfiltration. We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf Hosts: Steve Gibson and Leo Laporte Sponsors: Secureworks.com/twit grammarly.com/securitynow
Picture of the Week. LastPass Breached. The US Federal Trade Commission filed a lawsuit against data broker Kochava. The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices. California, here I come! A conversation with a Ransomware Attacker. DuckDuckGo's Privacy-Enhanced eMail Forwarding. Another IoT mess care of "Hikvision" SpinRite. Closing The Loop. Wacky Data Exfiltration. We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf Hosts: Steve Gibson and Leo Laporte Sponsors: Secureworks.com/twit grammarly.com/securitynow
Picture of the Week. LastPass Breached. The US Federal Trade Commission filed a lawsuit against data broker Kochava. The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices. California, here I come! A conversation with a Ransomware Attacker. DuckDuckGo's Privacy-Enhanced eMail Forwarding. Another IoT mess care of "Hikvision" SpinRite. Closing The Loop. Wacky Data Exfiltration. We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf Hosts: Steve Gibson and Leo Laporte Sponsors: Secureworks.com/twit grammarly.com/securitynow
A medical center near Paris comes under ransomware attack, and refuses to pay up. Lessons for the fifth domain from six months of hybrid war. Deepfake scams appear to have arrived. Deepen Desai from Zscaler with introduction to our audience. Dave Bittner sits down with Gil Hoffer, CTO and Co-founder of Salto to discuss “Who Hacked Slack?.” And Threat actors prepare to exploit Hikvision camera vulnerability. For links to all of today's stories check out our CyberWire daily news briefing: https://thecyberwire.com/newsletters/daily-briefing/11/163 Selected reading. Cyber attackers disrupt services at French hospital, demand $10 million ransom (France 24) French hospital hit by $10M ransomware attack, sends patients elsewhere (BleepingComputer) DECLENCHEMENT DU PLAN BLANC DIMANCHE 21 AOUT 2022 (CHSF - Centre Hospitalier Sud Francilien) Ukraine at D+181: Independence Day and six months of war. (CyberWire) Six months, twenty-three lessons: What the world has learned from Russia's war in Ukraine (Atlantic Council) Hackers Used Deepfake of Binance CCO to Perform Exchange Listing Scams (Bitcoin News) Hackers Use Deepfakes of Binance Exec to Scam Multiple Crypto Projects (Gizmodo) Binance's CEO said thousands of people are falsely claiming to be his employees on LinkedIn. Experts warn it's an example of the platform's growing problem with fake accounts. (Business Insider) Twitter's Ex-Security Head Files Whistleblower Complaint (Wall Street Journal) Twitter is vulnerable to Russian and Chinese influence, whistleblower says (CNN) Over 80,000 exploitable Hikvision cameras exposed online (BleepingComputer) Experts warn of widespread exploitation involving Hikvision cameras (The Record by Recorded Future) Hikvision Surveillance Cameras Vulnerabilities (CYFIRMA)
This week, Dr. Doug talks: Tempus Fugit, PyPI, WordPress, Hikvision, Zimbra, Palo Alto, led morse code, and is joined by Expert Commentator Jason Wood on the Security Weekly News! Visit https://www.securityweekly.com/swn for all the latest episodes! Follow us on Twitter: https://www.twitter.com/securityweekly Like us on Facebook: https://www.facebook.com/secweekly Show Notes: https://securityweekly.com/swn234
In May, news came out that the U.S. government was thinking of putting the Chinese video surveillance company Hikvision on the Treasury Department's Specially Designated Nationals list, otherwise known as the SDN list. The move would have huge impacts on Hikvision's business prospects in the U.S. and around the world and would represent yet another escalation in the way that the U.S. government handles Chinese technology companies. To talk through the news and why it's so significant, Jacob Schulz sat down with Katrina Northrop, a reporter at The Wire China who wrote a story about the Hikvision saga, and Alex Iftimie, a partner at Morrison & Foerster and a former official within the National Security Division at the Justice Department.Support this show http://supporter.acast.com/lawfare. See acast.com/privacy for privacy and opt-out information.
Is the European Union (EU) about to rescue the FBI from Going Dark? Jamil Jaffer and Nate Jones tell us that a new directive aimed at preventing child sex abuse might just do the trick, a position backed by people who've been fighting the bureau on encryption for years. The Biden administration is prepping to impose some of the toughest sanctions ever on Chinese camera maker Hikvision, Jordan Schneider reports. No one is defending Hikvision's role in China's Uyghur policy, but I'm skeptical that we should spend all that ammo on a company that probably isn't the greatest national security threat we face. Jamil is more comfortable with the measure, and Jordan reminds me that China's economy is shaky enough that it may not pick a fight to save Hikvision. Speaking of which, Jordan schools me on the likelihood that Xi Jinping's hold on power will be loosened by the plight of Chinese tech platforms, harsh pandemic lockdowns or the grim lesson provided by Putin's ability to move without check from tactical error to strategic blunder and on to historic disaster. Speaking of products of more serious national security than Hikvision, Nate and I try to figure out why the effort to get Kaspersky software out of U.S. infrastructure is still stalled. I think the Commerce Department should take the fall. In a triumph of common sense and science, the wave of laws attacking face recognition may be receding as lawmakers finally notice what's been obvious for five years: The claim that face recognition is “racist” is false. Virginia, fresh off GOP electoral gains, has revamped its law on face recognition so it more or less makes sense. In related news, I puzzle over why Clearview AI accepted a settlement of the ACLU's lawsuit under Illinois's biometric law. Nate and I debate how much authority Cyber Command should have to launch actions and intrude on third country machines without going through the interagency process. A Biden White House review of that question seems to have split the difference between the Trump and Obama administrations. Quelle surprise! Jamil concludes that the EU's regulation of cybersecurity is an overambitious and questionable expansion of the U.S. approach. He's more comfortable with the Defense Department's effort to keep small businesses who take its money from decamping to China once they start to succeed. Jordan and I fear that the cure may be worse than the disease. I get to say I told you so about the unpersuasive and cursory opinion by United States District Judge Robert Pitman, striking down Texas' social media law. The Fifth Circuit has overturned his injunction, so the bill will take effect, at least for a while. In my view some of the provisions are constitutional and others are a stretch; Judge Pitman's refusal to do a serious severability analysis means that all of them will get a try-out over the next few weeks. Jamil and I debate geofenced search warrants and the reasons why companies like Google, Microsoft and Yahoo want them restricted. In quick hits, Jamil and I trade views on whether the Biden White House has effectively managed the lagging implementation of its landmark cybersecurity executive order. I note the important new protocol for implementing the Budapest Convention. On the principle that you can judge a policy by its enemies, this protocol is looking pretty good. Jamil highlights a study—by Europeans, no less—that suggests that General Data Protection Regulation (GDPR) is killing innovation in the Android app market. Jamil also flags a new study of the Chinese Offensive Cyber Landscape. And I suggest that the event with the biggest tech policy impact last week may have been none of these things; the real impact may be the meltdown in tech stocks generally and in cryptocurrency values in particular. Download the 407th Episode (mp3) You can subscribe to The Cyberlaw Podcast using iTunes, Google Play, Spotify, Pocket Casts, or our RSS feed. As always, The Cyberlaw Podcast is open to feedback. Be sure to engage with @stewartbaker on Twitter. Send your questions, comments, and suggestions for topics or interviewees to CyberlawPodcast@steptoe.com. Remember: If your suggested guest appears on the show, we will send you a highly coveted Cyberlaw Podcast mug! The views expressed in this podcast are those of the speakers and do not reflect the opinions of their institutions, clients, friends, families, or pets.