☆ Cybersecurity reporter ★ Newsletters at Risky Business #infosec #cybersecurity https://risky.biz
New npm worm ChainDrop appears to be having a great time in the ecosystem right now www.stepsecurity.io/blog/chaindr... socket.dev/blog/popular... safedep.io/keyv-npm-sup...
ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2 - StepSecurityA self-propagating worm is publishing compromised versions of dozens of npm packages using stolen maintainer credentials. See the affected packages and what to do now.www.stepsecurity.ioLive streams from the BSides Las Vegas 2026 security conference, which is taking place this week, are available on YouTube www.youtube.com/@BsideslvOrg...
BSidesLVRecordings of Security BSides Las Vegas sessions, selected sessions of sister conferences and other Information Security related educational materials.www.youtube.com-Russia is behind the recent hotel WiFi hacks -Anthropic models also did the hacky-hacky -npm adds publish-time malware scanning -Coldcard hacked for $70m -CyberCom to open Silicon Valley office -Iran water hacks impacted seven states P: risky.biz/RBNEWS595/ N: news.risky.biz/risky-bullet...
Two design companies, S&A and Playtype, have created a font that fools AI scrappers and protects copyrighted text s-a.website/projects/shi...
U.S. investigating if Iran was behind cyberattack on water systems in 7 states, not just Minnesota www.cbsnews.com/news/us-inve...
U.S. investigating if Iran was behind cyberattack on water systems in 7 states, including Minnesota and MichiganMalicious cyber activity affected technology at water systems in at least seven states this week, including Minnesota, leading authorities to dig into whether Iranian actors are behind the attack, CBS...www.cbsnews.comResearchers have found a new version of SiliVaccine, North Korea's internal homegrown antivirus engine. Well, not that "homegrown" actually because the engine works on top of ClamAV and Malheur nkinternet.com/2026/08/01/a...
A New SiliVaccine: North Korea’s AntivirusIn 2018, Check Point published a deep dive into SiliVaccine, North Korea’s homegrown antivirus, and found its scanning engine was built on stolen, decade-old Trend Micro code. Check Point als…nkinternet.comA mysterious hacker has stolen more than $70 million worth of Bitcoin from Coldcard hardware wallets: bitcoinmagazine.com/news/coldcar... The attackers exploited a vulnerability in the wallet's firmware that produced weak and easy to guess private keys: blog.coinkite.com/entropy-tech...
Technical Deep Dive into the Entropy IssueTechnical Deep Dive into the Entropy Issueblog.coinkite.comReal estate fraud and scams too
Chris KluweI’m struggling to think of a single use case for this that isn’t mis/disinformation
It is literally Iran, yet this clown is lying for political points
TechmemeTrump says he does not think Iran is behind a cyberattack on Minnesota water systems: "I think I blame it on Minnesota because they're grossly incompetent" (Reuters) Main Link | Techmeme Permalink
-Non-profit offers $22,000 bounty for INC ransomware group -Hackers breach the UK Department for Education -Russia charges Pavel Durov -FCC bans foreign robots and power inverters -Minnesota water attacks linked to Iran N: news.risky.biz/risky-bullet... P: risky.biz/RBNEWS594/
Well well well
OONI‼️ Saudi Arabia just blocked Tinder explorer.ooni.org/findings/305... Today, OONI data shows that Tinder started being blocked on Mobily (AS35819) by means of TLS interference. We were alerted of this block through our new Censorship Alert System, an internal prototype we're testing. 🙏🐙 #ooni
Adform compromised to serve crypto stealer via supply chain attack doublepulsar.com/adform-compr...
Adform compromised to serve crypto stealer via supply chain attackLarge web advertising firm serving crypto wallet stealer and C2 beacon traffic.doublepulsar.comBruh... there's a "master key" that grants access to every Cosmos DB on Azure? Wut? www.wiz.io/blog/cosmose...
The US government has banned the import of foreign-made robots and power inverters on the grounds of national security Most of these products are produced and imported from China www.fcc.gov/document/fcc...
Turkish messenger Bip and South Korean messenger KakaoTalk have stopped working in Russia about the same time authorities charged Durov. Something, something, ban all IM services until citizens use the state-owned MAX, bla bla www.currenttime.tv/a/problema-v...