Bite Sized Cyber Crime

X DDoSed Multiple Times

Elon Musk has become a controversial political figure, leaving little surprise that one of his projects, the X platform, became a target for a hacktivist group, leaving the major social media platform down from a DDoS attack.
Sources: https://pastebin.com/Pa6b0nrm

Ransomware Group Bypasses EDR using Webcam

Ransomware groups sometimes run into issues, like being blocked by security tools, and often have to pivot. Some techniques are less conventional than others, but are just as destructive. Here's how a webcam led to ransomware being deployed org wide.
Sources: https://pastebin.com/FHxVYgBg

Access Management Systems Exposed on Internet

Building access management is an important part of physical security that has only become more intelligent. However, with all the data on these systems that exist on employees it is important that they are properly secured. Recently, 49,000 systems were found unsecured on the open internet with data viewable, and sometimes modifiable.
Sources: https://pastebin.com/8feGBvEu

HNFS Pays $11 Million Settlement for False Security Certifications

Government contractors are expected to follow certain compliance policies, so what happens when a company lies about compliance? Hefty fines tend to follow.
Sources: https://pastebin.com/vJPEikD9

Serial SWATter Sentenced to 4 Years in Prison

SWATting is a dangerous crime that involves making extreme police reports against people to illicit a response from the SWAT team. This has resulted in innocent people being killed or injured. One teen turned making these reports into a business and was recently sentenced to 4 years in prison for it. Learn about his crimes and methodology today.
Sources: https://pastebin.com/ET9xMi85

Crypto Stealer Searches Gallery for Wallet Passphrases

Recently a new crypto stealing malware was found in apps on both the Google Play, and the famously restrictive Apple App Store, but it seems not to be its own app, but rather something inserted into existing apps at a later time to steal passphrases for crypto wallets from images on devices.
Sources: https://pastebin.com/fHgDP4fg

What's the Deal with Deepseek?

Recently a brand new generative AI model came out of nowhere and blew up overnight. There are a lot of controversies and concerns surrounding this model, providing more efficient AI but also bringing a lot of data sensitivity risks and topics of government censorship to the forefront.
Sources: https://pastebin.com/WRGERYCE

EV Chargers Hacked in Pwn2Own Automotive

Pwn2Own by TrendMicro's Zero Day Initiative is a hacking contest where people try to hack "up to date" products to discover zero day vulnerabilities in them and win cash prizes for doing so. The automotive version of this contest not only involved cars themselves, but chargers for electric vehicles.
Sources: https://pastebin.com/4siwYEYK