Bite Sized Cyber Crime

Wikipedia Activates Dormant Worm

Wikipedia is often used as a starting point for research, and recently it was seemingly under attack. Vandalism is common, but what is uncommon is the activation of malicious code that sat waiting on their systems for years before it was set off by an admin reviewing code.
Sources: https://pastebin.com/QRYXC05C

The Concerning Trend of Requiring ID

I've noticed a concerning trend and legislation coming up in some countries that will require government ID to access certain social media websites. The issue stems from child safety, which is a worthy cause, but it will end up not only putting children at risk, but everyone else as well.

PayPal Left PII Exposed for Half a Year

Usually data breaches happen from an attacker breaking in, but sometimes an organization inadvertently leaks their own data, PayPal did just this with the most sensitive data about small business owners and it sat on the internet for 6 months.
Sources: https://pastebin.com/hxqJeJey

Outlook Add In Hijacked to Steal Accounts

Outlook add ins can really improve the user experience of the application, allowing for extended capabilities. However if a developer abandons an add in project and leaves it without updates without properly removing it or discontinuing support it could lead to threat actors hijacking a trusted add in and using it to steal information.
 
Sources: https://pastebin.com/7Kny6W8M

Panera Data Breach from Failed Extortion

The Shiny Hunters failed to extort Panera in a data theft attack and leaked the data found. Thankfully the damage seems rather minimal as the information is, for the most part, not all that sensitive.
Sources: https://pastebin.com/EXKcrrDL

When Vibe Coding Your Ransomware Goes Wrong

They say never to pay a ransomware, but this one you should especially never pay because you will definitely not get anything back if you do. As it turns out vibe coding can lead to mistakes that end up with threat actors losing the keys to their own ransomware.
Sources: https://pastebin.com/VuSZpJKQ

AI Slop Kills cURL Bug Bounty Program

Bug bounty programs are a good way to practice your hacking skills while contributing to the greater good, but unfortunately some people want the rewards without having the skills, which have resulted in cURL being overwhelmed by completely nonsensical AI slop bug reports.
Sources: https://pastebin.com/ZBdpci1U

WhisperPair Vulnerability Allows Eavesdropping on Your Calls

Bluetooth is the standard these days for listening to audio but it presents some issues that wired doesn't, and I don't mean sound quality. Implementations of Bluetooth protocols can have vulnerabilities and when those hit it could mean you're being listened to.
Sources: https://pastebin.com/Kq9TieQC