Security Leftovers

posted by Roy Schestowitz on May 06, 2023

• Former Uber CSO Joe Sullivan Avoids Prison Time Over Data Breach Cover-Up

  Former Uber security chief Joe Sullivan was sentenced to probation and community service for covering up the data breach suffered by the ride-sharing giant in 2016.

• Ex-Uber Security Chief Sentenced for Data-Breach Cover-Up

  The former chief security officer for Uber has been sentenced to probation for trying to cover up a 2016 data breach in which hackers accessed tens of millions of customer records from the ride-hailing service

• Senator Asks Big Banks How They're Going to Stop AI Cloned Voices From Breaking Into Accounts

  The move comes after Motherboard used AI voice cloning technology to fool a bank’s security systems.

• Cisco Warns of Critical Vulnerability in EoL Phone Adapters

  Cisco warns of a critical-severity RCE vulnerability impacting EoL SPA112 2-Port Phone Adapters.

  >

• Satori Releases Open Source Data Permissions Scanner for Enterprises

  Data security firm Satori has released a free and open source tool designed to help organizations find out who has access to what data and how.

• Matthew Garrett: Twitter's e2ee DMs are better than nothing

  Elon Musk appeared on an interview with Tucker Carlson last month, with one of the topics being the fact that Twitter could be legally compelled to hand over users' direct messages to government agencies since they're held on Twitter's servers and aren't encrypted.

• Apple Releases First-Ever Security Updates for Beats, AirPods Headphones

  Apple has released firmware updates for Beats and AirPods to patch a vulnerability that can be exploited to gain access to headphones via a Bluetooth attack.

• Meta Swiftly Neutralizes New ‘NodeStealer’ Malware

  Meta says it disrupted the new NodeStealer malware, which likely has Vietnamese origins, within weeks after it emerged.

• Ben Hutchings: Debian LTS work, March/April 2023

  In March and April I worked a total of 28 hours for Freexian's Debian LTS initiative, out of a maximum of 48 hours. I updated the linux (4.19) package to the latest stable and stable-rt updates, and uploaded it at the end of April. I merged the latest bullseye security update into the linux-5.10 package and uploaded that at the same time.