News

CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP.

Twilio was hacked earlier this month, and the phone numbers of 1,900 Signal users were exposed:

Here’s what our users need to know:

• All users can rest assured that their message history, contact lists, profile information, whom they’d blocked, and other personal data remain private and secure and were not affected.
• For about 1,900 users, an attacker could have attempted to re-register their number to another device or learned that their number was registered to Signal. This attack has since been shut down by Twilio. 1,900 users is a very small percentage of Signal’s total users, meaning that most were not affected.

We are notifying these 1,900 users directly, and prompting them to re-register Signal on their devices.

If you were not notified, don’t worry about it. But it does bring up the old question: Why does Signal require a phone number to use? It doesn’t have to be that way.

The resignation of CEO Shalev Hulio will see COO Yaron Shohat take the helm

The malware was first released for sale on January 26, 2022 as an HVNC implant, but later evolved

The malware is reportedly capable of server takedown, Wi-Fi attacks and application layer attacks

New campaign disguised as fake Cloudflare pop-up

General Bytes confirms serious attack last week

Holdcroft Motor Group says most systems back online now

We haven’t validated this vuln ourselves… but the source of the story is impeccable. (Impeccably dressed, at least.)

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels.