10.24.25 Security News Bites
10.24.25 Security News Bites
Just Because You are Large Does Not Mean You Are Secure
Russia hacked into eight UK Air Force and Navy bases and posted Ministry of Defense staff names and emails on the dark web. GEEEEEE, they got in by hacking a contractor. The MoD said they are actively investigating. One more time, supply chain attacks are the most popular. Credit: UK Mirror
GPS Spoofing Events Exceed 1,000 a Day
It is interesting that nothing is a problem until it bothers me. That is a quote from a manager I worked with years ago. I worked on the team building the proof of concept of GPS for the Air Force. We were worried about nation state spoofing then. Finally, many years later, the commercial world is finally waking up to the fact that consumer/commercial GPSes can be spoofed pretty easily. Recently, the plane carrying the president of the EU was forced to resort to (gasp) old school RF beacons to land. The US has decommissioned them to save money; apparently the EU has not. Yet. The UN voted to condemn Russia and North Korea for GPS spoofing. Maybe now they will do something to harden it. Stay tuned. Credit: Dark Reading
SpaceX Disables More Than 2,000 Starlink Terminals Used by Scammers
Crypto scammers and other forced-labor scam operations often use hundreds of Starlink terminals on the roofs of each of their buildings to bilk victims out of hundreds of millions of dollars. This has turned into a PR nightmare for Musk so after several years of allowing the terminals to operate, they disabled some of them, forcing the scammers to spend some of those hundreds of millions to buy new Starlink terminals. Will Starlink proactively continue to disable the replacement terminals? Unknown. Credit: The Record
UN Resolution Could Criminalize Cybersecurity Research
This is not a bug, it is a feature. Governments around the world want to be able to suppress cybersecurity research when that is convenient. The voting to ratify the United Nations Convention against Cybercrime starts this weekend in, of all interesting places, Hanoi. This resolution was championed by countries like Russia and China. If it is approved this weekend then countries like Russia and China will immediately ratify it in their own laws and seek to charge people they don’t like with crimes. Credit: CSO Online
North Korea Infiltrates Drone Makers Used in Ukraine
I am sure this is just a coincidence, but cyberattacks against companies that make parts for and drones used in Ukraine have been successful and have installed remote access software on internal computers. It has always been North Korea’s preference to steal engineering of interest rather than do the research themselves. That is way cheaper and may have helped North Korea develop their drone technology. Credit: Data Breach Today
by 