April 30, 2023

• The 3CX Cyber Attack Affected Others and Started With an Job Offer Scam
• CISA Warns About New DDoS Amplification Attack
• The Security Implications of GPTs Like ChatGPT, Bard and others
• Google Authenticator Upgrade and Proton Pass
• Cisco Patches Devices Used in Industrial (OT) Environments
• Microsoft is Rewriting Windows Kernel in Rust Language
• Feds Want a 15 Month Prison Sentence for Former Uber CISO for Impeding Investigation
• The Cooper Davis Act Requires Messaging Services, Social Media to Report Users to the DEA
• Small Government Politicians Propose Gov-Run National Database of All People Under 18 – To Protect the Children
• CISA Releases Zero Trust Maturity Model Version 2
• San Bernardino County Sheriff Struggling to Recover from Cyberattack
• Minneapolis Student Psych Report and Abuse Reports Leaked by Hackers

Security News Bites for the Week Ending April 28th, 2023:

This week’s news bites include: A couple of annoyed Redditors launched a website to
anonymously rate your landlord – what could possibly go wrong, Massachusetts Guardsman
leaked classified Ukraine docs a year earlier than thought, NSO Group (Pegasus) spyware still
at it, Windows 10 22H2 is the last feature version of Windows 10 and Wikipedia says if UK
forces age-checking, they might just block UK users. Read the details
here.

If you are using AI, you need to understand what the risks are and how best to mitigate
them. If you need help with this, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.

Mitch@CyberCecurity.com
720-891-1663

April 23, 2023

• How Insecure is AT&T’s First Responder Cell Network (FirstNet)?
• Customs (ICE) Records Reveal Confidential Data on You and Me Not Very Confidential
• CISA and DOE Release SBOM Sharing Lifecycle Report
• Five Eyes Release New Guidance on Smart City Cybersecurity
• Police Disrupt $98 Million Online Fraud Ring with 33,000 Customers
• Farmers WIn the Right To Repair Their Tractors in Colorado
• Security by Design and Default
• Ukraine’s Hackers Hack Russia’s GRU Hacker-in-Chief
• Point32Health Hit by Ransomware; Takes Some Systems Offline
• American Bar Association Data Breach Affects 1.4 Million Members

Security News Bites for the Week Ending April 23, 2023:

This week’s news bites include: Arkansas is the first state to ban minors from social media
without parental permission, Tennessee Republican meeting audio leaked after expelling two
black Democrats, QuaDream, outed last week as spyware seller, shutting down, when will
companies learn and cybersecurity VC capital spending is down in Q1 23. Read the details
here.

Google’s Office of the CISO released a report outlining how your board and C-suite need
to get much more proactive about cybersecurity. If your board needs assistance with
getting cyber-smarter, please contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.

April 7th, 2023

• Your Next Car Might Come with a Subscription
• Ready for Windows 12
• Twitter’s Open Source Code Snippet from this Month Now Has its Own CVE Vulnerability
• US Seizes $112 Million in Crypto from Pig Butchering Scammers
• BBB Warns About Your Boss Texting You Scam
• What Happens When a Social Media/Romance Scam Meets Crypto – It’s Not Pretty
• Western Digital Admits to Being Hacked
• Another Law Firm Admits They Were Hacked – Uber Data Stolen
• Yet Another College Hit by Cyberattack
• Predatory Lender TMX Finance Leaks Data on 4.8 Million
• Camden County, NJ hit by Ransomware – Locks up Investigative Files

Security News Bites for the Week Ending April 7th, 2023:

This week’s news bites: the FDA will no longer approve digital medical devices that are
vulnerable, Dish hit by multiple lawsuits after ransomware attacks, Telsa Model 3 hacked in less
than 2 minutes at Pwn2Own hacking contest, social media account of porn star hacked; now
posting extreme racist content and Tesla employees caught sharing embarrassing photos
recorded on customer car cameras. Read the details here.

Vendor breaches are running rampant, but who gets sued is you. Maybe the vendor too.
In one case this week, the customer of the vendor wasn’t alerted to the breach for over a
year and the end consumer wasn’t told for close to two years. Guess who is going to get
sued? Need help upgrading your vendor cyber risk management program? Please
contact us.

Mitch
www.CyberCecurity.com
www.TurnkeyCybersecurityAndPrivacySolutions.com
Mitch@CyberCecurity.com
720-891-1663