TSB 274: We talk about defenses

Gang,

What happens when defenses don’t behave the way they do? Software that claims that it works, but we can’t use it because it isn’t accessible? Software that is accessible, but yet it doesn’t do what we want or behave the way we think it should? These may be questions answered on today’s program.

The news desk is back for its second episode, let us know what you think, read, or found of interest.

Here’s what has been read and or referenced since our last podcast. A lot has been blogged, but some may not be fully blogged or blogged differently than usual.

• GitHub confirms breach of 3,800 repos via malicious VSCode extension
• GitHub investigates internal repositories breach claimed by TeamPCP
• Former US execs plead guilty to aiding tech support scammers
• Job offer scams continue across LinkedIn, Telegram, email and text reference: LinkedIn recruiter scam discussion by Jason Thomas Richards
• Police seize “First VPN” service used in ransomware, data theft attacks
• Dozens arrested in UK romance fraud and money laundering crackdown
• Marketer that claimed it could tap devices for ad targeting will pay $880K settlement
• Charter news
  • Charter confirms data breach after ShinyHunters extortion threat
  • Charter Communications data breach affects 4.9 million accounts
• Metro Related items
  • Iranian hackers linked to Tehran spy agency behind LA transit breach, Israeli researchers say
  • Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say
  • Iranian hackers blamed for breach of Los Angeles transit system that took weeks to recover
  • Iranian Hackers Allegedly Penetrated LA Metro’s Rail Control Systems
  • Iranian hackers responsible for Los Angeles transit system breach, Israeli researchers say
  • Iranian intelligence service behind hack of LA transit system, researchers say
  • Iran-Linked Hackers Destroy IT, Backups, and Recovery Systems in Cyberattack targeting Middle East
• Glassworm botnet disrupted after resilient C2 infrastructure takedown
• ChatGPT share links abused to host fake outage pages to deliver malware