AirGaps, Slackware, Mitnick, Awareness, Microsoft, Bad API, Aaran Leyland and More – SWN #311
AirGaps, Slackware, Kevin Mitnick, Awareness, Microsoft, Bad API, JumpCloud, Megarac, Aaran Leyland, and More on the Security Weekly News.
Doug White
- Kevin Mitnick Obituary – Las Vegas, NV
- Security Awareness Training Isn’t Working – How Can We Improve It?
- Microsoft Bows to Pressure to Free Up Cloud Security Logs
- Most financial and insurance firms report security issues in production APIs
- North Korean-linked Lazarus Group tied to supply chain attack on JumpCloud
- Critical Flaws in AMI MegaRAC BMC Software Expose Servers to Remote Attacks
- Google tries internet air-gap for some staff PCs
- Slackware turns 30
Aaran Leyland
- Poisoned Facebook Ads Deliver Malware Using Fake ChatGPT, Bard & Other AI Services
Cyber criminals have recently started using Facebook to pretend to be well-known generative AI brands like ChatGPT, Google Bard, Midjourney, and Jasper to steal users’ personal information.
Users on Facebook are deceived into downloading content from fake brand sites and advertisements.
These downloads contain harmful malware that steals users’ internet credentials for banking, social networking, gaming, and other services, their cryptocurrency wallets, and any data saved in their browsers.
According to the Check Point Research Team (CPR), the majority of Facebook campaigns that use fake sites and dangerous advertisements eventually spread malware that steals information.
Users who are not aware of the situation are liking and commenting on fake posts, spreading them to their social networks.
