Batman, Microsoft, War Driving, OpenAI, DevDrive, The Dead, Aaran Leyland, and More – SWN #363

Doug White

1. Microsoft Confirms Windows Exploits Bypassing Security Features
2. New Wi-Fi Authentication Bypass Flaws Expose Home, Enterprise Networks
3. USPS scam smishing campaigns could move to cloud with SNS Sender
4. Hackers ‘steal your face’ to create deepfakes that rob bank accounts
5. Microsoft, OpenAI reveal ChatGPT use by state-sponsored hackers
6. Windows Insiders using Dev Drive need to check their backups
7. How to remotely access a computer and fix your family’s IT problems for free
8. European human rights court says no to weakened encryption

Aaran Leyland

1. Google Threat Analysis Group’s Spyware Research: How CSVs Target Devices and Applications

   There is a Looming Shadow: Commercial Surveillance Vendors (CSVs) – that is not confusing at all and we will not mix that up with our well known CSVs… Or will we… I wonder why we bother hahah Anyway, The latest report by Google's Threat Analysis Group (TAG) unveils a disturbing reality – unveils, meaning only, - if you have been living under a rock and have forgot about many, including the Pegasus Project: - The book by the same name is a good read, I am close to finishing it. Have a look. TAG look further into the world of Commercial Surveillance Vendors who are operating under a veil of legitimacy. These vendors pose a significant threat to individuals, organizations, and society at large. O yes, they do. I do laugh at the legitimacy to be honest. To me, it always feels more a government domain, than the private field. But don’t get me started. Within their ecosystem, sophisticated spyware infiltrates devices, and I am told that individual privacy is under siege, and the very foundations of democracy are at risk. Which sounds pretty serious.

   Unlike traditional cybercriminals, CSVs operate in a legal gray area.