Patrick Stewart, Videostrong, C3RB3R, GitLab, VMware, BTCPay, Binance, Aaran Leyland, and More, on the Security Weekly News.
Every major cyber incident teaches us the same lesson. The attackers only have to find one weakness. Defenders have to understand the entire system.
Whether it's a nation-state campaign, ransomware, or attacks on critical infrastructure, success usually comes down to preparation long before the headlines begin.
Join us for the Government Security Virtual Summit on November 18 and hear how practitioners and leaders are tackling the challenges of protecting government and critical infrastructure in an increasingly complex world.
Security Weekly listeners can register for free at https://securityweekly.com/govsec using the discount code CSS26-SW!
Doug White
- Google disrupts million-device XCPE Android malware botnet, bans TV box maker
- Synology warns of C3RB3R ransomware attacks targeting NAS devices
- Over 1,000 GitLab servers exposed to exploited critical RCE flaw
- Architect creates open source replacement for VM migration tool VMware has hidden
- Binance Hack: One Compromised Laptop Can Cost Billions in Crypto
- Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
- Major test for Australia’s social media ban begins in High Court
- Oh captain, our captain: Ars staff remembers Patrick Stewart
Aaran Leyland
- Fresh Hack Attacks Defrost Freezers at European Supermarkets
• Inventory every OT / facilities controller, including contractor-managed kit, 4G/cellular modems and vendor cloud portals. • Remove direct internet exposure of management interfaces (including devices with a public IP). Emergency source-IP filtering is a stopgap only (CERT-FR). • Necessary remote access via VPN / secure remote-access gateway with named accounts and MFA at the boundary; no shared vendor logins. • Change default passwords; set Danfoss security level to Strict; update firmware (AK-SM 800A: R4.3.1 or later). • End-of-life controllers (e.g. AK-SM800, AK-SC355): isolate now, budget replacement. A factory reset does not fix them. • After any suspected compromise: reboot/factory reset and fully reconfigure; verify the whole config including defrost schedules and alarm limits. • Check insurance terms before cutting the data feed to the refrigeration contractor (CERT-FR). • Make sure out-of-hours temperature alarms reach someone awake who can act; test it. • Back up known-good configurations offline; test restoring a working cold chain, not just a reachable device. • Contract clause: contractor must declare every remote-access route and get approval before adding one. • Coordinate any OT disconnection or reset with qualified engineers — abrupt changes can affect safety and monitoring.
