In the Security News for this week: heat waves and outages, GPS trackers are vulnerable, cracks in the Linux firewall, bas password crackers, microcode decryptors, SATA antennas, Okta vulnerabilities not vulnerabilities, updates on former CIA agent and Vault 7 leaks, decompiler explorer, and Tuxedo brings to market a liquid cooled laptop, & more!
SecurityWeek reports that software updates have been unveiled by numerous software vendors to remediate the new speculative execution attack dubbed "Retbleed" aimed at return trampolines implemented for Spectre side-channel attack mitigation.
Cybersecurity researchers at SEKOIA found that the Roaming Mantis malware campaign is now targeting iOS and Android users in France after attacking users in the U.S., Germany, the U.K., Japan, South Korea and Taiwan, according to BleepingComputer.
Eight applications infected with a new variant of the Joker spyware, which have already garnered over 3 million downloads combined, have been removed by Google from the Google Play store, Threatpost reports.
Roaming Mantis, the FBI, Magecarts, CloudMensis, FreePBX, Russia, and liquid-cooled laptops, we also have a special guest, Rich Mogull from Firemon on this episode of the Security Weekly News. This segment is sponsored by FireMon. Visit https://securityweekly.com/firemon to learn more about them!
Dragos reports one group offering password cracking is using password recovery software to install the Sality botnet. Sality is used for distributed criminal tasks, including cryptomining.
