🚨 Cyber News: Blackhat Silence over Anti-Semitism, F5 BIG-IP, Ukraine Disrupts Russia Internet, FTC Breach Rules

Cyberhub Podcast Episode - October 30th, 2023

1. Introduction: The host, James Azar, welcomes listeners to the Cyberhub podcast episode for Monday, October 30th, 2023.

2. F5 Vulnerability: A critical severity vulnerability has been identified in F5's BIG-IP product. The vulnerability allows an unauthenticated attacker to execute arbitrary code remotely.

3. Ukrainian Cyber Attacks on Russia: Ukrainian cyber activists, known as the IT Army, have temporarily disabled internet services in parts of Ukraine occupied by Russia. Russian ISPs have confirmed significant DDoS attacks originating from Ukraine.

4. Electra Leak Cryptojacking: Threat actors have been exploiting exposed Amazon Identity Access Management (IAM) credentials on GitHub for cryptojacking attacks. The campaign, dubbed "Electra Leak," has been active since December 2020.

5. Safari Side Channel Attack: Researchers have developed a side-channel exploit for Apple CPUs that can extract sensitive information from browsers. This attack, named "iLeakage," affects Apple iPhone users, especially those using the Safari browser.

6. Black Hat Controversy: Many companies, including SentinelOne and Wiz, have paused their cooperation with Black Hat due to concerns about one of the training review board members, Muhammad El Daab, who has been accused of anti-Semitism. Black Hat has yet to make an official statement on the matter.

7. Closing: James Azar concludes the episode, reminding listeners to stay cyber safe and to provide feedback.

Today's Headlines and the latest #cybernews from the desk of the #CISO:

F5 Warns of Critical Remote Code Execution Vulnerability in BIG-IP

Ukrainian hackers disrupt internet providers in Russia-occupied territories

FTC approves rule giving non-banking financial institutions 30 days to report data breaches

New Hunters International ransomware possible rebrand of Hive

Safari Side-Channel Attack Enables Browser Theft

EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHub

BlackHat Silence on Anti-Semitism and the Ensuing Boycott

Story Links:

https://www.securityweek.com/f5-warns-of-critical-remote-code-execution-vulnerability-in-big-ip/

https://therecord.media/ukranian-hackers-disrupt-internet-providers-crimea

https://therecord.media/ftc-approves-disclosure-rules-financial

https://www.bleepingcomputer.com/news/security/new-hunters-international-ransomware-possible-rebrand-of-hive/

https://www.darkreading.com/vulnerabilities-threats/safari-side-channel-attack-enables-browser-theft

https://thehackernews.com/2023/10/elektra-leak-cryptojacking-attacks.html

https://www.blackhat.com/html/press/2023-10-28.html

Thank you for watching and Please Don't forget to Like this video and Subscribe to my Channel!

Apply now to be a featured partner on the show: https://www.cyberhubpodcast.com/contact

******

Listen here: https://linktr.ee/cyberhubpodcast

SubStack:

******

Website: https://www.cyberhubpodcast.com

Youtube: https://www.youtube.com/c/TheCyberHubPodcast

Rumble: https://rumble.com/c/c-1353861

Facebook: https://www.facebook.com/CyberHubpodcast/

Linkedin: https://www.linkedin.com/company/cyberhubpodcast/

Twitter: https://twitter.com/cyberhubpodcast

Instagram: https://www.instagram.com/cyberhubpodcast

The Hub of the Infosec Community.

Our mission is to provide substantive and quality content that’s more than headlines or sales pitches. We want to be a valuable source to assist those cybersecurity practitioners in their mission to keep their organizations secure.

#cybernews #infosec #cybersecurity #cyberhubpodcast #ciso #infosecnews #infosecurity #cybersecuritytips #podcast #technews #tinkertribe #securitygang #informationsecurity #cyberattack #databreach #exploit #zeroday