This week in InfoSec is about Microsoft’s futurists being too futury Rant of the Week is time to moveit moveit Billy Big Balls is the revenge of SuperGran Industry News is the latest and greatest security news stories from around the world And Tweet of the Week is about revenge of the auditor
This week in InfoSec (08:24)
With content liberated from the “today in infosec” twitter account and further afield
12th November 2012: John McAfee went into hiding because his neighbour, Gregory Faull, was found dead from a gunshot. Belize police wanted him to come in for questioning, but he fled to Guatemala where he was then arrested. He was never charged, though he lost a $25 million wrongful death suit.
https://x.com/todayininfosec/status/1856538748361515355
12th November 2000: Bill Gates demonstrates a functional prototype of a Tablet PC. Microsoft claims “the Tablet PC will represent the next major evolution in PC design and functionality.” However, the Tablet PC initiative never really took off and it wasn't until Apple introduced the iPad in 2010 that tablet computing was widely adopted.
Microsoft Declares Tablets Are the Future
Rant of the Week (15:41)
Amazon MOVEit Leaker Claims to Be Ethical Hacker
A threat actor who posted 2.8 million lines of Amazon employee data last week has taken to the dark web to claim they are doing so to raise awareness of poor security practice.
The individual, who goes by the online moniker “Nam3L3ss,” claimed in a series of posts to have obtained data from 25 organisations whose data was compromised via last year’s MOVEit exploit.
Billy Big Balls of the Week (24:12)
O2's AI granny knits tall tales to waste scam callers' time
Watch out, scammers. O2 has created a new weapon in the fight against fraud: an AI granny that will keep you talking until you get bored and give up.
O2, the mobile operator arm of Brit telecoms giant Virgin Media, says it has built the human-like AI to answer calls from fraudsters in real time, keeping them busy on the phone and wasting their time by pretending to be a potential vulnerable target.
"Daisy" is claimed to be indistinguishable from a real person, fooling scammers into thinking they've found perfect prey thanks to its ability to engage in "human-like" rambling chat, the biz claims.
For several weeks in the run-up to International Fraud Awareness Week (November 17–23), the AI has already frustrated scam callers with meandering stories about her family and talked at length about her passion for knitting, according to O2.
Industry News (28:20)
Amazon MOVEit Leaker Claims to Be Ethical Hacker
Bank of England U-turns on Vulnerability Disclosure Rules
Massive Telecom Hack Exposes US Officials to Chinese Espionage
Microsoft Power Pages Misconfiguration Leads to Data Exposure
Sitting Ducks DNS Attacks Put Global Domains at Risk
O2’s AI Granny Outsmarts Scam Callers with Knitting Tales
Ransomware Groups Use Cloud Services For Data Exfiltration
Bitfinex Hacker Jailed for Five Years Over Billion Dollar Crypto Heist
Palo Alto Networks Confirms New Zero-Day Being Exploited by Threat Actors
Tweet of the Week (36:05)