Toggle light / dark theme

CISA orders agencies to patch Windows LSA bug exploited in the wild

CISA has re-added a security bug affecting Windows devices to its list of bugs exploited in the wild after removing it in May due to Active Directory (AD) certificate authentication issues caused by Microsoft’s May 2022 updates.

The flaw is an actively exploited Windows LSA (Local Security Authority) spoofing vulnerability tracked as CVE-2022–26925 and confirmed to be a new PetitPotam Windows NTLM Relay attack vector.

Unauthenticated attackers can exploit this bug to force domain controllers to authenticate them remotely via the Windows NT LAN Manager (NTLM) security protocol and, likely, take over the entire Windows domain.

California DOJ data breach exposes personal information of all concealed carry permit holders across state

The breach occurred as part of the state Department of Justice’s launch of its “2022 Firearms Dashboard Portal,” officials said.


The names, addresses and license types of all concealed carry permit holders in California were exposed after the state Department of Justice suffered a data breach, authorities said Tuesday.

The Fresno County Sheriff’s Office on Tuesday learned of the breach from the California State Sherriff’s Association, according to a statement.

The breach occurred as part of the state DOJ’s launch of its “2022 Firearms Dashboard Portal,” the sheriff’s office said in the statement.

Messenger chatbots now used to steal Facebook accounts

A new phishing attack is using Facebook Messenger chatbots to impersonate the company’s support team and steal credentials used to manage Facebook pages.

Chatbots are programs that impersonate live support people and are commonly used to provide answers to simple questions or triage customer support cases before they are handed off to a live employee.

In a new campaign discovered by TrustWave, threat actors use chatbots to steal credentials for managers of Facebook pages, commonly used by companies to provide support or promote their services.

Senator Joe Lieberman — Leading Bipartisan Moonshots For Health, National Security And Government

Leading bipartisan moonshots for health, national security & functional government — senator joe lieberman, bipartisan commission on biodefense, no labels, and the centre for responsible leadership.


Senator Joe Lieberman, is senior counsel at the law firm of Kasowitz Benson Torres (https://www.kasowitz.com/people/joseph-i-lieberman) where he currently advises clients on a wide range of issues, including homeland and national security, defense, health, energy, environmental policy, intellectual property matters, as well as international expansion initiatives and business plans.

Prior to joining Kasowitz, Senator Lieberman, the Democratic Vice-Presidential nominee in 2000, served 24 years in the United States Senate where he helped shape legislation in virtually every major area of public policy, including national and homeland security, foreign policy, fiscal policy, environmental protection, human rights, health care, trade, energy, cyber security and taxes, as well as serving in many leadership roles including as chairman of the Committee on Homeland Security and Government Affairs.

Prior to being elected to the Senate, Senator Lieberman served as the Attorney General of the State of Connecticut for six years. He also served 10 years in the Connecticut State Senate, including three terms as majority leader.

In addition to practicing law, Senator Lieberman is honorary national founding chair of No Labels (https://www.nolabels.org/), an American political organization composed of Republicans, Democrats and Independents whose mission is to “usher in a new era of focused problem solving in American politics.”

The hacking industry faces the end of an era

NSO Group, the world’s most notorious hacking company, could soon cease to exist. But even if NSO Group is no more, there are plenty of rivals who will rush in to provide the hacking capability that more and more governments demand.


But even if NSO Group is no more, there are plenty of rivals who will rush in to take its place. And the same old problems haven’t gone away.

Hackers can bring ships and planes to a grinding halt. And it could become much more common

Armed with little more than a computer, hackers are increasingly setting their sights on some of the biggest things that humans can build.

Vast container ships and chunky freight planes — essential in today’s global economy — can now be brought to a halt by a new generation of code warriors.

“The reality is that an aeroplane or vessel, like any digital system, can be hacked,” David Emm, a principal security researcher at cyber firm Kaspersky, told CNBC.

/* */