Dutch police arrested a 24-year-old Amsterdam man in a ShinyHunters investigation, with a Rotterdam court appearance set for Sept. 29.
Get the latest international news and world events from around the world.
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Spectre BTR reuses stale JIT branch targets; Linux PoCs recover the root password hash within minutes on a fully patched Intel system.
New Spectre v2 attack variant leaks Linux root password hash in minutes
A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3–5 minutes on average.
Signal adds encypted local backup support to iOS, desktop apps
Signal, the secure messaging app, released version 8.30, completing the rollout of its secure backups feature across all supported operating systems (Android, iOS, Linux, macOS, and Windows).
The feature, introduced on Android nearly a year ago, lets users create end-to-end encrypted backups of their chats and restore them on other devices if they lose their phone.
The backup system supports two options: Signal-hosted backups, limited to 45 days of media and 128 KB per message for free users (100 GB in paid plans), and on-device, local backups, with no size restrictions.
Former US Air Force members sent to prison over BEC attacks
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns.
According to court documents, 25-year-old Chijioke Timothy Odimegwu and 26-year-old Harafat Mogaji carried out these attacks while stationed at Dover Air Force Base in Delaware.
They stole victims’ employee email credentials in spamming and phishing campaigns. The defendants then used “spoofed” email addresses that mimicked business partners’ emails, along with the credentials, to redirect payments to accounts controlled by accomplices in the United States and abroad.
