CISA: Weakness in Chirp Systems may pose problems for “smart lock” homes.

https://krebsonsecurity.com/2024/04/crickets-from-chirp-systems-in-smart-lock-key-leak

Apple patches Zero-Day vulnerabilities to iOS, macOS and Safari

https://thehackernews.com/2023/12/zero-day-alert-apple-rolls-out-ios.html

https://support.apple.com/en-us/HT201222

Android Framework vulnerability allows bad actors to escalate privileges on unpatched devices. CISA states Chinese app exploiting to spy on users

https://www.bleepingcomputer.com/news/security/cisa-warns-of-android-bug-exploited-by-chinese-app-to-spy-on-users/

Geek Squad email scams are back

They’re back, so the effort has to bear some fruit for someone. There’s a lot of good advice out there about them so I won’t rehash them all. It’s best to know that they’re fake. Just delete them and move on. I would think that all age groups have been a victim of this kind of fraud, but the elderly may be especially susceptible. Educate your parents, grandparents, aunts, uncles and their friends.

Some recent articles about them:

https://www.makeuseof.com/geek-squad-email-scam/

What is Geek Squad Email Scam and How to Avoid It?

If you’ve fallen prey to these, don’t hide that. Tell someone. Report it to your local police and/or file a report online with the FTC here: https://reportfraud.ftc.gov/#/

It might also be a good time to revisit these great tips concerning Online Privacy and Security

https://consumer.ftc.gov/identity-theft-and-online-security/online-privacy-and-security

Apple Mac and mobile users encouraged to patch now for the Zero-Days mentioned yesterday. Full access/control possible.

iPhone Users Urged to Update to Patch 2 Zero-Days

FYI, my phone didn’t present this as an option yet until I refreshed.

Apple patches Zero-Day vulnerabilities in iOS, iPadOS and macOS that may be being exploited

Apple patches Zero-Day vulnerabilities in iOS, iPadOS and macOS that may be being exploited

https://thehackernews.com/2022/08/apple-releases-security-updates-to.html

Phishing for fake “blue check marks” or “verified accounts”. Already verified targeted too.

Fake Instagram Verification & Twitter Badge Phishing

Twilio suffers breach after SMS attack on multiple employees. Some customer data exposed

https://www.bleepingcomputer.com/news/security/twilio-discloses-data-breach-after-sms-phishing-attack-on-employees/

Android apps with malware was installed from Google Play 3,000,000 times

https://www.bleepingcomputer.com/news/security/new-android-malware-on-google-play-installed-3-million-times/

FBI warns about the potential for Cyber Activities during the 2022 Beijing Winter Olympics and Paralympics

https://www.cisa.gov/uscert/ncas/current-activity/2022/02/01/fbi-releases-pin-potential-cyber-activities-during-2022-beijing