Microsoft has an explanation for the Outlook hack. Apple patches two no-click zero-days.

Microsoft thinks it has figured out how Chinese hackers were able to get the signing key needed for their big Outlook hack earlier this year, and it's a doozy.

In short: the signing system had a crash in 2021. When such a system crashes it creates a snapshot of the crashed process, also known as a "crash dump". Crash dumps shouldn't contain sensitive data, but in this case it did. The hackers gained access to an employee's account, that also happened to have access to the crash dump. They combed through it and found the key.

Those are some highly motivated attackers, that's for sure.

There are patches available for two vulnerabilities that were used by the NSO group to infect iPhones remotely without user interaction. All they had to do was send an iMessage with an attachment. Other platforms like Mac, Apple Watch and iPads are vulnerable too, so make sure to run that update on all of them.

Okta released a warning that four of their high-profile customers were targeted by sophisticated social engineering and lateral movement techniques, which they detail in a blogpost.

Interesting report on the "W3LL store", a community where you can buy phishing kits targeted at MS365 accounts. They're effective too, compromising roughly 8,000 accounts and earning the creators about $500,000 in sales.

If you feel like doing a quick pentest every few quarters isn't enough, you are correct. Take a look at the combination of continuous vulnerability assessments and real-time pentesting that GlitchSecure offers. Every finding is verified by highly skilled (and wonderful) humans. (Sponsored)

No real news in this one but it's an interesting read on how more botnets might be taken down in a similar fashion, while also pointing out that eventually the botnet controllers will adapt and/or rebuild.

You can use the Flipper Zero to generate a range of spoofed Apple-related Bluetooth notifications, overwhelming a user with them. Good to know about if it starts happening to you. Or yet another reason to buy one if you want to try it out yourself, which I still haven't gotten around to.

I haven't listened to all of it yet but it seems like an interesting podcast episode about Ukraine's cyber defenses and the cooperation with Western cybersecurity forces. It's transcribed so you can read it as well.

Definitely true, and definitely worth a read.

I had no idea that the first ransomware incident happened on a 1989 WHO conference, and asked victims to send their ransom to a PO box in Panama. The article then goes over all the things that have changed since then.

More privacy than security, but interesting (and infuriating) research from the Mozilla Foundation. From the article: "Every car brand we looked at collects more personal data than necessary and uses that information for a reason other than to operate your vehicle and manage their relationship with you.". Great, just great.

Visma is a European powerhouse that builds software for schools, governments, accounting departments and more. Listen along as Vlad Boldura, security manager at Visma, joins the Random but Memorable podcast to discuss why they chose 1Password, how they rolled it out and what impact it has had. (Sponsored)