Weekly #cybersecurity digest to your inbox

Subscribe for our weekly digest and get each Friday the most important cyber security news, list of upcoming free webinars and a summary of Cyberday development to your inbox.
Thanks! See you in your inbox on Fridays. :)
Unfortunately something went wrong. You can contact us at team@cyberdayai.

Fake Flipper Zero sellers are after your money

Flipper Zero is a portable multi-tool for pentesters and hardware geeks - often out of stock due to its popularity. ⚠️ Bad actors are noticing this and creating bogus sites claiming to sell Flipper Zero. Case example >> #cybersecurity

Go to article at
28.4.2023

How we fought bad apps and bad actors in 2022

Google's 2022 #cybersecurity numbers - 1.43M policy-violating apps blocked from Google Play - 173K bad accounts banned - $2000M in fraudulent transactions prevented - 500K apps stopped from unnecessarily accessing sensitive permissions

Go to article at
28.4.2023

Google leaking 2FA secrets – researchers advise against new “account sync” feature for now

G Authenticator launched an “account sync” so users can backup 2FA data to cloud and later restore to a new device. ⛔ Researchers though have found some #cybersecurity worries in the feature (especially with encryption). Details >>

Go to article at
28.4.2023

Microsoft: Windows 10 22H2 is the final version of Windows 10

⚠️ The current version (22H2) will be the final version of Windows 10 - work versions supported until May 2025. MS encourages transitioning to Windows 11. 22H2 won't get any Windows 10 feature updates, but #cybersecurity updates continue.

Go to article at
28.4.2023

Popular Fitness Apps Leak Location Data Even When Users Set Privacy Zones

🚩 Students discovered: when a user starts fitness activity from home, an attacker can use app's API metadata to pinpoint their home location, even if they've set up an "endpoint privacy zone" (EPZ) for that area. #privacy

Go to article at
21.4.2023

Avoid this "lost injured dog" Facebook hoax

Compromised or new accounts sending hoax posts to e.g. local community groups. Now with "Lost injured dog" approach. This is common - used to great effect in the “dead daughter / free PS5” scam last year. Avoiding hoaxes >> #cybercrime

Go to article at
21.4.2023

FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

Phones charge over USB cables, which carry both power and data. 🪫 When you plug into a USB outlet at an airport, how do you know you're only getting power, not a secret data connection? More info about #juicejacking >> #cybersecurity

Go to article at
21.4.2023

Fake Chrome updates spread malware

⚠️ Campaign (since Nov-22) uses vulnerable, hacked sites to push fake browser updates. Malicious JS shows an update msg and automatically downloads a zip when landing on the page. Opening the file will execute a cryptominer #malware.

Go to article at
21.4.2023

Discarded, not destroyed: Old routers reveal corporate secrets

🗑️ The fate of a discarded routers? ESET purchased a few used ones to investigate. In many cases, previous configurations weren't wiped and data could be used to identify the prior owners and network details. #cybersecurity

Go to article at
21.4.2023