Hoax Clearing Center

X-He-Spam-Score: -3.8

Return-Path: <bounce-mc.us18_98818529.11206316-9d10de3b61@mail54.atl11.rsgsv.net>

Delivered-To: dropbox@plan.io

Received: from m.launch.gmbh ([127.0.0.1])

by m.launch.gmbh with LMTP

id gPVZDrrzg2cI1gkAJzdhvw

(envelope-from <bounce-mc.us18_98818529.11206316-9d10de3b61@mail54.atl11.rsgsv.net>)

for <dropbox@plan.io>; Sun, 12 Jan 2025 17:54:18 +0100

X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on m.launch.gmbh

X-Spam-Level:

X-Spam-Status: No, score=-3.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,

DKIM_VALID,DKIM_VALID_AU,DMARC_PASS,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,

RCVD_IN_MSPIKE_H2,SPF_FAIL,SPF_FAIL_IGNORE,SPF_HELO_NONE,

T_KAM_HTML_FONT_INVALID,URIBL_SBL_A autolearn=ham autolearn_force=no

version=3.4.6

X-Spam-Report:

* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at

* https://www.dnswl.org/, no trust

* [64.90.62.164 listed in list.dnswl.org]

* 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL

* blocklist

* [URIs: ftcreverse.engineering]

* -1.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

* [64.90.62.164 listed in wl.mailspike.net]

* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%

* [score: 0.0000]

* 5.0 SPF_FAIL SPF check failed

* -0.1 DMARC_PASS DMARC check passed

* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record

* 0.0 HTML_MESSAGE BODY: HTML included in message

* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

* valid

* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

* author's domain

* 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted

* Colors in HTML

* -5.0 SPF_FAIL_IGNORE Planio Inbox does not consider SPF FAILS on

* redirects

X-Spam-Score: -3.8

Authentication-Results: m.launch.gmbh; dmarc=pass (p=none dis=none) header.from=weekinsecurity.com

Authentication-Results: m.launch.gmbh; spf=fail smtp.mailfrom=mail54.atl11.rsgsv.net

Authentication-Results: m.launch.gmbh;

dkim=pass (1024-bit key; unprotected) header.d=weekinsecurity.com header.i=this@weekinsecurity.com header.a=rsa-sha256 header.s=k1 header.b=p1ECezaq;

dkim-atps=neutral

Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io

Received: from pdx1-sub0-mail-mx202.dreamhost.com (fltr-in2.mail.dreamhost.com [64.90.62.164])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)

(No client certificate requested)

by m.launch.gmbh (Postfix) with ESMTPS id 625DD167DA2

for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Sun, 12 Jan 2025 17:54:17 +0100 (CET)

Received: from postfix-inbound-v2-11.inbound.mailchannels.net (inbound-egress-7.mailchannels.net [23.83.220.5])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)

(No client certificate requested)

by pdx1-sub0-mail-mx202.dreamhost.com (Postfix) with ESMTPS id 4YWM1L61Bxz8kZk

for <lapor@turnbackhoax.id>; Sun, 12 Jan 2025 08:54:14 -0800 (PST)

ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1736700854; a=rsa-sha256;

cv=none;

b=1n5xqG8n94CLhVXBPHbPVrdaIhmqOgTDArxLCegaxmS8Aiz2tx20sqEv2qeY5OeCfFJuJ4

J5+RziD/8KajolDN3/NnUip2JwZ0UOa7jVGtH1mMNNWLL0hQ2fKMaIsOYhmmvnXEFBkSsh

AA5S7sRFMlRVBk3wGtkOCwv0I/S7//BrwMdoT7MflkQaS0Fxe+qmyhlcvgk0yEYlOcBmBs

aiElhFQtEDl2DLFcxgw0NFvZpj5lHEunfQ9KYnm7mniot9GkOT3HJ4SlZJlfIKpxZbXVBH

/ZKhjumLrHNBJOGO8XzY1jMhqMH/g8uK8Hf5cUgOGXc6mtUF6qVwd+RCJwcvOg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailchannels.net;

s=arc-2022; t=1736700854;

h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:list-id:list-unsubscribe:

list-unsubscribe-post:dkim-signature;

bh=dTEwdPT9sulZHtdaUYrBzE2IVhHZviCUXS0LSud5b5Y=;

b=HGSRUKqgouNnqS4DypkfFUsELQUwKrrDXRjD9HlVn5MbIYSm2f2OUwEcp8QeAzB2p8uTp4

qTLLPqVlCtVE5YwwRl/BvS81QLo9ehw4KtXCV8SQjxeaXY/WJRMTCPyX78mXCKgkcos8/5

GQupsPlMIYV9ZqRHizOIMcnZLPBvmwI3Im8RunahRHZLXe/DwNrjRxW+hsBDlvcXomKi+m

JfqwdK8n9vDIO3C1oiLC4lYuORNzFEBuN5bSivM+k9zwWLfvstUUXZFEM1OBDsH9vqVgce

k8glsq8FxAtc38UI62Dp2dWjw0o+NdGrrcr55gIx9y3bv96LBdzd/tas8t3Vtg==

ARC-Authentication-Results: i=1;

inbound-rspamd-7d6dbf97d6-tfqn2;

none

X-VR-STATUS: SPAM

X-Message-ID: CVevlpBgcM3hk5LclGQqs9DD

Received: from mail54.atl11.rsgsv.net (mail54.atl11.rsgsv.net

[205.201.133.54])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)

by 100.109.47.44 (trex/6.10.3);

Sun, 12 Jan 2025 16:54:14 +0000

Authentication-Results: inbound.mailchannels.net;

spf=pass

smtp.mailfrom=bounce-mc.us18_98818529.11206316-9d10de3b61@mail54.atl11.rsgsv.net;

dkim=pass header.d=weekinsecurity.com;

dmarc=pass (policy=none; pct=5; status=pass);

arc=none

Received-SPF: pass (dmarc-service-5d68fff777-7jlr4: domain of

mail54.atl11.rsgsv.net designates 205.201.133.54 as permitted sender)

client-ip=205.201.133.54;

envelope-from=bounce-mc.us18_98818529.11206316-9d10de3b61@mail54.atl11.rsgsv.net;

helo=mail54.atl11.rsgsv.net;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=weekinsecurity.com;

s=k1; t=1736700851; x=1736961351; i=this@weekinsecurity.com;

bh=dTEwdPT9sulZHtdaUYrBzE2IVhHZviCUXS0LSud5b5Y=;

h=Subject:From:Reply-To:To:Date:Message-ID:X-MC-User:Feedback-ID:

List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:

MIME-Version:CC:Date:Subject:From;

b=p1ECezaqkQ4eifSO7XDEeNBENPhNtOM5aRM53KJzSde5ydiqHOuPD8L85YNr0JQkR

NGfM3y1DN71B9IPMMhC1PB8D5TI6OS4XBhht+u4ka1COSCCV2M1uQgKKqneANJVbVV

44hIlHj/h7QMCXARiIaVqfmdAqZsJbPULRCj78yY=

Subject: =?utf-8?Q?this=20week=20in=20security=20=E2=80=94=20january=2012=20edition?=

From: Zack Whittaker <this@weekinsecurity.com>

Reply-To: =?utf-8?Q?Zack=20Whittaker?= <this@weekinsecurity.com>

To: <lapor@turnbackhoax.id>

Date: Sun, 12 Jan 2025 16:54:01 +0000

Message-ID: <e1ad6038c994abec17dafb116.9d10de3b61.20250112165356.383b87a85b.0bdaf951@mail54.atl11.rsgsv.net>

X-Mailer: Mailchimp Mailer - **CID383b87a85b9d10de3b61**

X-Campaign: mailchimpe1ad6038c994abec17dafb116.383b87a85b

X-campaignid: mailchimpe1ad6038c994abec17dafb116.383b87a85b

X-Report-Abuse: Please report abuse for this campaign here: https://mailchimp.com/contact/abuse/?u=e1ad6038c994abec17dafb116&id=383b87a85b&e=9d10de3b61

X-MC-User: e1ad6038c994abec17dafb116

Feedback-ID: 98818529:98818529.11206316:us18:mc

List-ID: e1ad6038c994abec17dafb116mc list <e1ad6038c994abec17dafb116.94603.list-id.mcsv.net>

X-Accounttype: pd

List-Unsubscribe: <https://social.us18.list-manage.com/unsubscribe?u=e1ad6038c994abec17dafb116&id=a2457dc8ad&t=h&e=9d10de3b61&c=383b87a85b>, <mailto:unsubscribe-mc.us18_e1ad6038c994abec17dafb116.383b87a85b-9d10de3b61@unsubscribe.mailchimpapp.net?subject=unsubscribe>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Content-Type: multipart/alternative; boundary="_----------=_MCPart_2048319155"

MIME-Version: 1.0

This is a multi-part message in MIME format

--_----------=_MCPart_2048319155

Content-Type: text/plain; charset="utf-8"; format="fixed"

Content-Transfer-Encoding: quoted-printable

Huge breach of location data=2C PowerSchool data breach=2C China hack of T=

reasury deepens=2C and more.

** ~this week in security~

------------------------------------------------------------

a cybersecurity newsletter by @zackwhittaker (https://mastodon.social/@zac=

kwhittaker)

volume 8=2C issue 2

View this email in your browser (https://mailchi.mp/weekinsecurity/this-we=

ek-in-security-january-12-2025-edition?e=3D9d10de3b61) | RSS (https://us18.c=

ampaign-archive.com/feed?u=3De1ad6038c994abec17dafb116&id=3Da2457dc8ad)

~ ~

** THIS WEEK=2C TL;DR

------------------------------------------------------------

Hackers claim massive breach of location data from Gravy Analytics (https:=

//www.404media.co/hackers-claim-massive-breach-of-location-data-giant-thre=

aten-to-leak-data/)

404 Media: Well=2C it happened =E2=80=94 and it looks like this could be a=

big one. A major broker of location data=2C Gravy Analytics=2C had a data=

breach that lost an eye-watering amount of location data to hackers who r=

aided its AWS account. A sample published on a hacking forum this week saw=

somewhere in the region of tens of millions of location data points acros=

s the world from ordinary users whose phone apps track where they go. This=

is all thanks to real-time bidding (https://www.eff.org/deeplinks/2025/01=

/online-behavioral-ads-fuel-surveillance-industry-heres-how) =2C a process=

that exploits the ads industry to power the surveillance industry. (Ad-bl=

ockers are your friend!) There are thousands of apps =E2=80=94 and very po=

pular apps=2C like Tinder=2C Candy Crush=2C and others =E2=80=94 that use=

bits of code (like SDKs) to display ads in their apps=2C which have a sid=

e-effect of allowing brokers to listen in and acquire users' real-time loc=

ation data=2C which the apps themselves might not even explicitly know abo=

ut

themselves. (The WSJ (https://www.wsj.com/tech/cybersecurity/how-ads-on-yo=

ur-phone-can-aid-government-surveillance-943bde04) has a good primer on ho=

w this works.) This data is highly trackable and is a nightmare for privac=

y; Forbes ($) (https://www.forbes.com/sites/thomasbrewster/2025/01/10/grav=

y-analytics-massive-mobile-location-data-hack-may-have-risked-gay-peoples-=

safety/) also has a look inside the hacked data. Little word yet from the=

company=2C Gravy=2C except a brief notification via Norwegian media (http=

s://www.nrk.no/norge/oppdaget-datainnbrudd-da-hackeren-tok-kontakt-1.17201=

694) =E2=80=93 because the law there requires a breach notification. The U=

=2ES.=2C meanwhile=2C has no such law. The hackers behind the breach have th=

reatened to post more=2C but deleted their forum post... either way=2C thi=

s will be a major story to keep a close eye on.

More: 404 Media (https://www.404media.co/candy-crush-tinder-myfitnesspal-s=

ee-the-thousands-of-apps-hijacked-to-spy-on-your-location/) | NRK.no (http=

s://www.nrk.no/norge/oppdaget-datainnbrudd-da-hackeren-tok-kontakt-1.17201=

694) | Reuters ($) (https://www.reuters.com/technology/cybersecurity/locat=

ion-tracking-company-unacast-tells-norway-its-data-was-hacked-broadcaster-=

2025-01-11/) | EFF (https://www.eff.org/deeplinks/2025/01/online-behaviora=

l-ads-fuel-surveillance-industry-heres-how) | @fs0c131y (https://x.com/fs0=

c131y/status/1877128999240962290) | @josephcox (https://infosec.exchange/@=

josephcox/113800439776792443)

https://x.com/fs0c131y/status/1876983147503513800

PowerSchool hack exposes K-12 student and teachers' personal data (https:/=

/www.bleepingcomputer.com/news/security/powerschool-hack-exposes-student-t=

eacher-data-from-k-12-districts/)

Bleeping Computer: A major data breach at edtech provider PowerSchool saw=

a hacker steal a ton of sensitive data on students and teachers in K-12 d=

istricts across North America. PowerSchool is a major provider of school s=

oftware=2C used by some 50 million students. The stolen data includes pers=

onal information =E2=80=94 names and addresses =E2=80=94 but also Social S=

ecurity numbers=2C some medical data and grades=2C according to a leaked F=

AQ (https://techcrunch.com/2025/01/09/powerschool-says-hackers-stole-stude=

nts-sensitive-data-including-social-security-numbers-in-data-breach/) . Th=

e company admitted that the hacker broke in with a "stolen credential" (si=

gh!). Looks like the company paid the hacker to delete the data=2C but rea=

lly=2C come on=2C nobody can trust that! DataBreaches.net (https://databre=

aches.net/2025/01/10/powerschool-incident-a-few-resources-for-teachers-par=

ents-and-former-students/) has resources for students and affected teacher=

s and parents alike. Expect data breach disclosures (well=2C at least in

the U.S. states that require them) to drop in the next few weeks and month=

s=2C and there will probably be a fair number of them.

More: TechCrunch (https://techcrunch.com/2025/01/09/powerschool-says-hacke=

rs-stole-students-sensitive-data-including-social-security-numbers-in-data=

-breach/) | Reddit /r/k12sysadmin (https://old.reddit.com/r/k12sysadmin/co=

mments/1hw1m3x/so_powerschool_had_a_breach/)

Japan links Chinese hacker MirrorFace to dozens of cyberattacks (https://a=

pnews.com/article/japan-police-cyberattack-china-government-68adcb293b2931=

da4c30ca0279720124)

Associated Press: Japan blamed a China-backed hacking group called MirrorF=

ace for being behind dozens of cyberattacks targeting the Japanese governm=

ent and tech companies across the country in a multi-year hacking spree si=

nce 2019. MirrorFace sent emails with malware and targeted VPNs to get acc=

ess to internal networks. It's the latest warning about Japan's cybersecur=

ity posture of late; in 2023=2C @ellenwapo (https://bsky.app/profile/ellen=

wapo.bsky.social) reported that China hacked (https://www.washingtonpost.c=

om/national-security/2023/08/07/china-japan-hack-pentagon/) some of Japan'=

s most sensitive networks =E2=80=94 to a point where the U.S.=2C a major a=

lly of Japan=2C was getting reeeeally concerned with its own secrets.

More: NPA.go.jp (https://www.npa.go.jp/bureau/cyber/koho/caution/caution20=

250108.html) | Kyodo News (https://english.kyodonews.net/news/2025/01/3de6=

55117007-210-hacks-made-on-jaxa-other-japan-targets-by-china-group-since-2=

019.html) | TechCrunch (https://techcrunch.com/2025/01/08/japan-says-chine=

se-hackers-targeted-its-government-and-tech-companies-for-years/)

China hackers targeted Treasury's CFIUS office in December breach (https:/=

/www.cnn.com/2025/01/10/politics/chinese-hackers-breach-committee-on-forei=

gn-investment-in-the-us/index.html)

CNN: Speaking of China... looks like we have another member of the Typhoon=

family (https://techcrunch.com/2024/10/13/meet-the-chinese-typhoon-hacker=

s-preparing-for-war/) to add to our bingo card. Silk Typhoon (previously H=

afnium =E2=80=94 yes =E2=80=94 of that mass email hacking fame (https://te=

chcrunch.com/2021/03/10/america-small-business-hafnium-exchange-hacks/) )=

is back with a new campaign (https://www.bloomberg.com/news/articles/2025=

-01-08/white-house-rushes-to-finish-cyber-order-after-china-hacks) targeti=

ng the U.S. Treasury. It started with a December breach of a BeyondTrust p=

rivate key that allowed remote access to Treasury employee workstations an=

d unclassified documents. Then=2C the Treasury's OFAC office (https://www.=

washingtonpost.com/national-security/2025/01/01/treasury-hack-china/) for=

imposing financial sanctions was hacked; and now CNN reports that CFIUS=

=E2=80=94 in more acronym salad =E2=80=94 the committee that assesses for=

eign investments and transactions for national security risks=2C was also=

targeted

by the Chinese hackers. CISA also said (https://content.govdelivery.com/ac=

counts/USDHSCISA/bulletins/3cafdc4) this week it doesn't think there's any=

other department=2C other than the Treasury=2C affected by this particula=

r campaign... but didn't say how it came to that conclusion.

More: CISA (https://content.govdelivery.com/accounts/USDHSCISA/bulletins/3=

cafdc4) | Bloomberg ($) (https://www.bloomberg.com/news/articles/2025-01-0=

8/white-house-rushes-to-finish-cyber-order-after-china-hacks) | The Regist=

er (https://www.theregister.com/2025/01/10/china_treasury_foreign_investme=

nt/)

~ ~

** THE STUFF YOU MIGHT'VE MISSED

------------------------------------------------------------

New Ivanti VPN bug exploited to hack into companies (https://techcrunch.co=

m/2025/01/09/hackers-are-exploiting-a-new-ivanti-vpn-security-bug-to-hack-=

into-company-networks/)

TechCrunch: New year=2C new Ivanti bug exploited in the wild (and almost e=

xactly to the year (https://forums.ivanti.com/s/article/CVE-2023-46805-Aut=

hentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Sec=

ure-and-Ivanti-Policy-Secure-Gateways?language=3Den_US) since its last maj=

or flaw). This time it's CVE-2025-0282 (https://forums.ivanti.com/s/articl=

e/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2=

025-0282-CVE-2025-0283?language=3Den_US) in Ivanti's Connect Secure (VPN p=

roduct)=2C which is being actively exploited to break into company network=

s. The folks at Mandiant said=2C per its investigation=2C that it looks li=

ke China-nexus actors (https://cloud.google.com/blog/topics/threat-intelli=

gence/ivanti-connect-secure-vpn-zero-day?e=3D48754805) are behind the hack=

s and that "multiple" organizations were compromised. So=2C patch today! T=

his is likely to be an ongoing issue for a bit; watchTowr Labs=2C which in=

vestigated

(https://labs.watchtowr.com/do-secure-by-design-pledges-come-with-stickers=

-ivanti-connect-secure-rce-cve-2025-0282/) (also: A+ meme game)=2C said ex=

ploitation has already seen "widespread impact." More from @screaminggoat=

(https://infosec.exchange/@screaminggoat/113795412892601309) .

White House unveils Cyber Trust Mark labeling program (https://www.nextgov=

=2Ecom/cybersecurity/2025/01/white-house-unveils-cyber-trust-mark-program-co=

nsumer-devices/401991/)

Nextgov/FCW: The Biden administration unveiled =E2=80=94 in its penultimat=

e week =E2=80=94 its long-awaited Cyber Trust Mark program=2C its cybersec=

urity labeling program for consumer internet-connected devices. This label=

ing system is designed to certify that smart devices are sold with certain=

security standards (as defined by NIST)=2C such as no default passwords a=

nd the ability to patch security updates. "Have your IoT devices as part o=

f a healthy=2C balanced security diet" =E2=80=94 at least that's the goal.=

Certified devices will hit the shelves in 2025.

DEF CON's hacker-in-chief faces fortune in medical bills after paralyzing=

neck injury (https://www.theregister.com/2025/01/07/def_con_security_chie=

f_injured/)

The Register: Marc Rogers=2C the head of security for the DEF CON hacker c=

on=2C faces tens of thousands of dollars in medical bills after an acciden=

t left him with a broken neck. Speaking with the folks at The Register=2C=

Rogers says the prognosis is good and that he's doing better; but=2C of c=

ourse=2C this is America and Rogers couldn't rely on his health insurance=

provider doing the right thing in time before the injury got worse. Roger=

s' GoFundMe is online (https://www.gofundme.com/f/support-marc-rogers-road=

-to-recovery) for anyone who can spare a few. All the best for a speedy an=

d full recovery=2C Marc!

https://x.com/k8em0/status/1876671646968557875

Corellium founder's mystery pardon involved spam and fish (https://www.sem=

afor.com/article/01/10/2025/citizen-wade-the-life-of-a-legendary-hacker-to=

-receive-a-rare-presidential-pardon)

Semafor: First of all=2C no=2C this doesn't involve some obscure British f=

ood (I would know). For years=2C reporters have been trying to figure out=

(https://daringfireball.net/linked/2020/12/29/wade-pardon) why Chistopher=

Wade=2C the co-founder of mobile security research firm Corellium=2C was=

granted a pardon (https://www.businessinsider.com/donald-trump-pardon-chr=

is-wade-cybersecurity-secret-crime-unsealed-documents-2025-1) by President=

Trump on his way out of office the first time around. Was it to do with g=

overnment contracts? Or was it to do with a spam operation he ran in the 2=

010s and was ultimately granted a legal lifeline through chance encounters=

over his personal fish obsession? Perhaps...

Voice phishing groups found abusing Apple 'account confirmation' prompts (=

https://krebsonsecurity.com/2025/01/a-day-in-the-life-of-a-prolific-voice-=

phishing-crew/)

Krebs on Security: Brian Krebs (https://infosec.exchange/@briankrebs/11378=

9749211433022) is back with an important story revealing how voice phishin=

g hackers are abusing Apple's own processes to trick unsuspecting victims=

into granting access to their Apple accounts. It's the same hack that tar=

geted Mark Cuban not so long ago. Cuban spoke with Krebs and explained how=

the hackers obtained access to some of Cuban's crypto wallets.

~ ~

THANKS FOR READING!

~this week in security~ is my free weekly cybersecurity newsletter support=

ed entirely by donations from readers like you. As a working journalist (h=

ttps://techcrunch.com/author/zack-whittaker/) =2C I don't run ads or accep=

t sponsors for this newsletter. Donations help reduce the costs of sending=

this newsletter while keeping it free=2C weekly=2C and without tracking.

To support this newsletter=2C check out my Ko-fi (https://ko-fi.com/thiswe=

ekinsecurity) to drop a one-time donation=2C or sign up from $10/monthly t=

o get cool swag (https://ko-fi.com/thisweekinsecurity/tiers) shipped world=

wide.

~ ~

** OTHER NEWSY NUGGETS

------------------------------------------------------------

Telegram hands over user data to authorities: Turns out when authorities a=

rrest a company's CEO for failing to help the authorities investigate seri=

ous crimes=2C things can change at that company pretty quickly. Months aft=

er Telegram CEO's arrest=2C the app's transparency bot (which isn't very t=

ransparent) now shows a spike in government demands for Telegram users' da=

ta in the months that followed. India=2C Germany and the U.S. are the top=

requesting countries=2C per a global breakdown (https://te-k.github.io/te=

legram-transparency/) of the data. Meanwhile=2C E2EE messaging apps like S=

ignal data can't give over data (https://signal.org/bigbrother/santa-clara=

-county/) it doesn't have to begin with. (via 404 Media ($) (https://www.4=

04media.co/telegram-hands-u-s-authorities-data-on-thousands-of-users/) =2C=

Forbes ($) (https://www.forbes.com/sites/thomasbrewster/2025/01/07/telegr=

am-hands-data-on-thousands-of-users-to-law-enforcement/) )

China hacks Philippines: Hackers backed by China have penetrated the execu=

tive branch of the Philippines government over a years-long campaign=2C pe=

r @jamietarabay (https://bsky.app/profile/jamietarabay.bsky.social/post/3l=

f4poos5z222) . The hack also included the president's office. The Philippi=

nes government was more tightly lipped in a later press conference=2C not=

confirming a breach=2C but said that the attacks were "persistent." China=

appears to be continuing to try to hack its way out of international disp=

utes=2C including over land and territory. (via Bloomberg ($) (https://www=

=2Ebloomberg.com/news/articles/2025-01-07/chinese-hackers-target-philippine-=

president-steal-military-data) )

Nyet=2C nyet! Boom=2C pszzzt: That's the sound of a Russian internet provi=

der in St. Petersburg having its digital systems obliterated in a destruct=

ive cyberattack=2C claimed by Ukrainian hacktivists. The ISP=2C Nodex=2C s=

aid in a post on Russian social networking site VK that its systems were "=

destroyed" in the breach=2C in which the hackers posted screenshots (https=

://t.me/UCAgroup/38) of the ISP's internal network and its backup systems.=

(via The Record (https://therecord.media/russian-internet-provider-says-n=

etwork-destroyed-cyberattack) =2C TechCrunch (https://techcrunch.com/2025/=

01/08/ukrainian-hackers-take-credit-for-hacking-russian-isp-that-wiped-out=

-servers-and-caused-internet-outages/) )

https://techcrunch.com/2025/01/08/ukrainian-hackers-take-credit-for-hackin=

g-russian-isp-that-wiped-out-servers-and-caused-internet-outages/

UN aviation agency confirms breach: The United Nations' civil aviation age=

ncy=2C ICAO=2C confirmed a breach this week affecting 42=2C000 recruitment=

-related records stolen from the agency=2C affecting some 12=2C000 people.=

In a brief update (https://www.icao.int/Newsroom/Pages/ICAO-statement-on-=

reported-security-incident.aspx) =2C ICAO said names=2C email addresses=2C=

dates of birth=2C and employment history were stolen (and later published=

on a known hacking forum) in the breach. (via ICAO (https://www.icao.int/=

Newsroom/Pages/ICAO-statement-on-reported-security-incident.aspx) =2C Reut=

ers ($) (https://www.reuters.com/business/aerospace-defense/un-aviation-ag=

ency-says-almost-12000-people-affected-by-release-data-2025-01-10/) )

DNC may have had phone snooping tech: Newly analyzed radio wave data colle=

cted by Wired reporters walking around the Democratic National Convention=

found that there is in fact evidence that the DNC had a cell-site simulat=

or in its presence=2C potentially capable of spying on devices that were w=

ithin its geographical range. These so-called "stingray" devices can inter=

cept sensitive data from most devices in its range. The new data analysis=

=E2=80=94 carried out by the EFF =E2=80=94 wasn't conclusive but all sign=

s point to a stingray in use. (via Wired ($) (https://www.wired.com/story/=

2024-dnc-cell-site-simulator-phone-surveillance/) =2C @dmehro (https://x.c=

om/dmehro/status/1877739997391949956) )

~ ~

** THE HAPPY CORNER

------------------------------------------------------------

He says with gusto this week: This is the happy corner! And I think we can=

start with what everyone else is thinking=2C too. It has been a very tryi=

ng couple of weeks.

https://infosec.exchange/@Lockdownyourlife/113808084251374793

But let's try to make the best of it. After all=2C it's the only 2025 we'l=

l ever get. So maybe that impulse purchase =E2=80=94 like this adorable cr=

ocheted dumpster fire =E2=80=94 isn't such a bad thing=2C especially if it=

's going to bring you joy.

https://bsky.app/profile/maggieastor.bsky.social/post/3lfgr5k3etc27

Meanwhile=2C sometimes it really is worth it to meet your heroes=2C like @=

iwriteok (https://bsky.app/profile/iwriteok.bsky.social/post/3lfg4xc4pic2y=

) did this week when meeting the developers of the VLC media player at CES=

=2E VLC was one of the first pieces of software I downloaded from the intern=

et when I got my first Windows computer back in the early '00s. Long live=

VLC! This interaction is wholesome a.f.

https://bsky.app/profile/iwriteok.bsky.social/post/3lfg4xc4pic2y

Absolutely amazing work from @mspecter (https://bsky.app/profile/mspecter.=

bsky.social/post/3lfgf547jls24) and @stellars (https://bsky.app/profile/se=

llars.bsky.social) =2C who reverse-engineered dozens of FTC privacy and se=

curity rulings over the years and identified how these investigations were=

put together and from what sources. This is a real public service; and it=

's been a huge pet peeve of mine that the FTC has brought action against v=

arious firms but seldom credits the people =E2=80=94 often reporters =E2=

=80=94 who do the work that identifies the issue to begin with. The FTC an=

d Independent Reverse Engineering project (https://ftcreverse.engineering/=

) =2C which was presented at ShmooCon (https://bsky.app/profile/sellars.bs=

ky.social/post/3lfggwmh7ts2z) this weekend=2C aims to solve that.

And on that note... I am consumed with FOMO=2C as I can't be at ShmooCon t=

his year (it's final year=2C no less). For those there=2C have an amazing=

time. There's plenty to do and see (https://x.com/dakacki/status/18780803=

47663134958) =2C hijinks (https://bsky.app/profile/rgblights.bsky.social/p=

ost/3lfitgzxmac26) and happy memories (https://bsky.app/profile/k8em0.bsky=

=2Esocial/post/3lfhwlc6tas2q) going round!

If you have good news you want to share=2C get in touch at: this@weekinsec=

urity.com (mailto:this@weekinsecurity.com?subject=3DGood%20news%20for%20yo=

ur%20newsletter) .

~ ~

** CYBER CATS & FRIENDS

------------------------------------------------------------

Ssssshhhhhh.... Zzzz.. zzz... Zzz.... this week's cyber cat.... is... Swee=

tpea... Zzzzz... clearly fast asleep ... thanks so much to Eden K... Zzzzz=

=2E... for sending in! .... Zzzzzz

Sweetpea is a very cute=2C very fluffy grey Russian blue kitty curled up o=

n an office chair on top of a copy of The New York Times.

Keep sending in your cyber cats! (mailto:this@weekinsecurity.com?Subject=

=3DCyber%20Cat%20%28%26%20Friends%29%20submission&Body=3DPlease%20include%=

20a%20JPG%20of%20your%20cyber%20cat%20%28or%20other%20non-feline%20friend%=

29%2C%20their%20name%2C%20and%20also%20your%20name%20and/or%20Twitter%20ha=

ndle%20if%20you%20want%20credit.) (or a non-feline friend). Drop me an ema=

il at any time with their name and a photo=2C and they'll be featured in a=

n upcoming newsletter!

~ ~

** SUGGESTION BOX

------------------------------------------------------------

I won't keep you any longer =E2=80=94 this has already been the longest ne=

wsletter of the year =E2=80=94 go and enjoy your weekend and have a great=

rest of your week.

As always=2C please do drop me an email with any feedback (mailto:this@wee=

kinsecurity.com) or anything for the happy corner. And if you have a cyber=

-cat update=2C I'd love to hear from you!

Catch you next=2C

@zackwhittaker (http://mastodon.social/@zackwhittaker)

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

You are receiving this email because you opted in.

~this week in security~ doesn't track email opens or clicks.

($) indicate sites with paywalls or logins. Please support journalism!

Our mailing address is: ~this week in security~

Zack Whittaker

PO Box 415

Jersey City=2C NJ 07303-0415

USA

You can ** update your preferences (https://social.us18.list-manage.com/pr=

ofile?u=3De1ad6038c994abec17dafb116&id=3Da2457dc8ad&e=3D9d10de3b61&c=3D383b8=

7a85b)

or ** unsubscribe from this list (https://social.us18.list-manage.com/unsu=

bscribe?u=3De1ad6038c994abec17dafb116&id=3Da2457dc8ad&t=3Db&e=3D9d10de3b61&c=

=3D383b87a85b)

=2E

--_----------=_MCPart_2048319155

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

<!doctype html>

<html xmlns=3D"http://www.w3.org/1999/xhtml" xmlns:v=3D"urn:schemas-micros=

oft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">

<head><meta name=3D"twitter:image:src" content=3D"https://gallery.mail=

chimp.com/e1ad6038c994abec17dafb116/images/dfcfdb2e-8ab2-450c-a830-1461d1a=

efb25.png"><meta name=3D"twitter:description" content=3D"Plus: Japan blame=

s years-long hacks on China=2C new Ivanti VPN zero-day under attack=2C a m=

ystery pardon finally solved=2C and more."><meta name=3D"twitter:title" co=

ntent=3D"~this week in security~ january 12 edition"><meta name=3D"twitter=

:card" content=3D"summary_large_image"><meta property=3D"og:type" content=

=3D"article"><meta property=3D"og:description" content=3D"Plus: Japan blam=

es years-long hacks on China=2C new Ivanti VPN zero-day under attack=2C a=

mystery pardon finally solved=2C and more."><meta property=3D"og:image" c=

ontent=3D"https://gallery.mailchimp.com/e1ad6038c994abec17dafb116/images/d=

fcfdb2e-8ab2-450c-a830-1461d1aefb25.png"><meta property=3D"og:title" conte=

nt=3D"~this week in security~ january 12 edition"><meta property=3D"og:url=

" content=3D"http://eepurl.com/i7Gckg">

<!-- NAME: 1 COLUMN -->

<!--[if gte mso 15]>

<xml>

<o:OfficeDocumentSettings>

<o:AllowPNG/>

<o:PixelsPerInch>96</o:PixelsPerInch>

</o:OfficeDocumentSettings>

</xml>

<![endif]-->

<meta charset=3D"UTF-8">

<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">

<meta name=3D"viewport" content=3D"width=3Ddevice-width=2C initial=

-scale=3D1">

<title>this week in security =E2=80=94 january 12 edition</title>

<style type=3D"text/css">

=09=09p{

=09=09=09margin:10px 0;

=09=09=09padding:0;

=09=09}

=09=09table{

=09=09=09border-collapse:collapse;

=09=09}

=09=09h1=2Ch2=2Ch3=2Ch4=2Ch5=2Ch6{

=09=09=09display:block;

=09=09=09margin:0;

=09=09=09padding:0;

=09=09}

=09=09img=2Ca img{

=09=09=09border:0;

=09=09=09height:auto;

=09=09=09outline:none;

=09=09=09text-decoration:none;

=09=09}

=09=09body=2C#bodyTable=2C#bodyCell{

=09=09=09height:100%;

=09=09=09margin:0;

=09=09=09padding:0;

=09=09=09width:100%;

=09=09}

=09=09.mcnPreviewText{

=09=09=09display:none !important;

=09=09}

=09=09#outlook a{

=09=09=09padding:0;

=09=09}

=09=09img{

=09=09=09-ms-interpolation-mode:bicubic;

=09=09}

=09=09table{

=09=09=09mso-table-lspace:0pt;

=09=09=09mso-table-rspace:0pt;

=09=09}

=09=09.ReadMsgBody{

=09=09=09width:100%;

=09=09}

=09=09.ExternalClass{

=09=09=09width:100%;

=09=09}

=09=09p=2Ca=2Cli=2Ctd=2Cblockquote{

=09=09=09mso-line-height-rule:exactly;

=09=09}

=09=09a[href^=3Dtel]=2Ca[href^=3Dsms]{

=09=09=09color:inherit;

=09=09=09cursor:default;

=09=09=09text-decoration:none;

=09=09}

=09=09p=2Ca=2Cli=2Ctd=2Cbody=2Ctable=2Cblockquote{

=09=09=09-ms-text-size-adjust:100%;

=09=09=09-webkit-text-size-adjust:100%;

=09=09}

=09=09.ExternalClass=2C.ExternalClass p=2C.ExternalClass td=2C.ExternalCla=

ss div=2C.ExternalClass span=2C.ExternalClass font{

=09=09=09line-height:100%;

=09=09}

=09=09a[x-apple-data-detectors]{

=09=09=09color:inherit !important;

=09=09=09text-decoration:none !important;

=09=09=09font-size:inherit !important;

=09=09=09font-family:inherit !important;

=09=09=09font-weight:inherit !important;

=09=09=09line-height:inherit !important;

=09=09}

=09=09table[align=3Dleft]{

=09=09=09float:left;

=09=09}

=09=09table[align=3Dright]{

=09=09=09float:right;

=09=09}

=09=09#bodyCell{

=09=09=09padding:10px;

=09=09}

=09=09.templateContainer{

=09=09=09max-width:600px !important;

=09=09}

=09=09a.mcnButton{

=09=09=09display:block;

=09=09}

=09=09.mcnImage=2C.mcnRetinaImage{

=09=09=09vertical-align:bottom;

=09=09}

=09=09.mcnTextContent{

=09=09=09word-break:break-word;

=09=09}

=09=09.mcnTextContent img{

=09=09=09height:auto !important;

=09=09}

=09=09.mcnDividerBlock{

=09=09=09table-layout:fixed !important;

=09=09}

=09=09body=2C#bodyTable{

=09=09=09background-color:#ffffff;

=09=09}

=09=09#bodyCell{

=09=09=09border-top:0;

=09=09}

=09=09.templateContainer{

=09=09=09border:0;

=09=09}

=09=09h1{

=09=09=09color:#202020;

=09=09=09font-family:Helvetica;

=09=09=09font-size:26px;

=09=09=09font-style:normal;

=09=09=09font-weight:bold;

=09=09=09line-height:125%;

=09=09=09letter-spacing:normal;

=09=09=09text-align:left;

=09=09}

=09=09h2{

=09=09=09color:#202020;

=09=09=09font-family:Helvetica;

=09=09=09font-size:22px;

=09=09=09font-style:normal;

=09=09=09font-weight:bold;

=09=09=09line-height:125%;

=09=09=09letter-spacing:normal;

=09=09=09text-align:left;

=09=09}

=09=09h3{

=09=09=09color:#202020;

=09=09=09font-family:Helvetica;

=09=09=09font-size:20px;

=09=09=09font-style:normal;

=09=09=09font-weight:bold;

=09=09=09line-height:125%;

=09=09=09letter-spacing:normal;

=09=09=09text-align:left;

=09=09}

=09=09h4{

=09=09=09color:#202020;

=09=09=09font-family:Helvetica;

=09=09=09font-size:18px;

=09=09=09font-style:normal;

=09=09=09font-weight:bold;

=09=09=09line-height:125%;

=09=09=09letter-spacing:normal;

=09=09=09text-align:left;

=09=09}

=09=09#templatePreheader{

=09=09=09background-color:#ffffff;

=09=09=09background-image:none;

=09=09=09background-repeat:no-repeat;

=09=09=09background-position:center;

=09=09=09background-size:cover;

=09=09=09border-top:0;

=09=09=09border-bottom:0;

=09=09=09padding-top:9px;

=09=09=09padding-bottom:9px;

=09=09}

=09=09#templatePreheader .mcnTextContent=2C#templatePreheader .mcnTextCont=

ent p{

=09=09=09color:#656565;

=09=09=09font-family:Helvetica;

=09=09=09font-size:12px;

=09=09=09line-height:150%;

=09=09=09text-align:left;

=09=09}

=09=09#templatePreheader .mcnTextContent a=2C#templatePreheader .mcnTextCo=

ntent p a{

=09=09=09color:#656565;

=09=09=09font-weight:normal;

=09=09=09text-decoration:underline;

=09=09}

=09=09#templateHeader{

=09=09=09background-color:#ffffff;

=09=09=09background-image:none;

=09=09=09background-repeat:no-repeat;

=09=09=09background-position:center;

=09=09=09background-size:cover;

=09=09=09border-top:0;

=09=09=09border-bottom:0;

=09=09=09padding-top:9px;

=09=09=09padding-bottom:0;

=09=09}

=09=09#templateHeader .mcnTextContent=2C#templateHeader .mcnTextContent p{

=09=09=09color:#202020;

=09=09=09font-family:Helvetica;

=09=09=09font-size:16px;

=09=09=09line-height:150%;

=09=09=09text-align:left;

=09=09}

=09=09#templateHeader .mcnTextContent a=2C#templateHeader .mcnTextContent=

p a{

=09=09=09color:#007C89;

=09=09=09font-weight:normal;

=09=09=09text-decoration:none;

=09=09}

=09=09#templateBody{

=09=09=09background-color:#ffffff;

=09=09=09background-image:none;

=09=09=09background-repeat:no-repeat;

=09=09=09background-position:center;

=09=09=09background-size:cover;

=09=09=09border-top:0;

=09=09=09border-bottom:2px solid #EAEAEA;

=09=09=09padding-top:0;

=09=09=09padding-bottom:9px;

=09=09}

=09=09#templateBody .mcnTextContent=2C#templateBody .mcnTextContent p{

=09=09=09color:#202020;

=09=09=09font-family:Helvetica;

=09=09=09font-size:16px;

=09=09=09line-height:125%;

=09=09=09text-align:left;

=09=09}

=09=09#templateBody .mcnTextContent a=2C#templateBody .mcnTextContent p a{

=09=09=09color:#007C89;

=09=09=09font-weight:normal;

=09=09=09text-decoration:underline;

=09=09}

=09=09#templateFooter{

=09=09=09background-color:#transparent;

=09=09=09background-image:none;

=09=09=09background-repeat:no-repeat;

=09=09=09background-position:center;

=09=09=09background-size:cover;

=09=09=09border-top:0;

=09=09=09border-bottom:0;

=09=09=09padding-top:9px;

=09=09=09padding-bottom:9px;

=09=09}

=09=09#templateFooter .mcnTextContent=2C#templateFooter .mcnTextContent p{

=09=09=09color:#656565;

=09=09=09font-family:Helvetica;

=09=09=09font-size:12px;

=09=09=09line-height:150%;

=09=09=09text-align:center;

=09=09}

=09=09#templateFooter .mcnTextContent a=2C#templateFooter .mcnTextContent=

p a{

=09=09=09color:#656565;

=09=09=09font-weight:normal;

=09=09=09text-decoration:underline;

=09=09}

=09@media only screen and (min-width:768px){

=09=09.templateContainer{

=09=09=09width:600px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09body=2Ctable=2Ctd=2Cp=2Ca=2Cli=2Cblockquote{

=09=09=09-webkit-text-size-adjust:none !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09body{

=09=09=09width:100% !important;

=09=09=09min-width:100% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnRetinaImage{

=09=09=09max-width:100% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnImage{

=09=09=09width:100% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnCartContainer=2C.mcnCaptionTopContent=2C.mcnRecContentContainer=

=2C.mcnCaptionBottomContent=2C.mcnTextContentContainer=2C.mcnBoxedTextCont=

entContainer=2C.mcnImageGroupContentContainer=2C.mcnCaptionLeftTextContent=

Container=2C.mcnCaptionRightTextContentContainer=2C.mcnCaptionLeftImageCon=

tentContainer=2C.mcnCaptionRightImageContentContainer=2C.mcnImageCardLeftT=

extContentContainer=2C.mcnImageCardRightTextContentContainer=2C.mcnImageCa=

rdLeftImageContentContainer=2C.mcnImageCardRightImageContentContainer{

=09=09=09max-width:100% !important;

=09=09=09width:100% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnBoxedTextContentContainer{

=09=09=09min-width:100% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnImageGroupContent{

=09=09=09padding:9px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnCaptionLeftContentOuter .mcnTextContent=2C.mcnCaptionRightConten=

tOuter .mcnTextContent{

=09=09=09padding-top:9px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnImageCardTopImageContent=2C.mcnCaptionBottomContent:last-child .=

mcnCaptionBottomImageContent=2C.mcnCaptionBlockInner .mcnCaptionTopContent=

:last-child .mcnTextContent{

=09=09=09padding-top:18px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnImageCardBottomImageContent{

=09=09=09padding-bottom:9px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnImageGroupBlockInner{

=09=09=09padding-top:0 !important;

=09=09=09padding-bottom:0 !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnImageGroupBlockOuter{

=09=09=09padding-top:9px !important;

=09=09=09padding-bottom:9px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnTextContent=2C.mcnBoxedTextContentColumn{

=09=09=09padding-right:18px !important;

=09=09=09padding-left:18px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnImageCardLeftImageContent=2C.mcnImageCardRightImageContent{

=09=09=09padding-right:18px !important;

=09=09=09padding-bottom:0 !important;

=09=09=09padding-left:18px !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcpreview-image-uploader{

=09=09=09display:none !important;

=09=09=09width:100% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09h1{

=09=09=09font-size:22px !important;

=09=09=09line-height:125% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09h2{

=09=09=09font-size:20px !important;

=09=09=09line-height:125% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09h3{

=09=09=09font-size:18px !important;

=09=09=09line-height:125% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09h4{

=09=09=09font-size:16px !important;

=09=09=09line-height:150% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09.mcnBoxedTextContentContainer .mcnTextContent=2C.mcnBoxedTextContent=

Container .mcnTextContent p{

=09=09=09font-size:14px !important;

=09=09=09line-height:150% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09#templatePreheader{

=09=09=09display:block !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09#templatePreheader .mcnTextContent=2C#templatePreheader .mcnTextCont=

ent p{

=09=09=09font-size:14px !important;

=09=09=09line-height:150% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09#templateHeader .mcnTextContent=2C#templateHeader .mcnTextContent p{

=09=09=09font-size:16px !important;

=09=09=09line-height:150% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09#templateBody .mcnTextContent=2C#templateBody .mcnTextContent p{

=09=09=09font-size:16px !important;

=09=09=09line-height:150% !important;

=09=09}

}=09@media only screen and (max-width: 480px){

=09=09#templateFooter .mcnTextContent=2C#templateFooter .mcnTextContent p{

=09=09=09font-size:14px !important;

=09=09=09line-height:150% !important;

=09=09}

}</style></head>

<body style=3D"height: 100%;margin: 0;padding: 0;width: 100%;-ms-text-=

size-adjust: 100%;-webkit-text-size-adjust: 100%;background-color: #ffffff=

;"><div itemscope=3D"" itemtype=3D"http://schema.org/EmailMessage"><div it=

emprop=3D"publisher" itemscope=3D"" itemtype=3D"http://schema.org/Organiza=

tion"><meta itemprop=3D"name" content=3D"~this week in security~"><link it=

emprop=3D"url" content=3D"https://mastodon.social/@zackwhittaker"></div><d=

iv itemprop=3D"about" itemscope=3D"" itemtype=3D"http://schema.org/Offer">=

<link itemprop=3D"image" href=3D"https://gallery.mailchimp.com/e1ad6038c99=

4abec17dafb116/images/dfcfdb2e-8ab2-450c-a830-1461d1aefb25.png"></div></di=

v>

<!--

-->

<!--[if !gte mso 9]><!----><span class=3D"mcnPreviewText" style=

=3D"display:none; font-size:0px; line-height:0px; max-height:0px; max-widt=

h:0px; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;">Huge=

breach of location data=2C PowerSchool data breach=2C China hack of Treas=

ury deepens=2C and more.</span><!--<![endif]-->

<!--

-->

<center>

<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspa=

cing=3D"0" height=3D"100%" width=3D"100%" id=3D"bodyTable" style=3D"border=

-collapse: collapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-s=

ize-adjust: 100%;-webkit-text-size-adjust: 100%;height: 100%;margin: 0;pad=

ding: 0;width: 100%;background-color: #ffffff;">

<tr>

<td align=3D"center" valign=3D"top" id=3D"bodyCell" st=

yle=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-te=

xt-size-adjust: 100%;height: 100%;margin: 0;padding: 10px;width: 100%;bord=

er-top: 0;">

<!-- BEGIN TEMPLATE // -->

<!--[if (gte mso 9)|(IE)]>

<table align=3D"center" border=3D"0" cellspacing=

=3D"0" cellpadding=3D"0" width=3D"600" style=3D"width:600px;">

<tr>

<td align=3D"center" valign=3D"top" width=3D"600"=

style=3D"width:600px;">

<![endif]-->

<table border=3D"0" cellpadding=3D"0" cellspacing=

=3D"0" width=3D"100%" class=3D"templateContainer" style=3D"border-collapse=

: collapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjus=

t: 100%;-webkit-text-size-adjust: 100%;border: 0;max-width: 600px !importa=

nt;">

<tr>

<td valign=3D"top" id=3D"templatePreheader=

" style=3D"background:#ffffff none no-repeat center/cover;mso-line-height-=

rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;ba=

ckground-color: #ffffff;background-image: none;background-repeat: no-repea=

t;background-position: center;background-size: cover;border-top: 0;border-=

bottom: 0;padding-top: 9px;padding-bottom: 9px;"><table border=3D"0" cellp=

adding=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"mcnTextBlock" style=

=3D"min-width: 100%;border-collapse: collapse;mso-table-lspace: 0pt;mso-ta=

ble-rspace: 0pt;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;=

">

<tbody class=3D"mcnTextBlockOuter">

<tr>

<td valign=3D"top" class=3D"mcnTextBlockInner" style=3D"paddin=

g-top: 9px;mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webki=

t-text-size-adjust: 100%;">

=09<!--[if mso]>

=09=09=09=09<table align=3D"left" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0" width=3D"100%" style=3D"width:100%;">

=09=09=09=09<tr>

=09=09=09=09<![endif]-->

=09=09=09

=09=09=09=09<!--[if mso]>

=09=09=09=09<td valign=3D"top" width=3D"600" style=3D"width:600px;">

=09=09=09=09<![endif]-->

<table align=3D"left" border=3D"0" cellpadding=3D"0" cells=

pacing=3D"0" style=3D"max-width: 100%;min-width: 100%;border-collapse: col=

lapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;float: left;" width=3D"100%" class=3D"mc=

nTextContentContainer">

<tbody><tr>

<td valign=3D"top" class=3D"mcnTextContent" style=

=3D"padding: 0px 18px 9px;font-family: Arial=2C &quot;Helvetica Neue&quot;=

=2C Helvetica=2C sans-serif;font-size: 14px;line-height: 150%;mso-line-hei=

ght-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100=

%;word-break: break-word;color: #656565;text-align: left;">

<h1 class=3D"null" style=3D"text-align: center=

;display: block;margin: 0;padding: 0;color: #202020;font-family: Helvetica=

;font-size: 26px;font-style: normal;font-weight: bold;line-height: 125%;le=

tter-spacing: normal;"><span style=3D"font-size:27px"><span style=3D"color=

:#000000"><strong>~this week in security~</strong></span></span></h1>

<div style=3D"text-align: center;">a cybersecurity newsletter by <a href=

=3D"https://mastodon.social/@zackwhittaker" target=3D"_blank" style=3D"mso=

-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-ad=

just: 100%;color: #656565;font-weight: normal;text-decoration: underline;"=

>@zackwhittaker</a><br>

<br>

<span style=3D"font-size:14px"><strong><span style=3D"text-align:center">v=

olume 8=2C issue 2</span></strong></span><br>

<span style=3D"font-size:12px"><a href=3D"https://mailchi.mp/weekinsecurit=

y/this-week-in-security-january-12-2025-edition?e=3D9d10de3b61" target=3D"_b=

lank" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-w=

ebkit-text-size-adjust: 100%;color: #656565;font-weight: normal;text-decor=

ation: underline;">View this email in your browser</a> | <a href=3D"https:=

//us18.campaign-archive.com/feed?u=3De1ad6038c994abec17dafb116&id=3Da2457d=

c8ad" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-w=

ebkit-text-size-adjust: 100%;color: #656565;font-weight: normal;text-decor=

ation: underline;">RSS</a></span><br>

<br>

~ ~</div>

</td>

</tr>

</tbody></table>

=09=09=09=09<!--[if mso]>

=09=09=09=09</td>

=09=09=09=09<![endif]-->

=09=09=09=09<!--[if mso]>

=09=09=09=09</tr>

=09=09=09=09</table>

=09=09=09=09<![endif]-->

</td>

</tr>

</tbody>

</table></td>

</tr>

<tr>

<td valign=3D"top" id=3D"templateHeader" s=

tyle=3D"background:#ffffff none no-repeat center/cover;mso-line-height-rul=

e: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;backg=

round-color: #ffffff;background-image: none;background-repeat: no-repeat;b=

ackground-position: center;background-size: cover;border-top: 0;border-bot=

tom: 0;padding-top: 9px;padding-bottom: 0;"><table border=3D"0" cellpaddin=

g=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"mcnTextBlock" style=3D"m=

in-width: 100%;border-collapse: collapse;mso-table-lspace: 0pt;mso-table-r=

space: 0pt;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;">

<tbody class=3D"mcnTextBlockOuter">

<tr>

<td valign=3D"top" class=3D"mcnTextBlockInner" style=3D"paddin=

g-top: 9px;mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webki=

t-text-size-adjust: 100%;">

=09<!--[if mso]>

=09=09=09=09<table align=3D"left" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0" width=3D"100%" style=3D"width:100%;">

=09=09=09=09<tr>

=09=09=09=09<![endif]-->

=09=09=09

=09=09=09=09<!--[if mso]>

=09=09=09=09<td valign=3D"top" width=3D"600" style=3D"width:600px;">

=09=09=09=09<![endif]-->

<table align=3D"left" border=3D"0" cellpadding=3D"0" cells=

pacing=3D"0" style=3D"max-width: 100%;min-width: 100%;border-collapse: col=

lapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;float: left;" width=3D"100%" class=3D"mc=

nTextContentContainer">

<tbody><tr>

<td valign=3D"top" class=3D"mcnTextContent" style=

=3D"padding: 0px 18px 9px;font-family: Arial=2C &quot;Helvetica Neue&quot;=

=2C Helvetica=2C sans-serif;font-size: 14px;line-height: 150%;mso-line-hei=

ght-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100=

%;word-break: break-word;color: #202020;text-align: left;">

<h3 style=3D"display: block;margin: 0;padding:=

0;color: #202020;font-family: Helvetica;font-size: 20px;font-style: norma=

l;font-weight: bold;line-height: 125%;letter-spacing: normal;text-align: l=

eft;"><span style=3D"font-size:19px"><span style=3D"font-weight:bolder">TH=

IS WEEK=2C TL;DR</span></span><span style=3D"font-size:16px"><span style=

=3D"font-weight:bolder"> </span></span></h3>

</td>

</tr>

</tbody></table>

=09=09=09=09<!--[if mso]>

=09=09=09=09</td>

=09=09=09=09<![endif]-->

=09=09=09=09<!--[if mso]>

=09=09=09=09</tr>

=09=09=09=09</table>

=09=09=09=09<![endif]-->

</td>

</tr>

</tbody>

</table></td>

</tr>

<tr>

<td valign=3D"top" id=3D"templateBody" sty=

le=3D"background:#ffffff none no-repeat center/cover;mso-line-height-rule:=

exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;backgro=

und-color: #ffffff;background-image: none;background-repeat: no-repeat;bac=

kground-position: center;background-size: cover;border-top: 0;border-botto=

m: 2px solid #EAEAEA;padding-top: 0;padding-bottom: 9px;"><table border=3D=

"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"mcnTextBlo=

ck" style=3D"min-width: 100%;border-collapse: collapse;mso-table-lspace: 0=

pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 100%;-webkit-text-size-adju=

st: 100%;">

<tbody class=3D"mcnTextBlockOuter">

<tr>

<td valign=3D"top" class=3D"mcnTextBlockInner" style=3D"paddin=

g-top: 9px;mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webki=

t-text-size-adjust: 100%;">

=09<!--[if mso]>

=09=09=09=09<table align=3D"left" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0" width=3D"100%" style=3D"width:100%;">

=09=09=09=09<tr>

=09=09=09=09<![endif]-->

=09=09=09

=09=09=09=09<!--[if mso]>

=09=09=09=09<td valign=3D"top" width=3D"600" style=3D"width:600px;">

=09=09=09=09<![endif]-->

<table align=3D"left" border=3D"0" cellpadding=3D"0" cells=

pacing=3D"0" style=3D"max-width: 100%;min-width: 100%;border-collapse: col=

lapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;float: left;" width=3D"100%" class=3D"mc=

nTextContentContainer">

<tbody><tr>

<td valign=3D"top" class=3D"mcnTextContent" style=

=3D"padding: 0px 18px 9px;font-family: Arial=2C &quot;Helvetica Neue&quot;=

=2C Helvetica=2C sans-serif;font-size: 14px;line-height: 150%;mso-line-hei=

ght-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100=

%;word-break: break-word;color: #202020;text-align: left;">

<span style=3D"font-size:15px"><span style=3D"=

font-family:arial=2Chelvetica neue=2Chelvetica=2Csans-serif"><strong><a hr=

ef=3D"https://www.404media.co/hackers-claim-massive-breach-of-location-dat=

a-giant-threaten-to-leak-data/" style=3D"mso-line-height-rule: exactly;-ms=

-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font=

-weight: normal;text-decoration: underline;">Hackers claim massive breach=

of location data from Gravy Analytics</a></strong><br>

<strong>404 Media: </strong>Well=2C it happened =E2=80=94 and it looks lik=

e this could be a big one. A major broker of location data=2C Gravy Analyt=

ics=2C had a data breach that lost an eye-watering amount of location data=

to hackers who raided its AWS account. A sample published on a hacking fo=

rum this week saw somewhere in the region of tens of millions of location=

data points across the world from ordinary users whose phone apps track w=

here they go. This is all thanks to <a href=3D"https://www.eff.org/deeplin=

ks/2025/01/online-behavioral-ads-fuel-surveillance-industry-heres-how" sty=

le=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-tex=

t-size-adjust: 100%;color: #007C89;font-weight: normal;text-decoration: un=

derline;">real-time bidding</a>=2C a process that exploits the ads industr=

y to power the surveillance industry. (Ad-blockers are your friend!) There=

are thousands of apps =E2=80=94 and <em>very</em> popular apps=2C like Ti=

nder=2C Candy Crush=2C and others =E2=80=94 that use bits of code (like SD=

Ks) to display ads in their apps=2C which have a side-effect of allowing b=

rokers to listen in and acquire users' real-time location data=2C which th=

e apps themselves might not even explicitly know about themselves. (The <a=

href=3D"https://www.wsj.com/tech/cybersecurity/how-ads-on-your-phone-can-=

aid-government-surveillance-943bde04" style=3D"mso-line-height-rule: exact=

ly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C8=

9;font-weight: normal;text-decoration: underline;">WSJ</a> has a good prim=

er on how this works.) This data is highly trackable and is a nightmare fo=

r privacy; <a href=3D"https://www.forbes.com/sites/thomasbrewster/2025/01/=

10/gravy-analytics-massive-mobile-location-data-hack-may-have-risked-gay-p=

eoples-safety/" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjus=

t: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font-weight: normal;=

text-decoration: underline;">Forbes ($)</a> also has a look inside the hac=

ked data. Little word yet from the company=2C Gravy=2C except a brief noti=

fication via <a href=3D"https://www.nrk.no/norge/oppdaget-datainnbrudd-da-=

hackeren-tok-kontakt-1.17201694" style=3D"mso-line-height-rule: exactly;-m=

s-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;fon=

t-weight: normal;text-decoration: underline;">Norwegian media</a> =E2=80=

=93 because the law there requires a breach notification. The U.S.=2C mean=

while=2C has no such law. The hackers behind the breach have threatened to=

post more=2C but deleted their forum post... either way=2C this will be a=

major story to keep a close eye on.<br>

<strong>More:</strong> <a href=3D"https://www.404media.co/candy-crush-tind=

er-myfitnesspal-see-the-thousands-of-apps-hijacked-to-spy-on-your-location=

/" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webk=

it-text-size-adjust: 100%;color: #007C89;font-weight: normal;text-decorati=

on: underline;">404 Media</a> | <a href=3D"https://www.nrk.no/norge/oppdag=

et-datainnbrudd-da-hackeren-tok-kontakt-1.17201694" style=3D"mso-line-heig=

ht-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%=

;color: #007C89;font-weight: normal;text-decoration: underline;">NRK.no</a=

> | <a href=3D"https://www.reuters.com/technology/cybersecurity/location-t=

racking-company-unacast-tells-norway-its-data-was-hacked-broadcaster-2025-=

01-11/" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;=

-webkit-text-size-adjust: 100%;color: #007C89;font-weight: normal;text-dec=

oration: underline;">Reuters ($)</a> | <a href=3D"https://www.eff.org/deep=

links/2025/01/online-behavioral-ads-fuel-surveillance-industry-heres-how"=

style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit=

-text-size-adjust: 100%;color: #007C89;font-weight: normal;text-decoration=

: underline;">EFF</a> | <a href=3D"https://x.com/fs0c131y/status/187712899=

9240962290" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 1=

00%;-webkit-text-size-adjust: 100%;color: #007C89;font-weight: normal;text=

-decoration: underline;">@fs0c131y</a> | <a href=3D"https://infosec.exchan=

ge/@josephcox/113800439776792443" style=3D"mso-line-height-rule: exactly;-=

ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;fo=

nt-weight: normal;text-decoration: underline;">@josephcox</a></span></span=

>

</td>

</tr>

</tbody></table>

=09=09=09=09<!--[if mso]>

=09=09=09=09</td>

=09=09=09=09<![endif]-->

=09=09=09=09<!--[if mso]>

=09=09=09=09</tr>

=09=09=09=09</table>

=09=09=09=09<![endif]-->

</td>

</tr>

</tbody>

</table><table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=

00%" class=3D"mcnImageBlock" style=3D"min-width: 100%;border-collapse: col=

lapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;">

<tbody class=3D"mcnImageBlockOuter">

<tr>

<td valign=3D"top" style=3D"padding: 9px;mso-line-height-r=

ule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;" c=

lass=3D"mcnImageBlockInner">

<table align=3D"left" width=3D"100%" border=3D"0" cell=

padding=3D"0" cellspacing=3D"0" class=3D"mcnImageContentContainer" style=

=3D"min-width: 100%;border-collapse: collapse;mso-table-lspace: 0pt;mso-ta=

ble-rspace: 0pt;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;=

float: left;">

<tbody><tr>

<td class=3D"mcnImageContent" valign=3D"top" s=

tyle=3D"padding-right: 9px;padding-left: 9px;padding-top: 0;padding-bottom=

: 0;text-align: center;mso-line-height-rule: exactly;-ms-text-size-adjust:=

100%;-webkit-text-size-adjust: 100%;">

<a href=3D"https://x.com/fs0c131y/stat=

us/1876983147503513800" title=3D"" class=3D"" target=3D"_blank" style=3D"m=

so-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-=

adjust: 100%;">

<img align=3D"middle" alt=3D"Bapti=

ste Robert tweet: &quot;Your mobile apps are sharing your location with co=

mpanies like Gravy Analytics. For instance=2C here are the locations of Ti=

nder users in the UK=2C&quot; followed by a screenshot of the UK map with=

location dots all over it." src=3D"https://mcusercontent.com/e1ad6038c994=

abec17dafb116/images/de8fae83-9272-4e50-bbc6-88af778f4387.jpeg" width=3D"5=

64" style=3D"max-width: 1000px;padding-bottom: 0;display: inline !importan=

t;vertical-align: bottom;border: 0;height: auto;outline: none;text-decorat=

ion: none;-ms-interpolation-mode: bicubic;" class=3D"mcnImage">

</a>

</td>

</tr>

</tbody></table>

</td>

</tr>

</tbody>

</table><table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=

00%" class=3D"mcnTextBlock" style=3D"min-width: 100%;border-collapse: coll=

apse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 100=

%;-webkit-text-size-adjust: 100%;">

<tbody class=3D"mcnTextBlockOuter">

<tr>

<td valign=3D"top" class=3D"mcnTextBlockInner" style=3D"paddin=

g-top: 9px;mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webki=

t-text-size-adjust: 100%;">

=09<!--[if mso]>

=09=09=09=09<table align=3D"left" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0" width=3D"100%" style=3D"width:100%;">

=09=09=09=09<tr>

=09=09=09=09<![endif]-->

=09=09=09

=09=09=09=09<!--[if mso]>

=09=09=09=09<td valign=3D"top" width=3D"600" style=3D"width:600px;">

=09=09=09=09<![endif]-->

<table align=3D"left" border=3D"0" cellpadding=3D"0" cells=

pacing=3D"0" style=3D"max-width: 100%;min-width: 100%;border-collapse: col=

lapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;float: left;" width=3D"100%" class=3D"mc=

nTextContentContainer">

<tbody><tr>

<td valign=3D"top" class=3D"mcnTextContent" style=

=3D"padding: 0px 18px 9px;font-family: Arial=2C &quot;Helvetica Neue&quot;=

=2C Helvetica=2C sans-serif;font-size: 14px;line-height: 150%;mso-line-hei=

ght-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100=

%;word-break: break-word;color: #202020;text-align: left;">

<span style=3D"font-size:15px"><span style=3D"=

font-family:arial=2Chelvetica neue=2Chelvetica=2Csans-serif"><strong><a hr=

ef=3D"https://www.bleepingcomputer.com/news/security/powerschool-hack-expo=

ses-student-teacher-data-from-k-12-districts/" style=3D"mso-line-height-ru=

le: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;colo=

r: #007C89;font-weight: normal;text-decoration: underline;">PowerSchool ha=

ck exposes K-12 student and teachers' personal data</a></strong><br>

<strong>Bleeping Computer: </strong>A major data breach at edtech provider=

PowerSchool saw a hacker steal a ton of sensitive data on students and te=

achers in K-12 districts across North America. PowerSchool is a major prov=

ider of school software=2C used by some 50 million students. The stolen da=

ta includes personal information =E2=80=94 names and addresses =E2=80=94 b=

ut also Social Security numbers=2C some medical data and grades=2C accordi=

ng to a <a href=3D"https://techcrunch.com/2025/01/09/powerschool-says-hack=

ers-stole-students-sensitive-data-including-social-security-numbers-in-dat=

a-breach/" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;color: #007C89;font-weight: normal;text-=

decoration: underline;">leaked FAQ</a>. The company admitted that the hack=

er broke in with a "stolen credential" (<em>sigh!</em>). Looks like the co=

mpany paid the hacker to delete the data=2C but really=2C come on=2C nobod=

y can trust that! <a href=3D"https://databreaches.net/2025/01/10/powerscho=

ol-incident-a-few-resources-for-teachers-parents-and-former-students/" sty=

le=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-tex=

t-size-adjust: 100%;color: #007C89;font-weight: normal;text-decoration: un=

derline;">DataBreaches.net</a> has resources for students and affected tea=

chers and parents alike. Expect data breach disclosures (well=2C at least=

in the U.S. states that <em>require</em> them) to drop in the next few we=

eks and months=2C and there will probably be a fair number of them.<br>

<strong>More:</strong> <a href=3D"https://techcrunch.com/2025/01/09/powers=

chool-says-hackers-stole-students-sensitive-data-including-social-security=

-numbers-in-data-breach/" style=3D"mso-line-height-rule: exactly;-ms-text-=

size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font-weigh=

t: normal;text-decoration: underline;">TechCrunch</a> | <a href=3D"https:/=

/old.reddit.com/r/k12sysadmin/comments/1hw1m3x/so_powerschool_had_a_breach=

/" style=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webk=

it-text-size-adjust: 100%;color: #007C89;font-weight: normal;text-decorati=

on: underline;">Reddit /r/k12sysadmin</a><br>

<br>

<strong><a href=3D"https://apnews.com/article/japan-police-cyberattack-chi=

na-government-68adcb293b2931da4c30ca0279720124" style=3D"mso-line-height-r=

ule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;col=

or: #007C89;font-weight: normal;text-decoration: underline;">Japan links C=

hinese hacker MirrorFace to dozens of cyberattacks</a></strong><br>

<strong>Associated Press: </strong>Japan blamed a China-backed hacking gro=

up called MirrorFace for being behind dozens of cyberattacks targeting the=

Japanese government and tech companies across the country in a multi-year=

hacking spree since 2019. MirrorFace sent emails with malware and targete=

d VPNs to get access to internal networks. It's the latest warning about J=

apan's cybersecurity posture of late; in 2023=2C <a href=3D"https://bsky.a=

pp/profile/ellenwapo.bsky.social" style=3D"mso-line-height-rule: exactly;-=

ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;fo=

nt-weight: normal;text-decoration: underline;">@ellenwapo</a> reported tha=

t China <a href=3D"https://www.washingtonpost.com/national-security/2023/0=

8/07/china-japan-hack-pentagon/" style=3D"mso-line-height-rule: exactly;-m=

s-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;fon=

t-weight: normal;text-decoration: underline;">hacked</a> some of Japan's m=

ost sensitive networks =E2=80=94 to a point where the U.S.=2C a major ally=

of Japan=2C was getting reeeeally concerned with its <em>own</em> secrets=

=2E<br>

<strong>More:</strong> <a href=3D"https://www.npa.go.jp/bureau/cyber/koho/=

caution/caution20250108.html" style=3D"mso-line-height-rule: exactly;-ms-t=

ext-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font-w=

eight: normal;text-decoration: underline;">NPA.go.jp</a> | <a href=3D"http=

s://english.kyodonews.net/news/2025/01/3de655117007-210-hacks-made-on-jaxa=

-other-japan-targets-by-china-group-since-2019.html" style=3D"mso-line-hei=

ght-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100=

%;color: #007C89;font-weight: normal;text-decoration: underline;">Kyodo Ne=

ws</a> | <a href=3D"https://techcrunch.com/2025/01/08/japan-says-chinese-h=

ackers-targeted-its-government-and-tech-companies-for-years/" style=3D"mso=

-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-ad=

just: 100%;color: #007C89;font-weight: normal;text-decoration: underline;"=

>TechCrunch</a><br>

<br>

<strong><a href=3D"https://www.cnn.com/2025/01/10/politics/chinese-hackers=

-breach-committee-on-foreign-investment-in-the-us/index.html" style=3D"mso=

-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-ad=

just: 100%;color: #007C89;font-weight: normal;text-decoration: underline;"=

>China hackers targeted Treasury's CFIUS office in December breach</a></st=

rong><br>

<strong>CNN: </strong>Speaking of China... looks like we have another memb=

er of <a href=3D"https://techcrunch.com/2024/10/13/meet-the-chinese-typhoo=

n-hackers-preparing-for-war/" style=3D"mso-line-height-rule: exactly;-ms-t=

ext-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font-w=

eight: normal;text-decoration: underline;">the Typhoon family</a> to add t=

o our bingo card. Silk Typhoon (previously Hafnium =E2=80=94 yes =E2=80=94=

of <em>that</em> <a href=3D"https://techcrunch.com/2021/03/10/america-sma=

ll-business-hafnium-exchange-hacks/" style=3D"mso-line-height-rule: exactl=

y;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89=

;font-weight: normal;text-decoration: underline;">mass email hacking fame<=

/a>) is back with a <a href=3D"https://www.bloomberg.com/news/articles/202=

5-01-08/white-house-rushes-to-finish-cyber-order-after-china-hacks" style=

=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-=

size-adjust: 100%;color: #007C89;font-weight: normal;text-decoration: unde=

rline;">new campaign</a> targeting the U.S. Treasury. It started with a De=

cember breach of a BeyondTrust private key that allowed remote access to T=

reasury employee workstations and unclassified documents. Then=2C the Trea=

sury's <a href=3D"https://www.washingtonpost.com/national-security/2025/01=

/01/treasury-hack-china/" style=3D"mso-line-height-rule: exactly;-ms-text-=

size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font-weigh=

t: normal;text-decoration: underline;">OFAC office</a> for imposing financ=

ial sanctions was hacked; and now CNN reports that CFIUS =E2=80=94 in <em>=

more</em> acronym salad =E2=80=94 the committee that assesses foreign inve=

stments and transactions for national security risks=2C was also targeted=

by the Chinese hackers. CISA also <a href=3D"https://content.govdelivery.=

com/accounts/USDHSCISA/bulletins/3cafdc4" style=3D"mso-line-height-rule: e=

xactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #0=

07C89;font-weight: normal;text-decoration: underline;">said</a> this week=

it doesn't think there's any other department=2C other than the Treasury=

=2C affected by this particular campaign... but didn't say how it came to=

that conclusion.<br>

<strong>More:</strong> <a href=3D"https://content.govdelivery.com/accounts=

/USDHSCISA/bulletins/3cafdc4" style=3D"mso-line-height-rule: exactly;-ms-t=

ext-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font-w=

eight: normal;text-decoration: underline;">CISA</a> | <a href=3D"https://w=

ww.bloomberg.com/news/articles/2025-01-08/white-house-rushes-to-finish-cyb=

er-order-after-china-hacks" style=3D"mso-line-height-rule: exactly;-ms-tex=

t-size-adjust: 100%;-webkit-text-size-adjust: 100%;color: #007C89;font-wei=

ght: normal;text-decoration: underline;">Bloomberg ($)</a> | <a href=3D"ht=

tps://www.theregister.com/2025/01/10/china_treasury_foreign_investment/" s=

tyle=3D"mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webkit-t=

ext-size-adjust: 100%;color: #007C89;font-weight: normal;text-decoration:=

underline;">The Register</a></span></span>

</td>

</tr>

</tbody></table>

=09=09=09=09<!--[if mso]>

=09=09=09=09</td>

=09=09=09=09<![endif]-->

=09=09=09=09<!--[if mso]>

=09=09=09=09</tr>

=09=09=09=09</table>

=09=09=09=09<![endif]-->

</td>

</tr>

</tbody>

</table><table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=

00%" class=3D"mcnTextBlock" style=3D"min-width: 100%;border-collapse: coll=

apse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 100=

%;-webkit-text-size-adjust: 100%;">

<tbody class=3D"mcnTextBlockOuter">

<tr>

<td valign=3D"top" class=3D"mcnTextBlockInner" style=3D"paddin=

g-top: 9px;mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webki=

t-text-size-adjust: 100%;">

=09<!--[if mso]>

=09=09=09=09<table align=3D"left" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0" width=3D"100%" style=3D"width:100%;">

=09=09=09=09<tr>

=09=09=09=09<![endif]-->

=09=09=09

=09=09=09=09<!--[if mso]>

=09=09=09=09<td valign=3D"top" width=3D"600" style=3D"width:600px;">

=09=09=09=09<![endif]-->

<table align=3D"left" border=3D"0" cellpadding=3D"0" cells=

pacing=3D"0" style=3D"max-width: 100%;min-width: 100%;border-collapse: col=

lapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;float: left;" width=3D"100%" class=3D"mc=

nTextContentContainer">

<tbody><tr>

<td valign=3D"top" class=3D"mcnTextContent" style=

=3D"padding: 0px 18px 9px;font-family: Arial=2C &quot;Helvetica Neue&quot;=

=2C Helvetica=2C sans-serif;font-size: 14px;line-height: 150%;mso-line-hei=

ght-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100=

%;word-break: break-word;color: #202020;text-align: left;">

<div style=3D"text-align: center;">~ ~</div>

</td>

</tr>

</tbody></table>

=09=09=09=09<!--[if mso]>

=09=09=09=09</td>

=09=09=09=09<![endif]-->

=09=09=09=09<!--[if mso]>

=09=09=09=09</tr>

=09=09=09=09</table>

=09=09=09=09<![endif]-->

</td>

</tr>

</tbody>

</table><table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"1=

00%" class=3D"mcnTextBlock" style=3D"min-width: 100%;border-collapse: coll=

apse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 100=

%;-webkit-text-size-adjust: 100%;">

<tbody class=3D"mcnTextBlockOuter">

<tr>

<td valign=3D"top" class=3D"mcnTextBlockInner" style=3D"paddin=

g-top: 9px;mso-line-height-rule: exactly;-ms-text-size-adjust: 100%;-webki=

t-text-size-adjust: 100%;">

=09<!--[if mso]>

=09=09=09=09<table align=3D"left" border=3D"0" cellspacing=3D"0" cellpaddi=

ng=3D"0" width=3D"100%" style=3D"width:100%;">

=09=09=09=09<tr>

=09=09=09=09<![endif]-->

=09=09=09

=09=09=09=09<!--[if mso]>

=09=09=09=09<td valign=3D"top" width=3D"600" style=3D"width:600px;">

=09=09=09=09<![endif]-->

<table align=3D"left" border=3D"0" cellpadding=3D"0" cells=

pacing=3D"0" style=3D"max-width: 100%;min-width: 100%;border-collapse: col=

lapse;mso-table-lspace: 0pt;mso-table-rspace: 0pt;-ms-text-size-adjust: 10=

0%;-webkit-text-size-adjust: 100%;float: left;" width=3D"100%" class=3D"mc=

nTextContentContainer">

<tbody><tr>

<td valign=3D"top" class=3D"mcnTextContent" style=

=3D"padding: 0px 18px 9px;font-family: Arial=2C &quot;Helvetica Neue&quot;=

=2C Helvetica=2C sans-serif;font-size: 14px;line-height: 150%;mso-line-hei=

ght-rule: exactly;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100=

%;word-break: break-word;color: #202020;text-align: left;">