2021

This week’s massive Facebook outage that was felt across all it’s platforms including Instagram and WhatsApp and lasted over six hours was likely caused by a faulty configuration change on the backbone routers that coordinate network traffic between data centers. It took so long to revive the service because the outage also disabled Facebook’s internal tools and systems used for daily operations.

Google’s Threat Analysis Group found that threat actors have recently used a new trick of code signing to avoid detection on Windows systems and have notified Microsoft of their findings. OpenSUpdater operations had used legitimate code-signing certificates. The hackers used invalid signature—edited with an End of Content marker replacing a NULL tag. While some security products detect this as invalid—Windows operating systems treated the signatures as valid. https://www.securityweek.com/google-says-threat-actors-using-new-code-signing-tricks-evade-detection

Cyber criminals are flocking to the GENESIS marketplace, a one-stop shop for login credentials, cookies, device fingerprints, website vulnerabilities and other sensitive data on Hackers’ wish list. The invite-only market has become an important tool for hackers to carry out their attacks. The site offers personal data stolen from breaches to world-wide companies and organizations. Genesis is easy to use, hosted on the regular internet and has a modern interface unlike the dark web markets that require special software and payment in obscure cryptocurrencies.