Risky Bulletin: US warns of AI-assisted attacks against Siemens PLCs
Summary
This episode covers CISA and FBI warnings about AI-driven attacks on Siemens PLCs, a major data breach of Latvian citizens, and a supply chain compromise of Rust libraries linked to North Korea. Other stories include malicious Firefox extensions, phishing campaigns targeting security researchers, and a new Android Trojan affecting Ukrainian banks. The bulletin also details exploits in Zimbra and GitLab, a novel CDN DDoS technique, and Cloudflare’s updated protections against Spectre CPU vulnerabilities.
Topics discussed
Introduction and episode headlines
CISA warns of AI-aided attacks on Siemens PLCs
Latvia road traffic agency data breach
Supply chain attack on Rust libraries
Malicious Firefox extensions removed
Phishing campaign targeting security researchers
Phishing toolkit enrolling attacker passkeys
Manik Android Trojan targeting Ukraine
Source code links Chinese firm to Great Firewall
Exploitation of patched Zimbra vulnerability
Recent GitLab vulnerability exploitation
CDN tsunami DDoS technique discovered
Cloudflare Spectre vulnerability protections
Listen ad-free on Castria