Risky Bulletin: Expired credit cards can be used for malicious transactions
Summary
This episode covers a critical Visa NFC vulnerability allowing transactions with expired cards, alongside state-sponsored cyberattacks on UK power plants and South Korea’s presidential office. It details major data breaches at SFR, Sick Kids Hospital, and Apollo Global Management, plus a $1.7 million crypto theft from Maya Protocol. Other topics include an Indian scammer’s arrest, AI-driven exploit spikes, novel malware techniques, Microsoft’s code signing updates, and TikTok’s $400 million child privacy settlement.
Topics discussed
Introduction and episode headlines
Attack using expired Visa cards for NFC payments
Iranian hackers shut down UK power plant
Lazarus Group hacks South Korean presidential office
Data breaches at French Telecom SFR and Sick Kids Hospital
Breaches at Apollo Global Management and Maya Protocol
Charges against Indian national for elderly scams
AI-driven spike in proof-of-concept exploit code
Malware using FTP banners as command and control
Android malware infecting smart car head units
Microsoft code signing infrastructure update warning
TikTok settles child privacy lawsuit for $400M
Listen ad-free on Castria