Video Episode: https://www.youtube.com/watch?v=BFFQvTA12sk
In today’s episode, we discuss Apple’s new “inactivity reboot” feature in iOS 18.1 that enhances security by automatically restarting iPhones after periods of idleness, making it more difficult for law enforcement and cybercriminals to access encrypted data. We also cover the emergence of GoIssue, a sophisticated phishing tool targeting GitHub developers, and North Korean hackers using trojanized Flutter apps to bypass macOS security measures. Lastly, we review the FBI and CISA’s advisory revealing the most exploited vulnerabilities of 2023, highlighting crucial security concerns for organizations.
Sources:
1. https://www.bleepingcomputer.com/news/security/iphones-now-auto-restart-to-block-access-to-encrypted-data-after-long-idle-times/
2. https://thehackernews.com/2024/11/new-phishing-tool-goissue-targets.html
3. https://www.bleepingcomputer.com/news/security/north-korean-hackers-create-flutter-apps-to-bypass-macos-security/
4. https://www.bleepingcomputer.com/news/security/fbi-cisa-and-nsa-reveal-most-exploited-vulnerabilities-of-2023/
Music: https://youtu.be/B4gk5tWMvyY?si=q_JjohozMBH7XPNe
1. What are today’s top cybersecurity news stories?
2. How do iPhones auto-restart to protect encrypted data?
3. What is the GoIssue phishing tool and how does it target GitHub developers?
4. How are North Korean hackers using Flutter apps to bypass macOS security?
5. What vulnerabilities were most exploited in 2023 according to the FBI and NSA?
6. What new security features were introduced in iOS 18.1?
7. What impact does GoIssue have on developer security?
8. How do North Korean threat actors disguise malware in legitimate applications?
9. What steps can organizations take to mitigate top exploited vulnerabilities?
10. What trends are emerging in cybersecurity threats for developers and organizations?