The New Oil

The New Oil

@thenewoil.org

Practical #privacy and simple #cybersecurity for everyone. Articles posted =/= endorsement/agreement. This account no longer monitored. Please contact us […] 🌉 bridged from ⁂ https://mastodon.thenewoil.org/@thenewoil, follow @ap.brid.gy to interact

615 followers0 following1.4K posts

The New Oil
@thenewoil.org

Hackers hijack #Convertr #analytics script to steal payment card data https://www.bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data/ #cybersecurity #eCommerce #finance #PersonalFinance

bleepingcomputer.comHackers hijack Convertr analytics script to steal payment card data A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout.
The New Oil
@thenewoil.org

#Microsoft releases #Windows OOB updates to distrust #eMudhra certificates https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-oob-updates-to-distrust-emudhra-certificates/ #cybersecurity

bleepingcomputer.comMicrosoft releases Windows OOB updates to distrust eMudhra certificates Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates.
The New Oil
@thenewoil.org

French Court’s Site-Blocking Orders Drive #Quad9 Out Of #France https://www.eff.org/deeplinks/2026/10/french-courts-site-blocking-orders-drive-quad9-out-france #cybersecurity #DNS #privacy

eff.orgFrench Court’s Site-Blocking Orders Drive Quad9 Out Of FranceA nonprofit service that protects internet users’ privacy is leaving France. Quad9, a free DNS resolver, has said it will reluctantly stop serving users in France on November 24. This follows a French court order that Quad9 must block access to websites that are accused of infringing the copyrights...
The New Oil
@thenewoil.org

#Apple backports #CoreGraphics zero-day patches to older iPhones https://www.bleepingcomputer.com/news/apple/apple-backports-coregraphics-zero-day-patches-to-older-iphones/ #cybersecurity #iPhone

bleepingcomputer.comApple backports CoreGraphics zero-day patches to older iPhones (BleepingComputer)​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices.
The New Oil
@thenewoil.org

#Energy giant #ENGIE discloses #DataBreach affecting customers https://www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/ #France #cybersecurity #privacy

bleepingcomputer.comEnergy giant ENGIE discloses data breach affecting customers (BleepingComputer)French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
The New Oil
@thenewoil.org

#CISA confirms #PHP2Shell vulnerabilities now exploited in attacks https://www.bleepingcomputer.com/news/security/cisa-confirms-php2shell-vulnerabilities-now-exploited-in-attacks/ #cybersecurity #PHP

bleepingcomputer.comCISA confirms PHP2Shell vulnerabilities now exploited in attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
The New Oil
@thenewoil.org

Former pentester used #ARTEX #AI to steal 8.2 million data records https://www.bleepingcomputer.com/news/security/former-pentester-used-artex-ai-to-steal-82-million-data-records/ #cybersecurity #privacy #DataBreach #cybercrime #SouthKorea

bleepingcomputer.comFormer pentester used ARTEX AI to steal 8.2 million data records South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks.
The New Oil
@thenewoil.org

Lessons Learned From ' #AdFection ' and What To Do Next https://www.eff.org/deeplinks/2026/10/lessons-learned-adfection #privacy #cybersecurity #malware #advertising #AdBlocking #AdBlocker

eff.orgLessons Learned From 'AdFection' and What To Do NextLast week, researchers at Citizen Lab revealed a horrifying new malware campaign, dubbed “AdFection.” It used an ad network to distribute spyware to journalist’s devices to infect them without the target ever needing to click anything. This sort of attack on journalists is dangerous and incredibly...
The New Oil
@thenewoil.org

#CA shutdown puts #Java, containers, and security appliances in the certificate crosshairs https://www.infoworld.com/article/4239637/ca-shutdown-puts-java-containers-and-appliances-in-the-certificate-crosshairs.html #cybersecurity #eMudhra #PKI

infoworld.comCA shutdown puts Java, containers, and security appliances in the certificate crosshairsAs eMudhra decides to exit the global SSL/TLS market, browser updates will block affected certificate chains, but developers may still need to patch Java environments and other infrastructure that relies on separate trust stores.
The New Oil
@thenewoil.org

The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans https://www.wired.com/story/the-us-government-is-hiding-a-secret-court-ruling-about-how-it-spies-on-americans/ #FISA #privacy #surveillance #FISC #Section702

wired.comThe US Government Is Hiding a Secret Court Ruling About How It Spies on AmericansTwo US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
The New Oil
@thenewoil.org

#BlackX #UEFI #bootkit exploits #BatonDrop flaw to bypass #SecureBoot https://www.bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/ #cybersecurity

bleepingcomputer.comBlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot (BleepingComputer)A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere …
The New Oil
@thenewoil.org

Abandoned #PopcornTime app exposed millions of devices to RCE attacks https://www.bleepingcomputer.com/news/security/abandoned-popcorn-time-app-exposed-millions-of-device-to-rce-attacks/ #cybersecurity

bleepingcomputer.comAbandoned Popcorn Time app exposed millions of device to RCE attacks (BleepingComputer)Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to …
The New Oil
@thenewoil.org

Two States Can Now Restrict #SocialMedia Access—Here’s What To Do Next https://www.eff.org/deeplinks/2026/10/two-states-can-now-restrict-social-media-access-heres-what-do-next #privacy #AgeVerification #Georgia #Florida #cyberscurity #SocialMediaBan #guide

eff.orgTwo States Can Now Restrict Social Media Access—Here’s What To Do NextLast week, two federal appeals courts issued opinions that will allow Florida and Georgia to start enforcing laws that will age-gate and block young people from accessing social media. The laws do not adequately respect minors’ rights to play, speak, and learn online. More fundamentally, these laws...