SN 794: Cicada - Ongoing WordPress Attack, RCS Gets End-to-End Encryption

Published: Nov. 25, 2020, 1:30 a.m.

Ongoing WordPress attack, RCS gets End-to-end encryption.

  • Chrome moves to release 87.
  • Explicit Publication of Privacy Practices.
  • Firefox 83 gets HTTPS-only Mode.
  • Mozilla seeks consultation on implementing DNS-over-HTTPS.
  • The comical announcement strategy of the Egregor Ransomware.
  • Large-scale attacks targeting Epsilon Framework Themes in WordPress.
  • Cybercrime gang installs hidden e-commerce stores on WordPress sites.
  • 245,000 Windows systems still vulnerable to BlueKeep RDP bug.
  • Google's Rich Communication Services is getting E2EE via Signal.
  • Cicada, a Chinese state-sponsored advanced persistent threat group.

We invite you to read our show notes at https://www.grc.com/sn/SN-794-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors: