• 33 Posts
  • 262 Comments
Joined 7 months ago
cake
Cake day: June 5th, 2025

help-circle
  • The warning refers to Operation ShadowHammer, a sophisticated supply chain attack mounted in 2018 by Chinese state-sponsored hackers

    […]

    The attack was uncovered in January 2019 and Asus released a patch by March the same year.

    It was already patched ~7 years ago, but CISA only warns now?

    While over 1 million Asus users might have downloaded the backdoored utility, the hackers were reportedly interested in only around 600 specific devices, based on hashed MAC addresses hardcoded in various versions of the tool.

    Per Binding Operational Directive (BOD) 22-01, federal agencies have three weeks to identify vulnerable products in their environments and address the issue.

    The hackers targeted this to 600 devices then waited 7 years and expected the targets won’t upgrade this app? This sounds strange, or I’m misunderstanding something.




  • This was a thing for ages. Before NFC payment became common they added covers to ATM holes:

    So when you retrieve your cash at a machine you could be already skimmed there. And if you pay with cash you can get counterfeit notes as change… If you see the world this way you can’t really do anything, bad guys are everywhere. Use a bit of common sense, check your balance frequently, and disable your card if you see something fishy.