Cyber Security Week in Review (Feb. 1)
Summary: Apple revoked a set of developer tools from Facebook after a program came to light in which Facebook paid users to install a VPN on their mobile devices and tracked their habits through it, and Apple temporarily disabled group FaceTime while fixing a vulnerability that could let an attacker listen through a device's microphone without the user answering. The U.S. filed criminal charges against Huawei, including an indictment accusing it of attempting to steal trade secrets from T-Mobile and another saying it worked to bypass American sanctions against Iran.
What's compelling: A group of 2.2 billion login credentials is circulating among hacking groups, and Imperva says it stopped a DDoS attack that crossed 500 million packets per second - both are reminders that credential reuse and raw traffic volume remain live exposure for any organization.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026