<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>Comments on: Cyber security news September 2023</title>
	<atom:link href="http://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/</link>
	<description>All about electronics and circuit design</description>
	<lastBuildDate>Tue, 14 Apr 2026 16:08:24 +0000</lastBuildDate>
		<sy:updatePeriod>hourly</sy:updatePeriod>
		<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.9.14</generator>
	<item>
		<title>By: myc.news</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1815620</link>
		<dc:creator><![CDATA[myc.news]]></dc:creator>
		<pubDate>Fri, 13 Oct 2023 11:18:47 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1815620</guid>
		<description><![CDATA[A very good post. Thanks to the author. 
Don&#039;t miss also the latest news : According to the October 13 UK Defense Intelligence Review, British military intelligence suggests that the &quot;lull&quot; in massive missile strikes on Ukraine, which has lasted for three weeks, may be due to Russia&#039;s expectation of new missile deliveries.
Read the full article here: https://myc.news/]]></description>
		<content:encoded><![CDATA[<p>A very good post. Thanks to the author.<br />
Don&#8217;t miss also the latest news : According to the October 13 UK Defense Intelligence Review, British military intelligence suggests that the &#8220;lull&#8221; in massive missile strikes on Ukraine, which has lasted for three weeks, may be due to Russia&#8217;s expectation of new missile deliveries.<br />
Read the full article here: <a href="https://myc.news/" rel="nofollow">https://myc.news/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1815118</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Fri, 06 Oct 2023 04:26:27 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1815118</guid>
		<description><![CDATA[T-Mobile users say other people’s account information is appearing in their app / T-Mobile customers are reportedly seeing other customers’ sensitive data, including contact numbers, device IDs, and credit card information when logging into their own accounts.
https://www.theverge.com/2023/9/20/23881825/t-mobile-account-security-breach-customer-information-leak?fbclid=IwAR3HJtisF3ttCVzmf2FAot-GFk4CiZhUmZnKjDHz-IlyaZHcM2weWw9tcLE

There’s some weirdness happening over at T-Mobile this morning. Multiple T-Mobile customers on X (formerly Twitter) and Reddit have reported that they’re able to see other users’ account data — including their current credit balance, purchase history, credit card information, and home address — when signing into their own T-Mobile accounts.

Some T-Mobile customers have mentioned seeing information from several other accounts, but the scale of the issue isn’t yet clear. It’s prevalent enough that the T-Mobile subreddit has asked its users to avoid posting any further information for “security reasons.”

T-Mobile later blamed the issue on a “technology update” glitch and said the problem had been fixed as of Wednesday afternoon. “There was no cyberattack or breach at T-Mobile. This was a temporary system glitch related to a planned overnight technology update involving limited account information for fewer than 100 customers, which was quickly resolved,” T-Mobile spokesperson Tara Darrow said in a statement emailed to The Verge.

The company has already had multiple security lapses this year, disclosing two separate cybersecurity attacks in January and May.]]></description>
		<content:encoded><![CDATA[<p>T-Mobile users say other people’s account information is appearing in their app / T-Mobile customers are reportedly seeing other customers’ sensitive data, including contact numbers, device IDs, and credit card information when logging into their own accounts.<br />
<a href="https://www.theverge.com/2023/9/20/23881825/t-mobile-account-security-breach-customer-information-leak?fbclid=IwAR3HJtisF3ttCVzmf2FAot-GFk4CiZhUmZnKjDHz-IlyaZHcM2weWw9tcLE" rel="nofollow">https://www.theverge.com/2023/9/20/23881825/t-mobile-account-security-breach-customer-information-leak?fbclid=IwAR3HJtisF3ttCVzmf2FAot-GFk4CiZhUmZnKjDHz-IlyaZHcM2weWw9tcLE</a></p>
<p>There’s some weirdness happening over at T-Mobile this morning. Multiple T-Mobile customers on X (formerly Twitter) and Reddit have reported that they’re able to see other users’ account data — including their current credit balance, purchase history, credit card information, and home address — when signing into their own T-Mobile accounts.</p>
<p>Some T-Mobile customers have mentioned seeing information from several other accounts, but the scale of the issue isn’t yet clear. It’s prevalent enough that the T-Mobile subreddit has asked its users to avoid posting any further information for “security reasons.”</p>
<p>T-Mobile later blamed the issue on a “technology update” glitch and said the problem had been fixed as of Wednesday afternoon. “There was no cyberattack or breach at T-Mobile. This was a temporary system glitch related to a planned overnight technology update involving limited account information for fewer than 100 customers, which was quickly resolved,” T-Mobile spokesperson Tara Darrow said in a statement emailed to The Verge.</p>
<p>The company has already had multiple security lapses this year, disclosing two separate cybersecurity attacks in January and May.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814772</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:15:46 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814772</guid>
		<description><![CDATA[VULNERABILITIESmacOS 14 Sonoma Patches 60 Vulnerabilities
macOS 14 Sonoma has been officially released by Apple and the latest version of the operating system patches over 60 vulnerabilities.
https://www.securityweek.com/macos-14-sonoma-patches-60-vulnerabilities/]]></description>
		<content:encoded><![CDATA[<p>VULNERABILITIESmacOS 14 Sonoma Patches 60 Vulnerabilities<br />
macOS 14 Sonoma has been officially released by Apple and the latest version of the operating system patches over 60 vulnerabilities.<br />
<a href="https://www.securityweek.com/macos-14-sonoma-patches-60-vulnerabilities/" rel="nofollow">https://www.securityweek.com/macos-14-sonoma-patches-60-vulnerabilities/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814771</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:15:30 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814771</guid>
		<description><![CDATA[IOT SECURITYMisconfigured TeslaMate Instances Put Tesla Car Owners at Risk
Attackers can find tons of information on Tesla cars and their drivers by searching for misconfigured TeslaMate instances online.
https://www.securityweek.com/misconfigured-teslamate-instances-put-tesla-car-owners-at-risk/

Misconfigured TeslaMate instances can leak tons of data on the internet, potentially exposing Tesla cars and their drivers to malicious attacks, IoT security intelligence firm Redinent reports.

A third-party data logging application, TeslaMate relies on the Tesla API to retrieve various types of information about Tesla cars, making it available to users on their computers.

While the application is a great tool for keeping track of car data, it also poses a significant risk if improperly configured, Redinent has discovered.]]></description>
		<content:encoded><![CDATA[<p>IOT SECURITYMisconfigured TeslaMate Instances Put Tesla Car Owners at Risk<br />
Attackers can find tons of information on Tesla cars and their drivers by searching for misconfigured TeslaMate instances online.<br />
<a href="https://www.securityweek.com/misconfigured-teslamate-instances-put-tesla-car-owners-at-risk/" rel="nofollow">https://www.securityweek.com/misconfigured-teslamate-instances-put-tesla-car-owners-at-risk/</a></p>
<p>Misconfigured TeslaMate instances can leak tons of data on the internet, potentially exposing Tesla cars and their drivers to malicious attacks, IoT security intelligence firm Redinent reports.</p>
<p>A third-party data logging application, TeslaMate relies on the Tesla API to retrieve various types of information about Tesla cars, making it available to users on their computers.</p>
<p>While the application is a great tool for keeping track of car data, it also poses a significant risk if improperly configured, Redinent has discovered.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814769</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:14:24 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814769</guid>
		<description><![CDATA[https://www.securityweek.com/stolen-github-credentials-used-to-push-fake-dependabot-commits/]]></description>
		<content:encoded><![CDATA[<p><a href="https://www.securityweek.com/stolen-github-credentials-used-to-push-fake-dependabot-commits/" rel="nofollow">https://www.securityweek.com/stolen-github-credentials-used-to-push-fake-dependabot-commits/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814768</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:14:04 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814768</guid>
		<description><![CDATA[https://www.securityweek.com/firefox-118-patches-high-severity-vulnerabilities/]]></description>
		<content:encoded><![CDATA[<p><a href="https://www.securityweek.com/firefox-118-patches-high-severity-vulnerabilities/" rel="nofollow">https://www.securityweek.com/firefox-118-patches-high-severity-vulnerabilities/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814767</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:13:44 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814767</guid>
		<description><![CDATA[New GPU Side-Channel Attack Allows Malicious Websites to Steal Data
GPUs from AMD, Apple, Arm, Intel, Nvidia and Qualcomm are vulnerable to a new type of side-channel attack named GPU.zip.
https://www.securityweek.com/new-gpu-side-channel-attack-allows-malicious-websites-to-steal-data/]]></description>
		<content:encoded><![CDATA[<p>New GPU Side-Channel Attack Allows Malicious Websites to Steal Data<br />
GPUs from AMD, Apple, Arm, Intel, Nvidia and Qualcomm are vulnerable to a new type of side-channel attack named GPU.zip.<br />
<a href="https://www.securityweek.com/new-gpu-side-channel-attack-allows-malicious-websites-to-steal-data/" rel="nofollow">https://www.securityweek.com/new-gpu-side-channel-attack-allows-malicious-websites-to-steal-data/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814766</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:13:29 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814766</guid>
		<description><![CDATA[Chinese Gov Hackers Caught Hiding in Cisco Router Firmware
The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently hop around the corporate networks of U.S. and Japanese companies.
https://www.securityweek.com/chinese-gov-hackers-caught-hiding-in-cisco-router-firmware/]]></description>
		<content:encoded><![CDATA[<p>Chinese Gov Hackers Caught Hiding in Cisco Router Firmware<br />
The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently hop around the corporate networks of U.S. and Japanese companies.<br />
<a href="https://www.securityweek.com/chinese-gov-hackers-caught-hiding-in-cisco-router-firmware/" rel="nofollow">https://www.securityweek.com/chinese-gov-hackers-caught-hiding-in-cisco-router-firmware/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814765</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:13:06 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814765</guid>
		<description><![CDATA[VULNERABILITIESGoogle Rushes to Patch New Zero-Day Exploited by Spyware Vendor
Google has rushed to patch a new Chrome zero-day vulnerability, tracked as CVE-2023-5217 and exploited by a spyware vendor. 
https://www.securityweek.com/google-rushes-to-patch-new-zero-day-exploited-by-spyware-vendor/]]></description>
		<content:encoded><![CDATA[<p>VULNERABILITIESGoogle Rushes to Patch New Zero-Day Exploited by Spyware Vendor<br />
Google has rushed to patch a new Chrome zero-day vulnerability, tracked as CVE-2023-5217 and exploited by a spyware vendor.<br />
<a href="https://www.securityweek.com/google-rushes-to-patch-new-zero-day-exploited-by-spyware-vendor/" rel="nofollow">https://www.securityweek.com/google-rushes-to-patch-new-zero-day-exploited-by-spyware-vendor/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2023/09/01/cyber-security-news-september-2023/comment-page-7/#comment-1814762</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Mon, 02 Oct 2023 11:12:02 +0000</pubDate>
		<guid isPermaLink="false">https://www.epanorama.net/newepa/?p=194492#comment-1814762</guid>
		<description><![CDATA[Russian Zero-Day Acquisition Firm Offers $20 Million for Android, iOS Exploits
Russian zero-day acquisition firm Operation Zero is now offering $20 million for full Android and iOS exploit chains.
https://www.securityweek.com/russian-zero-day-acquisition-firm-offers-20-million-for-android-ios-exploits/]]></description>
		<content:encoded><![CDATA[<p>Russian Zero-Day Acquisition Firm Offers $20 Million for Android, iOS Exploits<br />
Russian zero-day acquisition firm Operation Zero is now offering $20 million for full Android and iOS exploit chains.<br />
<a href="https://www.securityweek.com/russian-zero-day-acquisition-firm-offers-20-million-for-android-ios-exploits/" rel="nofollow">https://www.securityweek.com/russian-zero-day-acquisition-firm-offers-20-million-for-android-ios-exploits/</a></p>
]]></content:encoded>
	</item>
</channel>
</rss>
