November 2024 Newsletter

Dec 18

🦃🦃🦃 [Nov 2024 Newsletter]

40 days left in the year. Are you ready for 2025?

We're sending out the newsletter early this month (and next) and keeping it brief because, let's face it, no one wants to look at their inbox next week. So, whatever your plans next week, enjoy some time off! You might even deserve it 😉

In this edition:

Holidays in Hollywood
Refresh 2025
Stephen @ BSides Philly

IN THE NEWS

⚖️ Government & Regulation

Texas is prepping for AI legislation in 2025 with TRAIGA, the Texas Responsible AI Governance Act, which aims to promote transparency. Colorado did it first though
Canada bans TikTok operations due to national security concerns, but the app is still available

⚔️ Hacks and Attacks

Muah.ai, an AI companion site, lost “a massive database of users' interactions with their chatbots” thanks to a hack and the results aren't pretty
DocuSign became the unintentional conveyor of phishing attempts when hackers started using the Envelopes API to mass-send fake invoices
ChatGPT launched a real-time voice API, and researchers immediately used it to commit financial scams

📖 Technical Deep Dives

Want to bypass those pesky password requirements? Just make your username 52 characters long

🏆 Wins for the Good Guys

Remember when AT&T, TicketMaster, and others were breached through Snowflake accounts? Well, Canada arrested Alexander ‘Connor’ Moucka (aka UNC5537) in Ontario
Operation Synergia II is a public-private collaboration success!

ready to party?

I'll just leave this here…

Psst…If you forgot to RSVP, reply to this email!

refresh 2025

This year, we've been hard at work refining who we are and where we're headed. The result? In 2025, we’re launching a brand-new website experience designed to make your interactions with us easier, faster, and more intuitive.

Stay tuned.

Stephen Bondurich is taking the stage to reveal some of his social engineering playbook at BSides Philly on December 6 at Live! Casino & Hotel Philadelphia.