A week in security (September 16 – September 22)

Last week on Malwarebytes Labs: "Simply staggering" surveillance conducted by social media and streaming services, FTC finds Tor anonymity compromised by law enforcement. Is it still safe to use? Walmart customers scammed via fake shopping lists, threatened with arrest Snapchat wants to put your...

“Simply staggering” surveillance conducted by social media and streaming services, FTC finds

The US Federal Trade Commission FTC released a report that examines the data collection and use practices of major social media and video streaming services, finding that—and this will not come as a surprise to our regular readers—the companies engaged in vast surveillance of consumers in order t...

Sharing Netflix, Disney+, other passwords is illegal, according to new guidance

The Intellectual Property Office IPO, the UK government body overseeing intellectual property rights in the UK, has quietly released new guidance on piracy and online counterfeit goods. This campaign is a joint effort between IPO and Meta, Facebooks parent company. The general issue on piracy is...

Spoiler Alert: Your Favorite Content Might Not Be Secure

Securing intellectual property in the age of consolidation Rapid7, of course, is not in the entertainment industry. However, we have worked with some clients out there in that golden land of dreams and enchantment—also known as Hollywood. Case in point: the company formerly known as Discovery, In...

LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data

Multiple campaigns that distributed trojanized and typosquatted packages on the NPM open source repository have been identified as the work of a single threat actor dubbed LofyGang. Checkmarx said it discovered 199 rogue packages totaling thousands of installations, with the group operating for...

Every ISP in the US Must Block These 3 Pirate Streaming Services

The 96 internet service providers were told to enforce the orders “by any technological means available.”...

Anonymous hacked Russian TV and streaming services with Ukraine war footage

By Waqas According to Anonymous, three Russian-state TV channels, Russia 24, Moscow 24, and Channel One and two Netflix-like Russian… This is a post from HackRead.com Read the original post: Anonymous hacked Russian TV and streaming services with Ukraine war footage...

CVE-2019-20464

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...

The Internet Didn't Break. Now What?

Even though it was only November, it seems like an eternity ago that Akamai CEO Tom Leighton discussed the then-forthcoming "streaming explosion" on Variety's "Strictly Business" podcast. Tom spoke with Variety Co-Editor-in-Chief Andrew Wallenstein about the upcoming launches of streaming service...

What the Jetflicks and iStreamItAll Takedowns Mean for Piracy

In a sweeping indictment, the feds came down hard on two unauthorized streaming services that allegedly crossed a very important line...

Critical Flaws Found in Widely Used IPTV Software for Online Streaming Services

Security researchers have discovered multiple critical vulnerabilities in a popular IPTV middleware platform that is currently being used by more than a thousand regional and international online media streaming services to manage their millions of subscribers. Discovered by security researchers ...

Critical Flaws Found in Widely Used IPTV Software for Online Streaming Services

Security researchers have discovered multiple critical vulnerabilities in a popular IPTV middleware platform that is currently being used by more than a thousand regional and international online media streaming services to manage their millions of subscribers. Discovered by security researchers ...

Traffic Management for Peace of Mind

Ensure Quality of Experience and Readiness with CDN Capacity Overflow Have you ever planned and launched a system with painstaking detail and, at some point in time, something unexpected breaks the system? An unexpected event might be an unanticipated scenario a bug! or user adoption beyond...

Western Digital's WD TV Live SMP/Hub - Privilege Escalation

Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of its user interface and limited remote...

Western Digital TV (WD-TV) Live Remote Code Execution

Exploit for windows platform in category remote exploits Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allo...

As SOPA Looms, Survey Suggests Most Americans Are Media Pirates – And Proud Of It

While lawmakers in the U.S. debate new laws that would give media companies powerful new legal weapons to stop the distribution of copyrighted content online, a new survey of Americans finds that most admit to having pirated content themselves – and don’t see any problem with it. The survey of...