364: Apple REFUSES to pay $1 Million Bounty! (Plus, WWDC Updates!)

Technado

Get ready for a lot of opinions on this week’s Technado - Apple’s WWDC 2024 is underway, and we have some thoughts. In other breaking news, Black Basta threat actors may have exploited a Windows 0-day, and Fortinet has patched multiple vulnerabilities in FortiOS. And WWDC isn’t the only Apple news this week: the tech giant is refusing to pay a $1 million bounty to Kaspersky labs for some iOS zero-days.

After our Apple tirade, we cover some malicious VSCode extensions with MILLIONS of downloads. Then, we take a look at not one, but TWO 4chan data leaks of some major companies: the New York Times and Disney.

Following a quick break, we say hello to an old friend in this week’s D’oh! Segment: it’s LastPass! The company essentially DoS’ed themselves thanks to a faulty Chrome extension. We also have yet another Recall update - Windows heard the call for better security, and they’re responding by…making Recall an opt-in feature.

Next up, a new ransomware variant dubbed ‘Fog’ that’s targeting US businesses, and NY is introducing mobile IDs to replace physical ones. To wrap up the episode, British semiconductor giant Arm is warning customers about a use-after-free bug.

Want to read further? Check out the articles we covered this week:

https://thehackernews.com/2024/06/black-basta-ransomware-may-have.html
https://www.securityweek.com/fortinet-patches-code-execution-vulnerability-in-fortios/
https://www.engadget.com/apple-intelligence-ai-ios-18-and-the-biggest-announcements-at-wwdc-2024-184422501.html
https://gbhackers.com/apple-kaspersky-zero-days/
https://www.bleepingcomputer.com/news/security/malicious-vscode-extensions-with-millions-of-installs-discovered/
https://www.bleepingcomputer.com/news/security/new-york-times-source-code-stolen-using-exposed-github-token/
https://www.bleepingcomputer.com/news/security/club-penguin-fans-breached-disney-confluence-server-stole-25gb-of-data/
https://www.bleepingcomputer.com/news/security/lastpass-says-12-hour-outage-caused-by-