Plus, an airline hack, an Apple bug, media safety in Europe, and a $35 million safety penalty.
This week, in one of many greatest leaks in videogame historical past, a GTAForums person by the identify of “teapotuberhacker” posted 90 movies from a check construct of Grand Theft Auto 6. Gameplay scenes embody a waffle store theft, some Vice Metropolis areas, and two playable characters. The clips have been shared and ultimately made their manner onto YouTube, Twitter, Reddit, and different websites. The hacker additionally claims to have stolen GTA 5 and 6 supply code.
“Based on the data obtainable,” mentioned Avast Safety Evangelist Luis Corrons, “the attacker belongs to the prison group Lapsus$, recognized for compromising huge tech firms reminiscent of Microsoft, Nvidia, Samsung, and, extra not too long ago, Uber. This group suffered quite a lot of arrests a couple of months again, however it’s clear a few of their members are nonetheless at giant. Hopefully not for lengthy.” Rockstar Video games confirmed the hack, and the FBI continues to analyze. For extra on this story, see PC Gamer.
Shaky-cam bug in iPhone 14 Professional
Apple says will probably be releasing a repair subsequent week for a bug in iPhone 14 Professional and Professional Max fashions the place the footage taken with the rear digicam shakes uncontrollably when used together with a third-party platform, reminiscent of Snapchat or TikTok. “We’re conscious of the difficulty and a repair shall be launched subsequent week,” an Apple spokesman instructed CNN. With a beginning worth of $999, the Professional fashions function the primary 48 MP digicam in addition to a number of different new options. The units are in such excessive demand that Apple needed to cut back manufacturing of its commonplace iPhone 14 in an effort to make extra Professional fashions, in accordance with current tweets from an Apple analyst.
European Media Freedom Act safeguards independence
Final week, the European Fee adopted the European Media Freedom Act, a algorithm centered on defending impartial media within the EU. The Act prevents authorities entities from interfering in editorial choices, safeguards in opposition to surveillance, and creates a brand new impartial European Board for Media Companies, to be full of nationwide media authorities. It places a concentrate on the secure funding of public service media and requires the transparency of media possession and the allocation of state promoting. Learn the total press launch for extra particulars.
Morgan Stanley pays $35M safety penalty
On Tuesday, Morgan Stanley agreed to pay $35 million to the Securities and Change Fee (SEC) as penalty for information safety lapses together with the improper disposal of 1000’s of arduous drives containing buyer information. A few of the arduous drives have been resold on public sale web sites with out the information having been wiped first. Based on the SEC, information for 15 million prospects was uncovered in what was an “in depth failure” over a five-year interval. The safety lapses have been first found when an IT marketing consultant in Oklahoma contacted Morgan Stanley to say he had simply bought a drive that occurred to have their prospects’ information on it. Get the total story at Ars Technica.
American Airways hack exposes worker information
In a “Discover of Safety Incident” despatched to staff, American Airways acknowledged a cyberattack that put their crew members’ private info in danger. “The private info concerned on this incident could have included your identify, date of start, mailing deal with, cellphone quantity, e mail deal with, driver’s license quantity, passport quantity, and/or sure medical info you supplied,” the disclosure learn. An American Airways senior supervisor commented that the breach started with a phishing marketing campaign that resulted within the publicity of “a really small variety of prospects’ and staff’ private info.” For extra, see Cyberscoop.
This week’s must-read on the Avast weblog
Roughly a 3rd of all linked medical units have insecure defaults, reminiscent of no or weak password safety or poor software program design, that make them ripe for exploits. Here is what you are able to do to maintain your medical units secure.
