Archive for June 5, 2025

Interlock ransomware gang claims Kettering Health breach, leaks stolen data

Posted in Commentary with tags on June 5, 2025 by itnerd

News has surfaced that the Interlock ransomware gang has claimed a recent cyberattack on the Kettering Health:

This morning, ransomware gang Interlock has posted Kettering Health to its data leak site. It alleges to have stolen 941 GB of data, which includes 732,490 files across 20,418 folders and appears to contain ID cards, payment data, financial reports, and more.

Roger Grimes, Data-Driven Defense Evangelist at KnowBe4 has provided the following commentary:

“After any successful cyberattack, as an impacted victim I’m wondering two things (beyond just how the current breach has impacted my current privacy and personal risk). One, does the victim company know how the intruders gained unauthorized access to their systems? Was it social engineering (very likely), unpatched software or firmware (second most likely), or some other initial root access issue. Because if they don’t know how it happened, they can’t begin to take steps to stop it from happening (at least the same way). Second, what steps are being taken to reduce my current risk from the breach (i.e., am I getting some free protective services) and how can I be assured it won’t happen again (related to the first question). Because if I can’t be reassured it won’t happen again, I’m less likely to remain a customer.”

Another non-trivial health care breach with lots of stolen data that affects a whole lot of people. This is unfortunately becoming close to normal. And it should not be. The world really needs this to change and change quickly.

A Weird Mail Bug Is Hitting Users Of iOS 18.5

Posted in Commentary with tags on June 5, 2025 by itnerd

Yesterday, I had something weird happen to me. Or more accurately my iPhone. While using the Mail app, I had my mail disappear and the Mail app behave strangely. As in I could go into it but sometimes if I clicked on an email account, it would not respond. I tried force quitting Mail but that didn’t fix it. So I just rebooted my iPhone and then it worked fine. Until an hour ago where the same thing happened to me.

So using the logic of “once is a fluke and two or more times is a pattern” I figured that this must be a bug of some sort. Thus I went to  Reddit and the Apple Support Community to see if I was alone in having this issue. Unsurprisingly I found I was not alone.

Reading through the posts in both places, I can see the following:

  • This is not specific to any iPhone type.
  • This appears to be specific to iOS 18.5
  • This only started happening in the last few days

Clearly this is a bug that Apple has to be seeing. The question is, when are they going to fix it? I hope that Apple releases iOS 18.5.1 to fix this soon. But who knows if they will do that. In the meantime, be prepared to reboot your phone if you encounter this. Not the best mitigation, but it’s all that’s available at the moment.

Clark County, WA notifies 76K people of data breach that compromised SSNs, payment cards, and more

Posted in Commentary with tags on June 5, 2025 by itnerd

The Clark County, WA government this week confirmed it notified 76,253 people of an October 2023 data breach that compromised names, SSNs, financial account info, payment card info, medical and health insurance info, government-issued ID numbers, and DOBs. 

In a blog post reporting this news, Paul Bischoff, Consumer Privacy Advocate at Comparitech, wrote:

“Comparitech researchers logged 85 confirmed ransomware attacks on US government entities in 2023, compromising more than 1 million records. In 2024, those figures increased to 94 attacks and 2.5 million records. So far in 2025, we’ve recorded 27 attacks compromising 8,550 records. The average ransom demand across all these attacks is $1.8 million.”

“Other recent such attacks include those on the city of Durant, OK and the OmniRide bus service in Virginia. In 2025 to date, ransomware gangs have claimed responsibility for another 30 unconfirmed attacks that haven’t been acknowledged by the targeted organizations.”

This isn’t a trivial breach as that’s a lot of people who have just had some really sensitive information leaked. This underscores the need to do everything possible to prevent these events from occuring.

Bell Media Implementing LiveRamp’s Authenticated Traffic Solution

Posted in Commentary with tags , on June 5, 2025 by itnerd

Environics Analytics (EA) announced today that Bell Media has joined the growing list of publishers who are implementing LiveRamp’s Authenticated Traffic Solution (ATS) as a secure way of bringing identity and addressability to the Canadian media ecosystem.

In a first for the Canadian industry, Bell Media will begin by implementing Authenticated Traffic Solution on Connected TV. Bell Media Connected TV delivers tailored ads to TV audiences, across its premium linear and Video on Demand (VOD) content on CTV, CTV2, and Noovo, as well as a selection of English and French speciality channels. By implementing ATS, Bell Media enhances programmatic TV buying with privacy-first signals, enabling advertisers to target audiences more precisely than ever.

LiveRamp is the world’s leading data collaboration partner. Its Authenticated Traffic Solution (ATS) leverages RampID, LiveRamp’s durable identifier, to help maintain flexibility and scale across digital marketing. Advertisers can connect their own RampID-enabled first-party data to publishers’ authenticated inventory in a privacy-forward manner. RampID allows advertisers to find audiences everywhere they want, including directly from publishers, through open exchanges, in private marketplaces, and on every channel and browser.

By using ATS, Bell Media can also integrate interoperable identity solutions including The Trade Desk’s Unified ID 2.0, Yahoo’s ConnectID, and Google’s Publisher Advertiser Identity Reconciliation (PAIR).

LiveRamp’s exclusive Canadian partnership with EA, announced in May 2024, enables EA customers to use LiveRamp’s data collaboration network, as well as clean room technology, to reach RampID-enabled audiences wherever they are spending time in the media ecosystem including thousands of publishers and platforms that have implemented Authenticated Traffic Solution in Canada and around the world.

The Ultimate Father’s Day Tech Gifts He Actually Wants

Posted in Commentary with tags , , , on June 5, 2025 by itnerd

Father’s Day is right around the corner, and whether he’s deep-cleaning the den, heading out for a run, or settling in for a backyard movie night — here are some gift ideas that suit every kind of dad.

Below is a curated roundup of functional, thoughtful, and cool tech products from Anker Innovations’ family of brands — all available across Amazon.ca, Anker, Soundcore, Eufy, and Nebula.

🔋For Dads On-the-Go

Because he needs to power through playlists, podcasts, and summer plans.

Anker Nano Power Bank – $69.99

For the dad who’s always traveling or running on 5%: this ultra-fast charging bank powers laptops, phones, and tablets with up to 30W output and a smart display. It’s sleek, compact, and MacBook-ready.

Available in black on Amazon and Anker.com.

soundcore AeroClip – $179.99

Stylish, open-ear clip-on earbuds with ultra-clear calls, wind-resistant mics, and 24-hour battery life. Adaptive comfort meets award-winning design distinction from Red Dot. Designed to relieve in-ear discomfort, soundcore AeroClip open-ear clip-on earbuds let you enjoy music pressure-free for every indoor and outdoor venture.

Available in black, pink, white on Amazon and Soundcore.com.

soundcore AeroFit 2 – $129.99

Comfort-first, open-ear headphones with LDAC Hi-Res wireless audio, 42 hours of playtime, and noise-filtered mic clarity. Featuring 4-level rotatable ear hooks, a soundcore exclusive, AeroFit 2 ensures a comfortable fit tailored for every ear, big or small for you to wear all day pressure-free.

Available in black and mint green on Amazon and Soundcore.com.

Liberty 5 – $139.99

Stronger voice reduction, real-time adaptive noise cancellation, and immersive sound with Dolby Audio, fast-charging, and up to 12 hours of playback on a single charge and up to 48 hours with the case in normal mode. 

Available in black and white on Amazon and Soundcore.com.

🏡For Dads Who Keep It Clean (or Wish They Did)

Powerful robot vacuums for the dad who loves a smart home flex.

eufy Robot Vacuum Omni E28 – $1,499.99

Eufy’s most powerful vacuum yet, the E28 features 20,000 Pa Turbo Suction for professional-grade deep cleaning on carpets and hard floors. Its HydroJet™ System keeps the mop clean in real-time with dual reservoirs and a dual-scraper structure, while the FlexiOne™ Portable Deep Cleaner (the industry’s first) detaches to tackle stairs, upholstery, and more — all from the fully automated Omni Station.

For the dad who wants spotless floors, not sore backs. Available via Eufy.com and Amazon.ca.

🎥 For Dads Who Deserve a Break

Movie nights, backyard projections, sports in 4K clarity, or even just getting a peaceful night’s rest.

Nebula X1 – $3,999.99 (limited offer: get an accesssory bag valued at $1,2999 for free before June 20)

4K triple-laser resolution, 3,500 ANSI lumens, and Dolby Vision — no dongle needed. Immersive 4.1.2 surround sound with bundle option takes you a cinema-grade experience at home.

Available via Amazon and Nebula.com.

soundcore Sleep A20

Award-winning design from Red Dot, get a full night of peaceful sleep with an equipped 4-point noise masking system, noise blocking, sound masking, and smart volume control to prevent unwanted noise. Get sleep analytics to improve sleep quality. Ideal for side sleepers. Ultra-long playtime on sleep mode with 14 hours of battery life. 

Available in black and white on Amazon and Soundcore.com

🏡 For the Dads Who Want Peace of Mind

Eufy FamiLock S3 – $479.99

Give Dad the gift of next-level home security. This all-in-one smart lock combines a 2K HD night-vision camera, 150° wide-angle video doorbell, and smart lock with real-time alerts. Unlocking is seamless with Palm Vein Recognition offering 99.99999% accuracy, plus 3-in-1 keyless entry via fingerprint, app, keypad, or voice. Built-in Wi-Fi means no hub required, and the IP65 waterproof rating makes it ideal for any entry point. A dual power supply system offers up to 5 months of battery life with 4 AAA backup batteries for added reliability. Perfect for Dad’s garage, workshop, or front door. Available on Amazon and Eufy.com.

eufy SoloCam S340 – $259.99

For the dad who likes to keep a watchful eye, this solar-powered security cam offers ultra-clear 3K dual-camera resolution with up to 8× zoom, perfect for spotting package deliveries or unexpected visitors up to 50 feet away. With 360° pan coverage and dual views, Dad gets the full picture and key details in a single frame.

Setup takes just five minutes with its compact, wire-free design, and thanks to the removable solar panel, it’s always charged — no hardwiring or battery swaps needed. Local storage means no monthly fees, ever. Peace of mind for backyard grilling or cottage season. Available on Amazon and Eufy.com.

874% VPN Demand Surge in France After Pornhub Withdraws Their “Services”

Posted in Commentary with tags on June 5, 2025 by itnerd

vpn Mentor just published a report about an increase of VPN demand in France following the European Commission’s Digital Services Act requirements of age verification resulting in some adult sites geo-blocking users from the country.

Their research team conducted an analysis of user demand data in France after PornHub, YouPorn and RedTube geo-blocked the country and they observed a significant surge of 874% in VPN demand after they restricted access from within the country.

You’ll find all the details to their findings here: https://www.vpnmentor.com/news/france-vpn-surge/

Darktrace Unpacks ClickFix Social Engineering Based Attacks

Posted in Commentary with tags on June 5, 2025 by itnerd

Darktrace researchers have uncovered multiple attacks using ‘ClickFix’ social engineering techniques, in which threat actors trick users with fake error messages or verification prompts to execute malicious commands.  

In one recent incident, Darktrace observed threat actors using this technique to quietly steal data from an infected device. After gaining access, they connected to a remote server to begin executing commands. The device then downloaded a harmful file designed to dig deeper into the system and collect sensitive information, which was then exfiltrated to a malicious server. About ten minutes later, the device contacted another rare and suspicious server linked to past ClickFix campaigns – signaling the final stage of automated data theft. 

You can read the blog post here: Unpacking ClickFix: Darktrace’s detection of a prolific social engineering tactic

Major data leak exposes over 4 billion user records

Posted in Commentary with tags on June 5, 2025 by itnerd

The Cybernews research team, in collaboration with cybersecurity researcher Bob Dyachenko, has uncovered a major data leak in China. A huge, 631 gigabytes-strong database was left without a password, publicizing mind-boggling 4 billion records.

The database consisted of numerous collections, containing from half a million to over 800 million records from various sources. The Cybernews research team believes the dataset was meticulously gathered and maintained for building comprehensive behavioral, economic, and social profiles of nearly any Chinese citizen.

Key research takeaways:

The database was quickly taken down, preventing researchers from identifying its owners. Before removal, the team accessed 16 separate data collections:

  • 805 million records in a dataset labeled “wechatid_db” — likely user identifiers from WeChat, China’s largest messaging and payments app.
  • 780 million records in “address_db” — containing residential information with geographic data, potentially revealing where users live.
  • 630 million records in “bank” — included financial data, such as names, phone numbers, payment card numbers, and birth dates.
  • 610 million records in a dataset translated as “three-factor checks” — likely tied to real-name identification, combining user IDs, phone numbers, and usernames.
  • 577 million records in “wechatinfo” — believed to contain WeChat metadata, communication logs, or conversations.
  • 300 million records in “zfbkt_db” — related to Alipay, containing card and token information; plus 20 million more records in a separate dataset with additional Alipay-linked financial data.
  • 353 million records were spread across nine more collections, covering topics such as gambling history, vehicle registration, employment, pension funds, and insurance data.
  • One dataset, tw_db, appears to focus on Taiwan-specific information, raising concerns of potential geopolitical surveillance.

Leak significance

The implications of this breach are far-reaching. Skilled attackers could identify where individuals live, their financial habits, debts, and even savings. With such comprehensive personal data, threat actors could launch highly targeted phishing attacks, commit identity or insurance fraud, or even engage in coercion or blackmail.

This lack of attribution means that affected individuals have no way of knowing their data was compromised, nor any channel to seek remediation.

To read the full research report, please click here.