A recent Windows update has caused a bug that triggers BitLocker recovery mode on affected devices, risking data loss if users lack the recovery key. The issue primarily impacts Windows 10 and 11 versions on Intel devices with Connected Standby support, but Microsoft is rolling out a fix, with some organizations needing to deploy it manually.
A United Airlines flight from Newark to Los Angeles was diverted to Chicago due to a security issue, possibly involving a bomb threat. Passengers were evacuated and a suspicious bag was found, leading to questioning of a passenger. The FBI stated that there is no ongoing threat to the public, and the passengers were eventually boarded onto another plane bound for Los Angeles.
Wyze camera owners experienced a security issue that allowed some users to see thumbnails of cameras that were not their own in the Events tab, following an outage caused by an Amazon Web Services problem. The company has confirmed the issue, identified 14 incidents, and taken down the Events tab. Wyze is notifying affected users, forcibly logging out recent app users to reset tokens, and investigating the cause to prevent future occurrences. This incident comes after Wyze's previous handling of a security flaw in its Wyze Cam v1 model, which was not disclosed to customers or fixed until three years later.
Wyze cameras experienced a security issue where at least a dozen users were able to see thumbnails of cameras that were not their own in the Events tab, allowing them to briefly see into a stranger's property. This occurred after an AWS outage caused server overload and corrupted user data. Wyze has taken down the Events tab, added an extra layer of verification, and is force logging out all users who have used the Wyze app to reset tokens. The company is currently identifying affected users and plans to notify them, as well as all Wyze users, about the incident. This is the second time a Wyze error has allowed strangers to briefly peek inside others' homes, raising concerns about privacy and security.
Wyze Labs is investigating a security issue and experiencing a service outage due to an AWS connectivity problem, causing camera and login issues. The company is working to resolve the problem and advised customers to reboot or power-cycle impacted devices. The "Events" tab in the Wyze app has been temporarily disabled while investigating a possible security issue, which may be related to some customers reporting seeing other users' video feeds.
A tool called TeamsPhisher has been developed by a member of the U.S. Navy's red team to exploit an unresolved security issue in Microsoft Teams, allowing attackers to bypass file-sending restrictions and deliver malware from external accounts. The tool automates the attack process and requires users to have a Microsoft Business account. The issue has not been fixed by Microsoft, and organizations are advised to disable communications with external tenants or create an allow-list with trusted domains to mitigate the risk.