Weekly Cyber Security News 20/05/2022

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24.

I have a strange bunch this week, the first is a really disturbing crypto mugging which I really hope does not become a new trend:

• Crypto thief threatened to cut man’s fingers “one by one,” stole £34K

Once again EV vehicle security has been shown to be a bit week. OK, an unlikely attack but not beyond the realms of impossible:

• Hackers can steal your Tesla Model 3, Y using new Bluetooth attack

While this attack surface might be technically challenging to pull off (for now), it does pose the question do we need these features on all the time?:

• iPhones Vulnerable to Attack Even When Turned Off – Wireless features Bluetooth, NFC and UWB stay on even when the device is powered down, which could allow attackers to execute pre-loaded malware.