Your weekly top 5 technical and security issues Nerds should pay attention to: This new malware uses remote overlay attacks to hijack your bank account. In case it isn’t obvious, both the Remote Access Trojan and the malicious software installation is prevented 100% with zero trust controls. This high-profile eCrime group operates multiple ransomware families…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Attacks Aimed at Disrupting the Trickbot Botnet. It is worth noting, that DTTS (Don’t Talk To Strangers) *never* allows any Trickbot-infected computer to reach the authors’ controllers. IRS Use of Cell Phone Location Data Hits ‘Legal Gray Area’ (1). U.S. Customs and…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Microsoft’s Azure AD authentication outage: What went wrong. It’s been a rough week for Microsoft users who have first- and third-party apps that rely on Azure Active Directory for authentication. Microsoft has published a root-cause analysis of its issues. Russia’s Fancy Bear…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: One of this year’s most severe Windows bugs is now under active exploit. For the third week in a row, this makes it to our top 5. That’s how bad ZeroLogon is. Remember, in seconds, an unauthenticated user can change Active Directory…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: ZOOM finally supports 2FA natively. Many of us have been using Single Sing-on by using Google logins and MFA-protecting such accounts, but now zoom.us offers it natively on their own accounts, supporting both SMS and several 2FA apps. Billions of devices vulnerable to new…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Zerologon attack lets hackers take over enterprise networks. Or smaller networks. Or any Active Directory that isn’t patched. If an environment carries the risk of a potential implant attack, additional preventive measures of zero trust are a must. Equinix data center giant…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Facebook complains, Apple responds: iOS 14’s big privacy change gets postponed. The company says the change is still coming, but it hasn’t said when. Gives developers time to adjust to asking for permission. Typosquatting Intensifies Ahead of US Election. Mistyped URLs can…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: U.S. indicts Russian for attempted ransomware attack on Tesla factory. Instead of accepting a million dollar bribe for using employee access to assist in the attack, the employee reported it to the FBI. Chinese-Made Smartphones Are Secretly Stealing Money From People Around…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Microsoft Put Off Fixing Zero Day for 2 Years. Steve Gibson weighs in on Security Now Episode #780 as well. Really not surprising that Red Teams (adversary emulators that test your defenses) have been so successful of late on any windows network. Google fixes…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: The Secret SIMs Used By Criminals to Spoof Any Number. A must-read. However, it isn’t that difficult to spoof a number right from your mobile without a special SIM card. A cursory search finds us Spoofcard, Spooftel, Spoofbox, Spoof my Phone, all of which have free…
Details
