Your weekly top 5 technical and security issues Nerds should pay attention to: One of this year’s most severe Windows bugs is now under active exploit. For the third week in a row, this makes it to our top 5. That’s how bad ZeroLogon is. Remember, in seconds, an unauthenticated user can change Active Directory…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: ZOOM finally supports 2FA natively. Many of us have been using Single Sing-on by using Google logins and MFA-protecting such accounts, but now zoom.us offers it natively on their own accounts, supporting both SMS and several 2FA apps. Billions of devices vulnerable to new…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Zerologon attack lets hackers take over enterprise networks. Or smaller networks. Or any Active Directory that isn’t patched. If an environment carries the risk of a potential implant attack, additional preventive measures of zero trust are a must. Equinix data center giant…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Facebook complains, Apple responds: iOS 14’s big privacy change gets postponed. The company says the change is still coming, but it hasn’t said when. Gives developers time to adjust to asking for permission. Typosquatting Intensifies Ahead of US Election. Mistyped URLs can…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: U.S. indicts Russian for attempted ransomware attack on Tesla factory. Instead of accepting a million dollar bribe for using employee access to assist in the attack, the employee reported it to the FBI. Chinese-Made Smartphones Are Secretly Stealing Money From People Around…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Microsoft Put Off Fixing Zero Day for 2 Years. Steve Gibson weighs in on Security Now Episode #780 as well. Really not surprising that Red Teams (adversary emulators that test your defenses) have been so successful of late on any windows network. Google fixes…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: The Secret SIMs Used By Criminals to Spoof Any Number. A must-read. However, it isn’t that difficult to spoof a number right from your mobile without a special SIM card. A cursory search finds us Spoofcard, Spooftel, Spoofbox, Spoof my Phone, all of which have free…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: Snapdragon chip flaws put >1 billion Android phones at risk of data theft. You can’t make this stuff up. Canon confirms ransomware attack in internal memo. Canon has suffered a ransomware attack that impacts numerous services, including Canon’s email, Microsoft Teams, USA…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: There’s a Hole in the Boot. I predict this is the most critical news of the week as it will take many years for this vulnerability to be patched across the board. This will likely result in attackers and red teams utilizing…
DetailsYour weekly top 5 technical and security issues Nerds should pay attention to: SIGRed is a 15-year-old Windows DNS Server vulnerability. When exploited, this is wormable. The last major wormable exploit brought us Wannacry, so this one is worth taking seriously with patching and mitigations. Kevin Beaumont wrote a nice blog titled Detecting DNS CVE-2020–1350 exploitation attempts…
Details
