Security Talk (144)
News, and Disucssions centered on Security
Friday, 11 February 2022 12:40
Russia Shutters Four Marketplaces for Stolen Credit Cards on the Dark Web
Written by Sean Kalinich
The Dark Web (whispered in Letterkenny) is a playground for all kinds of illegal activity. One well traded item is Personal Information including Credit Card numbers. Due to the state of security in most organizations (Stuart!) there is no shortage…
Read 981 times
Published in
Security Talk
Friday, 11 February 2022 06:53
Linux Attacks and Malware on the Rise as the Workforce Shifts to Remote
Written by Sean Kalinich
The shift to services like AWS, GCP and more have meant that many organizations are also making a shift away from the Microsoft Windows platform and moving to a Linux centric environment and while this is a good move for…
Read 726 times
Published in
Security Talk
Friday, 11 February 2022 04:49
Web Site Data Analytics Gathering May Violate GDPR, Google Analytics Does.
Written by Sean Kalinich
It seems that web site data analytics are now on the radar for privacy regulators in the EU, especially Google Analytics collection tools. Recently data protection regulators in Austria and France have rules that the collection of user data by…
Read 1042 times
Published in
Security Talk
Thursday, 10 February 2022 11:21
Strategy, Tactics, and Logistics. How They Fit into the Threat Landscape
Written by Sean Kalinich
The Threat Landscape is an interesting topic of discussion. It is a constantly changing thing and even the best predictions can often fall short of the actual threat. This is because in most cases, the attackers are a step ahead…
Read 772 times
Published in
Security Talk
Wednesday, 09 February 2022 16:31
Activision is Not the Only Purchase Microsoft is Eying as Rumors Pop Up Around a Mandiant Buy
Written by Sean Kalinich
The news has been abuzz about the $65+ Billion-dollar purchase of Activision/Blizzard by Microsoft. It has been seen as an opening shot in a new stage in the console wars and is, even now, under review by the FTC. However,…
Read 930 times
Published in
Security Talk
Wednesday, 09 February 2022 14:01
UEFI Bootkits and Malware are Becoming More Common as Attackers Refine their Techniques.
Written by Sean Kalinich
UEFI (Unified Extensible Firmware Interface) was designed to replace the old and outdated BIOS (Baic Input Output System). The older BIOS setup was slow and not very secure. It gave attackers several entry points for infection and persistence at that…
Read 690 times
Published in
Security Talk
Tuesday, 08 February 2022 12:34
Microsoft Begins Blocking their Own App Web Installer Files
Written by Sean Kalinich
The concept of the app as opposed to the application is one of those nuanced distinctions that miss many people. When it comes to a mobile device an app is a bundle that that allows the installation of an application…
Read 868 times
Published in
Security Talk
Tuesday, 08 February 2022 10:46
Android Banking Trojan Medusa Piggybacking on FluBot’s Deliver System
Written by Sean Kalinich
The rise of the smart device meant that more and more people were going to be using these for more than just communication. Mobile banking, mobile home automation, mobile car monitoring, you name it, there is probably an app for…
Read 883 times
Published in
Security Talk
Tuesday, 08 February 2022 07:29
Microsoft is Finally Blocking Downloaded Macros by Default in Office
Written by Sean Kalinich
Back in the late 90s’ the first macro viruses appeared on the scene. The leveraged a feature of Microsoft Office that allowed a malware developer to execute programmed instructions via the office interface. This new option opened a lot of…
Read 780 times
Published in
Security Talk
Monday, 07 February 2022 12:43
CISA Sends “Patch Now” Notice on MS Vulnerability Patched in January
Written by Sean Kalinich
A vulnerability disclosed and patched in January is rearing its ugly head. Identified as CVE-2022-21882, this vulnerability affects Windows 10, 11 and Windows Server. On its own it is a significant threat since is allows for a privilege escalation that…
Read 1026 times
Published in
Security Talk
Monday, 07 February 2022 10:41
Golang Becoming a Primary Language in the Attacker’s Tool Kit
Written by Sean Kalinich
The Go Programing Language (Go or Golang) was developed back in 2007 by a few engineers who were working at Google at the time. Go was launched in 2009 as an open-source programing language and it is primarily used in…
Read 635 times
Published in
Security Talk
Monday, 07 February 2022 08:32
New Bug in Container Deployment Tool, Argo, Puts Container Environments at Risk
Written by Sean Kalinich
Containers are a popular item with cloud-based infrastructure. The idea of running low-cost (from a resource standpoint) systems to handle work loads while maintaining a higher level of security is a nice one. Making this type of decision does not…
Read 584 times
Published in
Security Talk
Friday, 04 February 2022 11:44
Recent North Korean Internet Outages Potentially Caused by One Person with a Grudge
Written by Sean Kalinich
In early January 2021 North Korean hackers were in the midst of a campaign targeting western security researchers. They were looking to gather tools, vulnerability information and anything else of value they could get. The US, after learning about this…
Read 831 times
Published in
Security Talk
Friday, 04 February 2022 10:23
First provable SHA-1 Collision Happened Five Years Ago Yet SHA-1 is Still an Option.
Written by Sean Kalinich
On February 23rd, 2017, Google published a paper on their security blog that showed how a SHA-1 collision was possible. It proved that the aging cryptographic and hashing standard was no longer a safe or secure method. Google showed that…
Read 787 times
Published in
Security Talk
Friday, 04 February 2022 08:41
New Vulnerability Found that Exposes a Large Number Routers to UPnProxy Attack
Written by Sean Kalinich
Universal Plug and Play UPnP) is one of those technology decisions that make you wonder what people were thinking. The concept is fairly clear, find a way to make things easy for someone to just connect a device to a…
Read 1109 times
Published in
Security Talk
Friday, 04 February 2022 07:29
Apple iOS Privacy Changes take a $10 Billion Chunk Out of Facebook’s Ad Plans.
Written by Sean Kalinich
Facebook makes their money off their users. That is no shock to anyone considering the number of investigations currently ongoing over Facebook’s data collection practices. Of course, Facebook is not the only group collecting this type of information, they just…
Read 794 times
Published in
Security Talk
Page 7 of 9