Cybersecurity Archives - Page 48 of 60 - s0x • Austin Managed IT Services

16 Jul, 2020

Who’s Behind Wednesday’s Epic Twitter Hack?

Cybersecurity @6, @B, A Little Sunshine, Chaewon, Chuckling Squad, Joseph James Connor, Ne'er-Do-Well News, OG, PlugWalkJoe, Shinji, Unit 221B

Twitter was thrown into chaos on Wednesday after accounts for some of the world’s most recognizable public figures, executives and celebrities starting tweeting out links to bitcoin scams. Twitter says the attack happened because someone tricked or coerced an employee into providing access to internal Twitter administrative tools. This post is an attempt to lay out some of the timeline of this attack, and point to clues about who may have been behind it. …

14 Jul, 2020

‘Wormable’ Flaw Leads July Microsoft Patches

Cybersecurity .NET Framework, CVE-2020-1350, CVE-2020-1410, CVE-2020-1421, CVE-2020-1435, CVE-2020-1436, CVE-2020-1463, Internet Exploder, Microsoft Patch Tuesday July 2020, Office, Recorded Future, Sharepoint, Time to Patch, Visual Studio

Microsoft today released updates to plug a whopping 123 security holes in Windows and related software, including fixes for a critical, “wormable” flaw in Windows Server versions that Microsoft says is likely to be exploited soon. While this particular weakness mainly affects enterprises, July’s care package from Redmond has a little something for everyone. So if you’re a Windows (ab)user, it’s time once again to back up and patch up (preferably in that order). …

13 Jul, 2020

Breached Data Indexer ‘Data Viper’ Hacked

Cybersecurity A Little Sunshine, Apollo breach, Data Viper breach, Empire Market, Exabyte, Five, Ne'er-Do-Well News, RaidForums, Soundcard, The Coming Storm, Verifications.io breach, Vinny Troia

Data Viper, a security startup that provides access to some 15 billion usernames, passwords and other information exposed in more than 8,000 website breaches, has itself been hacked and its user database posted online. The hackers also claim they are selling on the dark web roughly 2 billion records Data Viper collated from numerous breaches and data leaks, including data from several companies that likely either do not know they have been hacked or have not yet publicly disclosed an intrusion. The apparent breach at St. Louis, Mo. based Data Viper offers a cautionary and twisted tale of what can happen when security researchers seeking to gather intelligence about illegal activity online get too close to their prey or lose sight of their purported mission. The incident also highlights the often murky area between what’s legal and ethical in combating cybercrime. …

4 Jul, 2020

E-Verify’s “SSN Lock” is Nothing of the Sort

Cybersecurity A Little Sunshine, myE-Verify, myE-Verify.gov, Security Tools, unemployment ins

One of the most-read advice columns on this site is a 2018 piece called “Plant Your Flag, Mark Your Territory,” which tried to impress upon readers the importance of creating accounts at websites like those at the Social Security Administration, the IRS and others before crooks do it for you. A key concept here is that these services only allow one account per Social Security number — which for better or worse is the de facto national identifier in the United States. But KrebsOnSecurity recently discovered that this is not the case with all federal government sites built to help you manage your identity online. A reader who was recently the victim of unemployment insurance fraud said he was told he should create an account at the Department of Homeland Security’s myE-Verify website, and place a lock on his Social Security number (SSN) to minimize the chances that ID thieves might abuse his identity for employment fraud in the future. …

2 Jul, 2020

Ransomware Gangs Don’t Need PR Help

Cybersecurity Ransomware

We’ve seen an ugly trend recently of tech news stories and cybersecurity firms trumpeting claims of ransomware attacks on companies large and small, apparently based on little more than the say-so of the ransomware gangs themselves. Such coverage is potentially quite harmful and plays deftly into the hands of organized crime. Often the rationale behind couching these events as newsworthy is that the attacks involve publicly traded companies or recognizable brands, and that investors and the public have a right to know. But absent any additional information from the victim company or their partners who may be affected by the attack, these kinds of stories and blog posts look a great deal like ambulance chasing and sensationalism. …

30 Jun, 2020

COVID-19 ‘Breach Bubble’ Waiting to Pop?

Cybersecurity Andrew Barratt, Chicken Express breach, Coalfire, COVID-19, Data Breaches, Gemini Advisory, Ricky Stuart, Stas Alforov, The Coming Storm

27 Jun, 2020

Russian Cybercrime Boss Burkov Gets 9 Years

Cybersecurity Aleksei Burkov, Arkady Bukh, CardPlanet, DirectConnection, Infraud, k0ra, Naama Issachar, Ne'er-Do-Well News, Sergey Medvedev, Stells, Vladimir Putin

25 Jun, 2020

New Charges, Sentencing in Satori IoT Botnet Conspiracy

Cybersecurity Aaron Sterritt, Adam Alexander, Chickenmelon, DDoS-for-Hire, Dingle, Drake, DYN DDoS, fbi, Fbot, IoT botnets, Judge Timothy Burgess, Kenneth Currin Schuchman, Masuta, mirai, National Crime Agency, Ne'er-Do-Well News, Okiru, Operation Midmonth, Satori, TalkTalk hack, U.S. Justice Department, Vamp, Viktor, William Walton

The U.S. Justice Department today criminally charged a Canadian and a Northern Ireland man for allegedly conspiring to build multiple botnets that enslaved hundreds of thousands of routers and other Internet of Things (IoT) devices for use in large-scale distributed denial-of-service (DDoS) attacks. In addition, a defendant in the United States was sentenced to drug treatment and 18 months community confinement for his admitted role in the conspiracy. …