Category: Uncategorized

Another macOS zero-day giving root access, Google warns hackers used macOS zero-day flaw, could capture keystrokes, screengrabs | ZDNet also on iPhones. A watering hole attack relies on profiles of a website’s typical visitors to create the attack. For companies, note the websites of your industry’s conferences, standards bodies, and vendors.

Pretty sophisticated code I guess because analysts were looking at the quality as being like that of dev team: “…[u]sual-suspect traits of malware built for spying on a target, including device fingerprint, screen captures, the ability to upload and download files, as well as execute terminal commands…also record audio and log keystrokes.”

Just be wary where you are following the same sites as co-workers. Beware email lures. Get secure email and malware solutions for your business.

Since 2015, Void Balaur has been targeting around a dozen high-profile professionals a day: human rights activists, journalists, politicians, telecommunications engineers and medical doctors. They’ve also been advertising on Russian-language sites. This is not only in DARKReading, but also The Hacker News , Trend Micro, and ZDNet.

https://www.darkreading.com/vulnerabilities-threats/hacker-for-hire-group-spied-on-more-than-3-500-targets-in-18-months

ZDNet covered a piece of malware they’ve dropped in some sites some time ago: https://www.zdnet.com/article/trojan-malware-the-hidden-cyber-threat-to-your-pc/

Use multi-factor authentication to protect your email and social media accounts. Physical keys instead of SMS passcodes. Use reputable email. Webmail is best. I use Gmail, which has superior spam filters.

What is everyone doing now? I kid, but no really.

We are so dependent on Facebook and this could be time for reflection. What do we do at home, out and about–God forbid, at work? I know that FB is a kind of drug for some people and I have found that I need a timeout sometimes myself. But when 2.89 billion people on the planet are on this infernal thing, the question is what would happen in a long term outage? People may get back to life.

Part 2 of Considering the Crush

So what should we do being in Europe amid the crush? I thought, “how can we make this work? How to sleep well, get around relatively cheaply and easily, and to just enjoy ourselves?” We could have made a frantic travel plan, to see all the big attractions, run to and fro, and try to get photos of everything. You may encounter someone in your party like Ellen Griswold (National Lampoon’s “Vacation”): Continue reading “Avoiding the Crush”

Before I continue, I should mention that scanning any other system than yours could get you in big trouble. To be safe, you need written permission to do so on systems other than your own. The IP number for the computer you are on is 127.0.0.1, also called “localhost” or just home. If you run nmap against that IP you should be OK. Continue reading “Active Reconnaissance – There’s no place like 127.0.0.1”

If we keep borrowing money and only repay the interest, aren’t we saying that we don’t intend on paying it back? I don’t see a way out of this and we’re just kicking the can down the road. Fiscal responsibility used to be part of conservative ideology.

Yellen wrote “This uncertainty underscores the critical importance of not waiting to raise or suspend the debt limit. The full faith and credit of the United States should put at risk.”

I think the full faith and credit are already at risk. As long as we can’t touch entitlements, we are not pursuing a responsible solution. Someone is going to have to break the news, someone preferably in their last term of their job and not concerned with being re-elected.