I am not going to say much about this – just, insider threat, and you cannot write a policy for idiots! Be careful who you trust. Leaking Military Secrets on Gaming Discussion Boards – Schneier on Security
Zero-Days are back in the news
Zero-Days – will always be a problem and both Google and Mandiant are reporting rises in such exploitations in 2021. I have reported on this before but the point that comes out in Bruce Schneier’s piece is the numbers these research groups are reporting are detected or declared Zero-Days. What …
Inside a commercial spyware company
Following the story this week that No. 10 Downing Street and the Foreign and Commonwealth Office were infected with the Pegasus spyware, Bruce Schneier put me onto this article about the NSO Group and Pegasus spyware. It provides some amazing background into the way the software has developed and how …
You get the idea that Bruce Schneier does not like cryptocurrencies
There have been a number of attacks on decentralized finance (DeFi) systems recently – and here is another. A hacker abused the smart contract system at Beanstalk Farms, a decentralized finance (DeFi) project and sent themselves $182 million. Clever Cryptocurrency Theft – Schneier on Security Beanstalk cryptocurrency project robbed after …
Continue reading “You get the idea that Bruce Schneier does not like cryptocurrencies”
Crypto for the weekend
Bruce Schneier’s blog put me onto this article, which explains in some depth how with careful detective work, and open-source intelligence (OSINT) made anonymous cryptocurrency transactions not so anonymous. It is a long, but very interesting article but please note the content warning from the Wired website, and do not …
Ukrainian power grid hack thwarted
This story is doing the rounds everywhere. A joint effort between ESET and Ukraine Computer Emergency Response Team (Cert-UA) defeated the attack, discovering a new variant of the Industroyer malware – which was used in a previous attack on the Ukrainian power grid in December 2016. This malware is associated …
Even the world’s biggest companies get suckered by social engineering
Both Apple and Meta were the victims of social engineering scams that caused them to simply giveaway user personal information. I am not going to call this sophisticated – actually it was quite simple – the cyber criminals, studied how an Emergency Data Requests (EDR) operated and then spoofed that …
Continue reading “Even the world’s biggest companies get suckered by social engineering”
