The gap between the vendor discovering a vulnerability and the patch getting to you will always be an issue – this is the zero-day threat. It escalates if the threat actors became aware of the vulnerability and exploits it before the vendor becomes aware. Now research by Mandiant shows that, …
When redacting does not work
We all see redacting n the TV shows and movies we watch – documents with big black lines through the secret information that must not be revealed – and I use similar techniques for screenshots I use here to conceal secret information. I am sure you do the same. I …
How the cyber security landscape has changed because of the Ukraine Russia Conflict
Shane Huntley, Senior Director Threat Analysis Group, has written an article about the Ukraine Russia conflict and how the increased cyber activity has spilled out and impacted the cyber security landscape. Fog of war: how the Ukraine conflict transformed the cyber threat landscape (blog.google) Not so light reading for the …
Google ads malvertising campaign evades anti-virus detection
Data stealing malware, pushed through compromised Google search ads, is attempting to evade detection by using virtualisation components: Google ads push ‘virtualized’ malware made for antivirus evasion (bleepingcomputer.com) Researchers think this new type of attack strategy and other emerging attack vectors are being prompted s as reaction to Microsoft tightening …
Continue reading “Google ads malvertising campaign evades anti-virus detection”
Google adds end-to-end encryption
The UK Government does not like the ordinary citizen to have uncontrolled access to end-to-end encryption (E2EE) but others like it – like Google: Google introduces end-to-end encryption for Gmail on the web (bleepingcomputer.com) See what I have to say about closing public toilets as an amendment to the UK …
