Proprietary Software and Security
-
3CX Knew Its App Was Being Flagged By AV Platforms, Did Very Little During Supply Chain Attack
If you don’t use the 3CX VoIP platform, or work in the MSP space with companies that do, you may have missed the news that the company suffered a massive supply chain attack over the past few days. With comparisons being made to the SolarWinds fiasco, this was really, really bad. Unsuspecting clients of 3CX had Windows and Mac versions of the app to hundreds of thousands of customers deployed on their computers with malware snuck inside. That malware called out to actor-controlled servers, which then deployed more malware designed to allow for everything from browser hijacking to remote-takeover of the computer entirely. A hacking group associated with the North Korean government is suspected to be behind all of this.
-
Guam Memorial Hospital under review for potential HIPAA breach
How many times have we heard entities claim that they got lucky and no patient, student, or employee data was accessed or acquired, only to discover later — as Los Angeles Unified School District and Wilkes-Barre Technical Center recently learned — that yes, personal and sensitive information had been compromised?
-
Letting users block injected third-party DLLs in Firefox
On Windows, third-party products have a variety of ways to inject their code into other running processes. This is done for a number of reasons; the most common is for antivirus software, but other uses include hardware drivers, screen readers, banking (in some countries) and, unfortunately, malware.
Having a DLL from a third-party product injected into a Firefox process is surprisingly common – according to our telemetry, over 70% of users on Windows have at least one such DLL! (to be clear, this means any DLL not digitally signed by Mozilla or part of the OS).
Most users are unaware when DLLs are injected into Firefox, as most of the time there’s no obvious indication this is happening, other than checking the about:third-party page.
-
British govt tech supplier Capita crippled by 'IT issue' [iophk: Windows TCO]
"The reality is that we've had no access to anything related to Capita's Azure Directory (AD) or Azure Active Directory, which includes VPN and all Microsoft 365 and Azure services," a Register-reading Capita insider told us.