Security Leftovers

posted by Roy Schestowitz on Jun 21, 2023

• Article: Debugging Production: eBPF Chaos

  This article shares insights into learning eBPF as a new cloud-native technology which aims to improve Observability and Security workflows. You’ll learn how chaos engineering can help, and get an insight into eBPF based observability and security use cases. Breaking them in a professional way also inspires new ideas for chaos engineering itself.

• VMware Confirms Live Exploits Hitting Just-Patched Security Flaw [Ed: Maybe they can try to blame it on "Linux" like before; company controlled by sociopaths from Microsoft]

  VMware updates a critical-level bulletin: “VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild.”

• Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps

  Businesses using ‘Log in with Microsoft’ could be exposed to privilege escalation and full account takeover exploits.

• Norton Parent Says Employee Data Stolen in MOVEit Ransomware Attack [Ed: Microsoft Windows TCO]

  Gen Digital, which owns Avast, Avira, AVG, Norton, and LifeLock, said employee data was compromised in the MOVEit ransomware attack.

• New ‘RDStealer’ Malware Targets RDP Connections [Ed: Microsoft Windows TCO]

  Bitdefender finds new malware capable of monitoring incoming RDP connections and infect the connecting clients that have client drive mapping enabled.

• Australian Government Says Its Data Was Stolen in Law Firm Ransomware Attack [Ed: Microsoft Windows TCO]

  The Office of the Australian Information Commissioner (OAIC) says some of its files were stolen in a ransomware attack on law firm HWL Ebsworth.

• Fulfilling Expected SEC Requirements for Cybersecurity Expertise at Board Level

  Nobody doubts the need to increase board level cyber expertise, but there is no single preferred route.

• Analyzing a YouTube Sponsorship Phishing Mail and Malware Targeting Content Creators, (Wed, Jun 21st)

  One of our Stormcast listeners, Kevin, wrote in to share that his friend Jon had received a direct spear-phishing e-mail. We requested for more information, and Jon kindly provided us with the corresponding e-mails and data to analyze.

• Hackaday Prize 2023: Sleek Macro Pad Makes 2FA A Little Easier

  We all know the drill when it comes to online security — something you know, and something you have. But when the “something you have” is a two-factor token in a keyfob at the bottom of a backpack, or an app on your phone that’s buried several swipes and taps deep, inconvenience can stand in the way of adding that second level of security. Thankfully, this “2FA Sidecar” is the perfect way to lower the barrier to using two-factor authentication.

• OT:Icefall: Vulnerabilities Identified in Wago Controllers

  Forescout Technologies has disclosed the details of vulnerabilities impacting operational technology (OT) products from Wago and Schneider Electric.