I run this search periodically and I watch the climbing numbers of results with alarm. I ran it just now and it returned 143,000 results, up nearly 50% from a year ago. At this point, I believe that its incumbent on AWS to do something to stop spamming my data across the interwebz. The problem… Continue reading Misconfigured AWS S3 Buckets Still Rising
I don’t care what holiday you celebrate. Christmas, Hanukkah, Kwanzaa, Yule, or even nothing at all. If you do happen to believe in something, please ask for 2021 to be better than 2020. 2020 for most of us has been a trying and difficult year to say the least. Even so, I think that a… Continue reading Happy Holidays
Its not a problem until its a problem… Mickey Fox This should be enough to give you a bit of heartburn. The average large enterprise as 1200 various cloud services (including PaaS and SaaS offerings) that are in use and 98% of them are unsanctioned and unvetted SaaS apps according to the Enterprise Strategy Group.… Continue reading Just How Big A Problem Is Shadow IT
This places some serious doubt about the efficacy of the Russian vaccine since Russian hackers are still targeting research facilities engaged in creating a COVID vaccine. I know that Putin and his family have supposedly taken the vaccine but if their vaccine worked, why are they still targeting COVID research facilities?
The year is closing and its now time to reflect back on the hot mess that was 2020. The only thing missing so far is having Umbrella Corp handing out the COVID vaccine and kicking off the zombie apocalypse. We have survived fires, earth quakes, volcanoes, floods, murder hornets, giant globe spanning dust storms and… Continue reading OWASP Top 10 – Still The Same After a Decade
China went so far as to create fake security tools to collect data to target dissidents and protesters. This included a fake antivirus software that actually installed, instead of removed, trojans on to anyone foolish enough to install Anvisoft. They also created a data mining platform called SonarX to mine social media and gaming accounts… Continue reading China Uses Hacking to Target Dissidents and Protesters
Let me put on my shocky face for that announcement. I seem to recall being told to remove my tin foil hat when I mentioned this back when everyone wanted to vote from their cell phone. Networking your voting apparatus is really good way to make sure that it gets hacked. Banks, SSL vendors and… Continue reading Russian Hackers Attacking E-voting
Apparently, its pretty easy to tune in. Just find an old radio that still has an AM receiver and adjust the dial to somewhere between 950 and 970. If you are close enough, you can hear it all. They’ll never know how you found out they were planning to go a party instead of a… Continue reading Want to Know What Your Kids are Doing on That iPhone?
When COVID hit and contract tracing in the EU and North American became “a thing”, I warned everyone that this was not a good idea. When Google and Apple made it a feature on smart phones, I warned everyone that this was not a good idea. Now we have proof as to how this is… Continue reading Messaging Service Telegram Used to Track, Trap and Torture Iranian Dissidents
I call it barn sized because it allows you to see and hear everything that the cameras using this chip can see and here, it allows you to hijack the device and execute arbitrary code on it. At this point, is anyone really surprised? Tik-tok the media/data raping platform, the poisoned wheat that killed a… Continue reading Huawei Video Chip has Barn-sized Backdoor