NSA joins chorus urging Windows users to patch ‘BlueKeep’

The alert comes on the heels of Microsoft’s second advisory calling on people to take action before it’s too late. The United States’ National Security Agency (NSA) has issued a rare alert urging Windows users and administrators to waste no time in patching the critical ‘BlueKeep’ security flaw in older Windows systems. “This is the … More NSA joins chorus urging Windows users to patch ‘BlueKeep’

Wajam: From start-up to massively-spread adware

How a Montreal-made “social search engine” application has managed to become widely-spread adware, while escaping consequences. Background Wajam Internet Technologies is a start-up founded in December 2008 by Martin-Luc Archambault (a famous entrepreneur in Quebec) and based in Montreal, Canada. The core product of the company is a social search engine application (i.e. it allows … More Wajam: From start-up to massively-spread adware

Hackers steal 19 years’ worth of data from Australia’s top university

It is the second major breach that the Australian National University suffered in 2018. A premier Australian university has disclosed a cyberattack that compromised the personal information of its students and staff extending back nearly two decades. “We believe there was unauthorised access to significant amounts of personal staff, student and visitor data extending back 19 years,” … More Hackers steal 19 years’ worth of data from Australia’s top university

Over 2.3 billion files exposed online

Millions of files that are sitting out in the open across various file storage technologies are actually encrypted by ransomware. More than 2.3 billion files have been found inadvertently exposed online over the past year, reads a report from threat intelligence outfit Digital Shadows. The firm’s new ‘Too Much Information: The Sequel’ report follows up … More Over 2.3 billion files exposed online

A dive into Turla PowerShell usage

ESET researchers analyze new TTPs attributed to the Turla group that leverage PowerShell to run malware in-memory only. Turla, also known as Snake, is an infamous espionage group recognized for its complex malware. To confound detection, its operators recently started using PowerShell scripts that provide direct, in-memory loading and execution of malware executables and libraries. … More A dive into Turla PowerShell usage

The aftermath of a data breach: A personal story

Criminals used my account to launder credit card transactions into cash, at least where the company transacted with was willing to refund. Last week I received a notification from Bank of America advising that my credit card may have been part of a compromise at an undisclosed merchant. The email does mention that there may … More The aftermath of a data breach: A personal story