Troy Hunt

AUGUST 31, 2018

A few little bits and pieces this week ranging from a new web cam (primarily to do Windows Hello auth), teaching my 8-year-old son HTML, progress with Firefox and HIBP, some really ridiculous comments from Namecheap re SSL (or TLS or HTTPS) and a full set of Pwned Passwords as NTLM hashes.

Passwords 108

Passwords Encryption 108

Troy Hunt

NOVEMBER 13, 2020

This week's update had a load of questions so even whilst the planned content didn't consume a lot of time, audience engagement was great and I appreciate all the input. it's a beautiful piece I'm very humbled to have received) I killed some time messing with an SEO spammer (what do you mean Troy Hunt sucks?!)

Scams 289

Scams Data breaches 289

Malwarebytes

NOVEMBER 16, 2021

Not only had the infrastructure been dismantled, but previously infected computers had received a special update that would effectively remove the malware at a specific date. Out of the woods again. On November 15, security researchers who’ve tracked Emotet announced that the threat was back. A return of malspam waves and ransomware?

InfoSec 82

InfoSec Ransomware Malware 82

Security Boulevard

JUNE 8, 2021

According to Ponemom, even for “regular” organizations, the average time to implement a patch is 102 days. Customers on the receiving end accept the software believing it to contain benign updates. In 2020, there were approximately 20,000 vulnerabilities logged by NIST. Around five (5) attacks on ICS occur every week. .

Ransomware 102

Ransomware Software Healthcare Risk 102

Fox IT

NOVEMBER 8, 2021

NCC Group strongly advises updating systems running SolarWinds Serv-U software to the most recent version (at minimum version 15.2.3 Serv-U_15.1.7.162 102 SSH-2.0-Serv-U_15.1.1.108 NCC Group’s global Cyber Incident Response Team have observed an increase in Clop ransomware victims in the past weeks. Amount Version 441 SSH-2.0-Serv-U_15.1.6.25

Software 72

Software Ransomware Internet Internet 72

Elie

DECEMBER 2, 2017

Liberian telecom targeted by 102 reflection attacks. We hope the Deutsche Telekom event acts as a wake-up call and push toward making IoT auto-update mandatory. IoT device auto-updates should be mandatory to curb bad actors’ ability to create massive IoT botnets on the back of unpatched IoT devices. report on Twitter.

IoT 107

IoT DDOS Internet Internet 107