Blog
Security, networks and the occasional questionable decision, mostly with the Philippines in view.
[business today] Google loses over $100 billion m-cap after AI chatbot Bard gives wrong answer in ad
Google lost more than $100 billion in market value after its AI chatbot Bard gave an inaccurate answer in a promotional GIF posted on Twitter. The error was spotted just hours before Google's Bard launch event in Paris, and Business Today covers the fallout.
Netdata: The All-in-One System Monitoring and Troubleshooting Tool
Netdata is a free, open-source, real-time monitoring and troubleshooting tool for Linux and Unix systems. I cover what it offers: live, customizable dashboards for resource use, network traffic, and application performance, multi-system monitoring from one place, and plugins for many apps.
[YoreGroup] Decrypt your *.vmdk affected by CVE-2020-3992 / CryptoLocker attack
VMware ESXi servers hit by the ESXiArgs ransomware campaign may be recoverable. US CISA has published a recovery tool that can help restore encrypted virtual machine files. iTnews covers how it works and how the attack has spread.
[arstechnica] Hackers are mass infecting servers worldwide by exploiting a patched hole
Attackers are mass-infecting VMware ESXi servers worldwide with ESXiArgs ransomware by exploiting a vulnerability that was already patched. Ars Technica reports that servers running unpatched ESXi versions are sitting ducks.
[SecurityWeek] Attackers Can Abuse GitHub Codespaces for Malware Delivery
Researchers found that a GitHub Codespaces feature meant to help with development and collaboration can be abused to deliver malware. SecurityWeek explains how attackers could use Codespaces to host and serve malicious content from GitHub's trusted infrastructure.
[helpnetsecurity] NSA publishes IPv6 Security Guidance
The NSA has published IPv6 security guidance highlighting the issues that can surface in networks that are new to IPv6 or still transitioning from IPv4. Help Net Security summarizes the recommendations.
[DARKReading] Pair of Galaxy App Store Bugs Offer Cyberattackers Mobile Device Access
Two bugs in Samsung's Galaxy App Store could let attackers download apps or direct users to a malicious domain on devices running Android 12 and below. Dark Reading covers the flaws.
[security affairs] Companies impacted by Mailchimp data breach warn their customers
Mailchimp disclosed a new data breach that exposed data from 133 customer accounts, and several affected companies are now warning their own customers. Security Affairs covers which organizations were hit and what the attackers targeted.
[Darkhackerworld] Cyber Threats of 2023
Dark Hacker World looks ahead at the cyber threats expected to shape 2023. Use it as a quick overview of the attack trends that security teams and everyday users should keep an eye on this year.
[The Register] For password protection, dump LastPass for open source Bitwarden
After last summer's LastPass breach, The Register's Steven J. Vaughan-Nichols argues that it's time to switch to the open-source password manager Bitwarden. I agree: I've been deploying Bitwarden for customers for some time now, and it's a great platform.
