Intel Beats Ubuntu?

Emotet now hacks nearby insecure wi-fi networks


Google Chrome will block a number of file downloads over non-secure connections.  I so love helpful software.


Win 7 won't shut down
I don't even have to make this stuff up


Win 10 users PISSED over search failure
MS issues lame, incorrect excuse


Why you can't bank on backups to fight ransomware anymore
Because the thieves are stealing info and ransoming it.


RobbinHood ransomware successful because deprecated driver signing


Why is the healthcare industry still so bad at cybersecurity?


Estee LKauder exposes 440M records, with email addresses, network info.





Linux


Linux OS from Intel beating Win 10 and Ubuntu, on AMD hardware
Intel Clear Linux        [using Phoronix test]


How fast are your disks? Find out using fio


How to install Seafile to syn and share files on Ubuntu


How to add and delete static route using IP command


8 ways to check memory usage


What's the difference between grep, egrep, fgrep
the spelling


How to run single command on multiple remote systems at once


Ubuntu 20.04 will ship with linux 5.4


Linux access control lists


for people who like self-torture, undo and redo in vim/vi


Limit the impact of a security intrusion with systemd security directives.


Python if.else statement


Disable swap



The (#*@ing spellchecker spontaneously disappeared. This is not a good thing.

The Maze of Pensacola

The group behind the Maze ransomware that they stole from the city of Pensacola put out 2G of files to prove they were serious. In other words, the city has thus far refused to pay the ransom. And they don't have backups.


Multiple Chrome vulns exist in SQLite let hackers execute arbitrary code remotely.  Don't use Chrome.  Ok, don't use Chrome prior to 79.0.3945.79 (divided by pi, minus 13).


How orgs can defend against advanced persistent threats

1. disconnect everything from the internet
2. buy any antivirus company's advanced persistent threat module
3. don't worry about it - they're rare
4. the VP needs a new boat - maybe next year

Be careful of Christmas, Hanukkah, Kwaanza and New Years themed malware. The initial version comes via snail mail, with a phrase like Merry Christmas on it. DO NOT OPEN IT. Later versions come in the form of email, with similar phrases on the subject line. Don't open these either. The most virulent, nasty malware is marked by subject lines with emojis on them. Never open these. Jonathan McAfree, from McAfree Antivirus Division (MAD) explains that if you delete them immediately, the authors will get tired and not send anymore of them.

Apple Sleight of Hand

Security Dude Brian Krebs discovered the iPhone 11 sent location data even when the service was disabled. Apple said they didn't see any problems. Now Apple says the chip necessitates constant location checks.

Bulldookey.


A bug in the way unix-flavored systems handle TCP connections could put VPN users at risk of having their encrypted traffic hijacked.

Affects "most" Linux distros, along with Android, iOS, macOS, FreeBSD, and OpenBSD.


New Mac malware hides behind a fake crypto trading platform called Union Crypto Trader.  Probably North Korean Lazarus group.


VPN is going away - check out Zero Trust


Really good piece on why the user isn't a consideration in software.
Nor is privacy. Surprise - it's Google! Not surprise: don't use Chrome or any browser based on Chrome.



Have a fun weekend. We'll be back Monday, with another slate of specially curated (the ones I came across) stories. Remember: tell your friends about ThermionicMalware. Better yet, tell people you don't like. Reproduction of this blog is prohibited without express written consent of the Backyard Underwriter Liability Lobby of Swingset Hueristics, Investigative Trade (BULLSHIT).

Uptux - privilege escalation checks for linux


2 unpatched critical RCE flaws disclosed in rConfig



If you use Chrome browser on any OS, update it now.



The first Bluekeep attacks are here!
Not as nasty as reported, but you shoulda patched your systems a long time ago.



The Pentagon published AI ethical guidelines.
This is today's best, loudest, and longest laugh.



MS 365 helps improve orgs' security and compliance posture.
MS 365 now helps find and review insider security threats.

MS 365 babysits the IT department when the boss is out.
MS 365 makes pancakes.



How the FBI abused NSA mass surveillance data.
We're so much safer since 9-11.