Post Valentine's Day Massacre

As the result of a Freedom of Information Act (FOIA) request, you can now take the NSA's course on python, for beginners. They describe the training materials as lightly redacted. Even training materials contain information you aren't cleared for. State secrets. Espionage aids. Venom with Python - a free course.

I wouldn't download any training materials, if I were you.




8 things users do that make security pros miserable.

1. breathe
2. touch computers

The Free Software Foundation sent Microsoft an empty hard drive, demanding the source code to Windows 7. Microsoft responded immediately, saying they were sending the source code down via Santa Claus.

Lenovo, HP, Dell periphals face unpatched firmware bugs

10 "Sweyntooth" Bluetooth bugs found

Microsoft Confirms Windows 10 KB4524244 Issues and Pulls the Update

Windows 10 users affected by new shutdown bug - how to fix

del c:\*.*

Linux   

4 ways to generate a strong pre-shared key

How to set up IPsec-based VPN with Strongswan on Debian and Ubuntu

Useful console services

Practical example of du and awk commands

Put hands under armpits. Run around saying AWK AWK

How to zoom tmux panes for better text visibility

Intel's Clear Linux kicking butt in tests

How to chown recursively

Zombie Cicso Vuln

It's back. An already-fixed Cisco vuln.
With 'how to check' demo.


Dropbox Zero Day gets short temp fix


Reverse engineering with Ghidra


NSA's backdoor key from Lotus Notes

Backdoor Fixed?

Ddoor - cross platform backdoor using DNS txt records.
It's ok - it's a lightweight backdoor.


Google and Samsung fix android spying flaw.
So only the rest of the phones are vulnerable.


Microsoft denies bluekeep ransomware is theirs.
No, MS Teams and Bluekeep (RDP) are not responsible.
But publicly flog themselves over RDP.



GPS manipulation in Shanghai is probably NOT the Chinese military
Like IoT, GPS is one of those technologies that just begs for problems. If you're steering a ship or piloting a plane, you better have a reliable backup.. if there are problems, GPS will be the first thing to go.



NSA advisory addressing encrypted traffic inspection risks
Yeah, we think you just shouldn't encrypt anything... it's for the children...
No, seriously, read it.


Running linux commands with timeout



Speaking of linux, I was initially taken aback when I saw 'mpd'. Turns out it doesn't stand for Multiple Personality Disorder.

Uptux - privilege escalation checks for linux


2 unpatched critical RCE flaws disclosed in rConfig



If you use Chrome browser on any OS, update it now.



The first Bluekeep attacks are here!
Not as nasty as reported, but you shoulda patched your systems a long time ago.



The Pentagon published AI ethical guidelines.
This is today's best, loudest, and longest laugh.



MS 365 helps improve orgs' security and compliance posture.
MS 365 now helps find and review insider security threats.

MS 365 babysits the IT department when the boss is out.
MS 365 makes pancakes.



How the FBI abused NSA mass surveillance data.
We're so much safer since 9-11.