COVIDCOVIDCOVIDCOVID

Now that we have that our of our system....


Misconfigured Elasticsearch Instance Exposes More Than 5 Billion Records

MISconfigured or NOT configured?

Attack Surface, Vulnerabilities Increase as Orgs Respond to COVID-19 Crisis

Top 5 Open Source Serverless Security Tools

Open-source project spins up 3D-printed ventilator validation prototype in just one week

Rogers Data Breach Exposed Customer Info in Unsecured Database

Tools to Access The Linux File System from Windows

Open Source Cloud Storage: 14 Top Tools

What do you not want right now? A bunch of Cisco SD-WAN, Webex vulnerabilities? Here are a bunch of them

Surge in home working highlights Microsoft licensing issue: if you are not on subscription, working remotely is a premium feature

Thought you'd go online to buy better laptop for home working? Too bad, kid. So did everyone. Laptops, monitors and WLANs fly off shelves

The lesson here is to always have a high performance laptop. Presenting it to your spouse is your own business.

IT Security Report Finds 97 Percent Have Suspicious Network Activity

SHOCKING!

LINUX

How to Install OwnCloud on Ubuntu 18.04

How to Check Bad Sectors or Bad Blocks on Hard Disk in Linux

Using Keepalived for managing simple failover in clusters

How To Sync Browser Profile Into Tmpfs (RAM) In Linux

The Maze of Pensacola

The group behind the Maze ransomware that they stole from the city of Pensacola put out 2G of files to prove they were serious. In other words, the city has thus far refused to pay the ransom. And they don't have backups.


Multiple Chrome vulns exist in SQLite let hackers execute arbitrary code remotely.  Don't use Chrome.  Ok, don't use Chrome prior to 79.0.3945.79 (divided by pi, minus 13).


How orgs can defend against advanced persistent threats

1. disconnect everything from the internet
2. buy any antivirus company's advanced persistent threat module
3. don't worry about it - they're rare
4. the VP needs a new boat - maybe next year

Be careful of Christmas, Hanukkah, Kwaanza and New Years themed malware. The initial version comes via snail mail, with a phrase like Merry Christmas on it. DO NOT OPEN IT. Later versions come in the form of email, with similar phrases on the subject line. Don't open these either. The most virulent, nasty malware is marked by subject lines with emojis on them. Never open these. Jonathan McAfree, from McAfree Antivirus Division (MAD) explains that if you delete them immediately, the authors will get tired and not send anymore of them.