You've Already Been Hacked

- www.govinfosecurity.com : Ukraine Arrests 6 Clop Ransomware Operation Suspects - www.theregister.com : Ryuk ransomware recovery cost us $8.1m and counting, says Baltimore school authority - www.bleepingcomputer.com : Network security firm COO charged with medical center cyberattack - www.zdnet.com : This data and password-stealing malware is spreading in an unusual way - www.govinfosecurity.com...

Talking about what we went over in the spring term, and how it related to the last 3 months! Share that link with your friends, or share this one, either helps this podcast grow! Follow me on twitter at: @attiliojr Feeling Generous and want to show your support? algorand: E3HYLC56IHAFXPPA2WZCLBYAVFX42GVFDC7BDAXAQWNI3BXGHF3KDILMSY bitcoin: bc1qls47sszwqxwpad66pn6awxr0ex9s4d33t3t2zw Cosmos: cosmos10...

As 2021 goes on, the attack on critical infrastructure continues at a rapid pace. - www.zdnet.com: FBI attributes JBS ransomware attack to REvil - www.bleepingcomputer.com: FBI: REvil cybergang behind the JBS ransomware attack - www.cyberscoop.com: Meat chain JBS says US production is returning after ransomware attack - www.bleepingcomputer.com: Chinese threat actors hacked NYC MTA using Pulse Sec...

- www.scmagazine.com : As market for cyber insurance booms, watchdog calls for better data - www.theregister.com : Doncaster insurance firm One Call hit by not-dead-at-all Darkside ransomware gang - www.theregister.com : Air India admits to data breach impacting 4.5m customers, sat on the news for five weeks - www.theregister.com : Toyota rear-ended by twin cyber attacks that left ransomware-shape...

- www.bloomberg.com : CNA Financial Paid $40 Million in Ransom After March Cyberattack - www.zdnet.com : Cybercriminals scanned for vulnerable Microsoft Exchange servers within five minutes of news going public - www.bleepingcomputer.com : Insurer AXA hit by ransomware after dropping support for ransom payments - threatpost.com : Fresh Loader Targets Aviation Victims with Spy RATs Share that link...

The fallout from the colonial pipeline ransomware attack, may have a net positive for the cybersecurity landscape. Verizon published the 2021 Data breach investigations report, and 2020 was the year that showed we have so much more to do in making everyone have better cyber hygiene. - www.govinfosecurity.com : Biden: Russian Government Not Behind Colonial Pipeline Attack - threatpost.com : Colonia...

- Ransomware attack: Major U.S. fuel pipeline halts operations - https://salinapost.com/posts/3930ba6b-803c-4415-a0d0-b57dd47fc4bf - www.darkreading.com : Hundreds of Millions of Dell Computers Potentially Vulnerable to Attack - www.bleepingcomputer.com : A student pirating software led to a full-blown Ryuk ransomware attack - threatpost.com : Massive DDoS Attack Disrupts Belgium Parliament - Thre...

- www.bleepingcomputer.com : HashiCorp is the latest victim of Codecov supply-chain attack - www.zdnet.com : University of Minnesota responds to Linux security patch requests - threatpost.com : Linux Kernel Bug Opens Door to Wider Cyberattacks - www.bleepingcomputer.com : DC Police confirms cyberattack after ransomware gang leaks data - threatpost.com : DoppelPaymer Gang Leaks Files from Illinois...

- www.fireeye.com : Check Your Pulse: Suspected APT Actors Leverage Authentication Bypass Techniques and Pulse Secure Zero-Day - www.darkreading.com : University Suspends Project After Researchers Submitted Vulnerable Linux Patches - www.bleepingcomputer.com : REvil gang tries to extort Apple, threatens to sell stolen blueprints - www.cyberscoop.com : Codecov dev tool hit in another supply chain h...

- www.scmagazine.com: As US takes sweeping action against Russia for years of hacking, industry skeptical of impact - www.darkreading.com: FBI Operation Remotely Removes Web Shells From Exchange Servers - www.bleepingcomputer.com: CISA gives federal agencies until Friday to patch Exchange servers - www.zdnet.com: Google Project Zero testing 30-day grace period on bug details to boost user patching...

This past week had a bunch of large scale hits with potentially 700 million people being hacked (not all this week, some as early as 2019). - thehill.com : Major DC insurance provider hacked by 'foreign cybercriminals' - www.bleepingcomputer.com : North Korean hackers use new Vyveva malware to attack freighters - www.darkreading.com : LinkedIn Phishing Ramps Up With More-Targeted Attacks - www.scm...

Lots happening this week, as I welcome in my new students to this term. Solarwinds fall out still happening, along with changes at the company, multi university hacks reported, North Korea is still being tricky, another water treatment plan was hacked (although in the past), Ubiquity has a whistle blower, and Space X encrypted their data streams. - thehill.com : Hackers accessed emails of top DHS...

Taking a break from the reoccuing nightmare that is cybersecurity, and doing a quick high level overview of teaching cybersecurity, specifically my class. Which happens to start back up on 6 April 2021.

- www.zdnet.com : Mimecast reveals source code theft in SolarWinds hack - www.bleepingcomputer.com : CISA releases new SolarWinds malicious activity detection tool - www.zdnet.com : Microsoft investigates potential ties between partner security firm, Exchange Server attack code lea - arstechnica.com : Exchange servers first compromised by Chinese hackers hit with ransomware - www.bleepingcomputer....

This week focused heavily on the hack of 2021, at least 10 APTs are exploiting Microsoft Exchange Server vulnerabilities across the globe, oh and 150,000 security cameras were also breached... - www.cyberscoop.com: At least 10 APT hacking groups have exploited Exchange Server bugs, ESET warns - www.cyberscoop.com: Amid widespread Exchange Server attacks, Microsoft issues patch for older versions -...

- www.scmagazine.com : China’s new cyber tactic: targeting critical infrastructure - www.forbes.com : Hackers Break Into ‘Biochemical Systems’ At Oxford University Lab Studying Covid-19 - arstechnica.com : Hard-coded key vulnerability in Logix PLCs has severity score of 10 out of 10 - www.theregister.com : Chinese businessman plotted with GE insider to steal transistor secrets, say Feds - www.dark...

- www.bleepingcomputer.com: Federal Reserve nationwide outage impacts US banking system - www.bleepingcomputer.com: TD Bank suffered systemwide banking outage, services now recovered - www.scmagazine.com: ThreatNeedle malware tied to year-long North Korean espionage campaign against global defense industry - www.cyberscoop.com: Plane-maker Bombardier discloses breach after stolen data surfaces - t...

- www.bleepingcomputer.com : Microsoft: SolarWinds hackers downloaded Azure, Exchange source code - www.cyberscoop.com : White House warns SolarWinds breach cleanup will take time - threatpost.com : Florida Water Plant Hack: Leaked Credentials Found in Breach Database - www.zdnet.com : Singtel hit by third-party vendor's security breach, customer data may be leaked - statescoop.com : Washington st...

This week we go after Critical Infrastructure hacks, the majority of windows computers have likely had a vulnerability for over a decade, and 60 million in bitcoin may be locked away forever - www.vice.com : Hacker Tried to Poison Florida City's Water Supply, Police Say -   www.wired.com : A Hacker Tried to Poison a Florida City's Water Supply, Officials Say - www.bleepingcomputer.com : Eletr...

- thehill.com : Hackers had access to SolarWinds email system for months - apnews.com : Russian hack brings changes, uncertainty to US court system - www.bleepingcomputer.com : Hackers steal StormShield firewall source code in data breach - arstechnica.com : High-performance computers are under siege by a newly discovered backdoor - threatpost.com : Lazarus Affiliate ‘ZINC’ Blamed for Campaign Aga...

Links to the Stories - www.wired.com : North Korea Targets—and Dupes—a Slew of Cybersecurity Pros - www.darkreading.com : Intl. Law Enforcement Operation Disrupts Emotet Botnet - www.govinfosecurity.com : Another Takedown: NetWalker Ransomware Gang Disrupted - threatpost.com : Mimecast Confirms SolarWinds Hack as List of Security Vendor Victims Snowball - www.darkreading.com : Ransomware Disrupts...

Fireeye tries to help, Solarwinds has another trick up it’s sleeve, students infected with malware from government laptops, and the FBI warns of vishing, all this week. Fireeye Release a tool to help: https://www.zdnet.com/article/fireeye-releases-tool-for-auditing-networks-for-techniques-used-by-solarwinds-hackers/ SolarWinds has a fourth vector: https://www.zdnet.com/article/fourth-malware-strai...

This week we are taking a high level look at decentralized social media alternatives, that can replace the other platforms you use. https://www.minds.com https://getaether.net https://joinmastodon.org https://lbry.tv/ https://diasporafoundation.org https://d.tube https://www.signal.org https://www.voice.com/faq/ https://mewe.com/faq https://sopa.tulane.edu/blog/decentralized-social-networks https:...

Sites for the News References - krebsonsecurity.com: Sealed U.S. Court Records Exposed in SolarWinds Breach - www.fedscoop.com: CISA updates guidance on SolarWinds compromise - www.zdnet.com: SolarWinds: The more we learn, the worse it looks - www.theverge.com: SolarWinds hack may be much worse than originally feared - duo.com: SolarWinds Attackers Accessed, But Did Not Modify, Microsoft Source Co...

This week, just a small update on SolarWinds, and a look back at the top 10 hacks that occurred in 2020. www.cyberscoop.com : Grid regulator warns utilities of risk of SolarWinds backdoor, asks how exposed they are www.govinfosecurity.com : CISA Warns SolarWinds Incident Response May Be Substantial - www.bleepingcomputer.com : SolarWinds releases updated advisory for new SUPERNOVA malware www.wire...