One Article Review
| Source |  AlienVault Blog |
|---|---|
| Identifiant | 831638 |
| Date de publication | 2018-10-05 13:00:00 (vue: 2018-10-05 15:01:22) |
| Titre | Things I Hearted this Week: 5th Oct 2018 |
| Texte |
There was no update last week because I was in Dallas for the AT&T Business Summit which was a great event. Chuck Brooks wrote a detailed post on his experience, while I made a couple of videos charting my time.
But enough of that, lets see what went down in the world of security over these last few days.
Facebook breach
One of the biggest stories in these past few days must be the Facebook breach. The company issues a security update on September 28th which led with the facts,
On the afternoon of Tuesday, September 25, our engineering team discovered a security issue affecting almost 50 million accounts. We’re taking this incredibly seriously and wanted to let everyone know what’s happened and the immediate action we’ve taken to protect people’s security.
At this stage, there are probably more questions than answers and it’s likely this is one story that will play out for a long time.
The ultimate fallout from the Facebook data breach could be massive | Help Net Security
Facebook faces $1.6 billion fine as top EU regulator officially opens probe into data breach | CNBC
What we still don’t know about the Facebook breach | The Verge
The Facebook security meltdown exposes way more sites than Facebook | Wired
Local file inclusion at IKEA.com
Flatpack vulnerabilities now available in this great writeup by Jonathan Bouman.
Local file inclusion at IKEA | Medium / Jonathan Bouman
Out of office notices for OSINT
A nice reminder by Stuart Coulson on the perils of out of office notifications, and how they can divulge a lot more than you’d want to anyone.
Out Of Office notices for OSINT | HiddenText
While you’re on the HiddenText site, check out, Seven types of cyber criminals : 2018 version
Put ads down your Pi-Hole
Nobody really likes ads when they’re browsing online. So, they sometimes revert to using adblockers. But there are some issues with those as well.
Surely, in an industry full of clever tech people, hackers, and tinkerers, there is a better way - enter Pi-hole.
Self-described as a black hole for internet ads, it is basically a mini DNS server you run on a Raspberry Pi in your local network through which your traffic goes and then blacklists any malicious domains.
Both |
| Envoyé | Oui |
| Condensat | £175 £175k 000 2018 28th 547 5th able about access account accounts across action actually adblockers addresses administrative ads affecting after afternoon all almost alphabay another answer answers any anyone are around at&t available bash basically because been before better biggest billion birth black blacklists both bouman box breach brooks browsing bulk bupa bupa's business but can canceling caught charting check chuck clever cnbc com commands company could coulson couple criminals crm customer customers customers' cyber dallas dark data dates davey days described detailed details devices digi digininja discovered divulge dns domains don’t down email emerged engineering enough enter event everyone everything experience experts exposes facebook faces facts fallout far file fine fined flatpack found from full gamut generate get global goes great hackers half happened has have hazards hbr health hearted helme help helped hiddentext hiding his history holds hole hole… how https hunt ignore ikea immediate included inclusion incredibly independence industry info information installed insurance insurer interest international internet inverse issue issues it’s itpro job jonathan know known last led let lets likely likes linux local logging long lot made making malicious man many market massive medical medium meltdown million mini miscreant mmm… more must names nationalities net network nice ninja nobody not notices notifications now oct office officially one online opens osint out over past people people’s perils personal play policy post probably probe products protect put question questions random raspberry really records register regulator reminder reports rescheduling revert robin run running sale scott securing security see self sell send september seriously server seven should shut site sites some sometimes souk spell staffer stage stop stories story stuart summit surely swan system taken taking talks team tech terrible than then these they’re things those thought threats through time tinkerers tip top traffic tried troy tuesday types ultimate undoubtedly update ups useful using verge version videos vox vulnerabilities want wanted way we’re we’ve web week week: well went what what’s when which whole will winder wired wood world write writeup wrote year you’d you’re your |
| Tags | Data Breach |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.