CollectiveMakers

By Romain LORENZINI

IT Experts Community : We share CyberSecurity, Cloud/Devops and Digital Workspace intelligence.

TvOS
Why You Should Download the Latest Apple Software Updates Immediately
idropnews.com
If you’re reading this, you should strongly consider updating all of your Apple devices to the latest software versions as soon as possible. Updating …
Tech Industry
New ‘Anatova’ ransomware family dubbed a serious threat by security researchers
siliconangle.com - Duncan Riley
Security researchers at McAfee LLC have detailed the discovery of a new ransomware family that is targeting consumers across the globe.Dubbed …
Technology
Popular WordPress plugin hacked by angry former employee
ZDNet - Catalin Cimpanu
Hacker defaced the company's website and sent a mass email to all its customers, alleging unpatched security holes. A very popular WordPress plugin …
Technology (Australia)
Largest collection ever of breached data found
The Guardian - Alex Hern
The largest collection of breached data in history has been discovered, comprising more than 770m email addresses and passwords posted to a popular hacking forum in mid-December. The 87GB data dump was
Tumblr Engineering — Open Sourcing our Kubernetes Tools
tumblr.com
At Tumblr, we are avid fans of Kubernetes. We have been using Kubernetes for all manner of workloads, like critical-path web requests handling for …
Trend Micro
PoC for Windows VCF zero-day published online
ZDNet - Catalin Cimpanu
Microsoft said it would fix the vulnerability in Windows 19H1, in April. A security researcher has published details and proof-of-concept (PoC) code …
Kubernetes
9 Kubernetes Security Best Practices Everyone Must Follow - Cloud Native Computing Foundation
cncf.io - By cncf
Last month, the Kubernetes ecosystem was shaken by the discovery of the first major security flaw in Kubernetes, the world’s most popular container …
SCP implementations impacted by 36-years-old security flaws
ZDNet - Catalin Cimpanu
OpenSSH, Putty, and WinSCP are all impacted. Patches available for WinSCP. All SCP (Secure Copy Protocol) implementations from the last 36 years, …
Kubernetes
Why Is Storage On Kubernetes So Hard?
softwareengineeringdaily.com - Gokhan Simsek
Container orchestration tools like Kubernetes are revolutionizing the way applications are being developed and deployed. With the rise of the …
Serverless Computing London: Guy Podjarny - Serverless Security: What’s Left To Protect?
www.youtube.com
Ransomware
PyLocky Ransomware Decryption Tool Released — Unlock Files For Free
thehackernews.com - January 10, 2019
If your computer has been infected with PyLocky Ransomware and you are searching for a free ransomware decryption tool to unlock or decrypt your …
Technology
AWS gives open source the middle finger
TechCrunch - Frederic Lardinois
AWS launched DocumentDB today, a new database offering that is compatible with the MongoDB API. The company describes DocumentDB as a “fast, scalable, and highly available document database that is designed
MS Office
Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection
thehackernews.com - noreply@blogger.com (Swati Khandelwal)
Security researchers have been warning about a simple technique that cybercriminals and email scammers are already being using in the wild to bypass …
Technology
Microsoft January 2019 Patch Tuesday fixes 50 vulnerabilities
ZDNet - Catalin Cimpanu
January 2019 Patch Tuesday patches 17 remote code execution flaws, of which seven are rated "Critical." Microsoft has released today its monthly …
Middleware
Error Handling in AWS Lambda With Wrappers
epsagon.com
We have been using web frameworks to develop web applications since long before serverless came around, and middlewares are stable in these web …
Ethereum Classic
Almost $500,000 in Ethereum Classic coin stolen by forking its blockchain
Ars Technica - Dan Goodin
Rollback attack let attackers spend 88,500 previously spent coins. Attackers have stolen almost $500,000 worth of the Ethereum Classic digital …
New hardware-agnostic side-channel attack works against Windows and Linux
ZDNet - Catalin Cimpanu
Side-channel attack almost certainly works against macOS, but researchers haven't tested it. A team of five academics and security researchers has …
News (China)
China-Made Smartphone Weather App Stole Data From 10 Million Global Users
theepochtimes.com - Nicole Hao
TCL, a Chinese producer of consumer electronics, has been collecting data without permission from mobile phones that have downloaded its free weather …
Cyber-attacks
Cyber Attacks: Igniting The Next Recession?
Forbes - Rajinder Tumber
The nightmare of a recession, Is a cyber attacker’s obsession. Be wise, proactive and collaborate, Or face this truly unfortunate fate. I predict a recession within 2 years and I don’t need to have a qualification
USB Type-C
New USB-C Security Feature Could Protect Your Devices From Malware
Forbes - Lee Mathews
You’ve probably accumulated a drawer full of USB drives, cables and chargers over the years. While they’ve certainly gotten better at charging your devices and transfer files more quickly, they haven’t
Technology
New phishing scam masquerades as Apple support call
appleinsider.com - Roger Fingas
By The latest scam targeting Apple device users is particularly insidious, appearing to come as a call from the company's real phone support number, …
Aliases, hard links, symlinks, and copies in Mojave’s APFS
eclecticlight.co - hoakley
If there’s one topic which is most likely to bring confusion it’s the different types of links and aliases available in Unix-like file systems, and …
ReCAPTCHA
Introducing unCaptcha2
github.com - ecthros
README.md ⚠️This code works on the most recent version of ReCaptcha. Only use on sites you control for educational purposes.⚠️ Created in April 2017, …
Elasticity
Distinguishing Between Cloud Washed and Cloud Native
devops.com - Bill Doerrfeld
Don’t fall for the marketing jargon: Running legacy infrastructure on a cloud instance is not actually cloud computing. Unfortunately, “cloudwashing” …
Britpop
Blur password manager exposes 2.4M user details on misconfigured AWS instance
siliconangle.com - Duncan Riley
Abine Inc., the company behind the Blue password manager and DeleteMe privacy-protection service has admitted that it accidentally exposed data …
Salem
'Town of Salem' game suffers data breach exposing 7.6 million user details
ZDNet - Catalin Cimpanu
Game maker has yet to alert users outside a short forum post. A hacker has stolen the personal details of 7.6 million users of browser-based game the …
Google Play
This data-stealing Android malware infiltrated the Google Play Store, infecting users in 196 countries
ZDNet - Danny Palmer
At least 100,000 people downloaded apps distributing MobSTSPY malware, which also leverages a phishing attack to steal account credentials from …
FAA
Hackers Threaten to Dump Insurance Files Related to 9/11 Attacks
VICE - Joseph Cox
The Dark Overlord appears to be trying to capitalize on conspiracy theories about the September 11 attacks. The news is the latest public extortion attempt from the group known as The Dark Overlord, which
Top 10
OWASP: Weak passwords are biggest threat to IoT
portswigger.net
Insecure credentials is number one risk for IoT top 10 update An update to the OWASP Internet of Things (IoT) top 10 vulnerabilities has been …