Here are the 'most clicked' phishing email templates that trick victims - TechRepublic

Here are the 'most clicked' phishing email templates that trick victims - TechRepublic

https://www.techrepublic.com/article/here-are-the-most-clicked-phishing-email-templates-that-trick-victims/

‘It Can’t Be True.’ Inside the Semiconductor Industry’s Meltdown - Bloomberg

‘It Can’t Be True.’ Inside the Semiconductor Industry’s Meltdown - Bloomberg: "like Prescher more than a year later, the Graz team was skeptical this was a real flaw. Gruss recalls telling Fogh that the chipmakers would have uncovered such a glaring security hole during testing and would never have shipped chips with a vulnerability like that.



"Despite Fogh’s encouragement, the Graz researchers still didn’t think attacks would ever work in practice. "That would be such a major f*ck-up by Intel that it can’t be possible," Schwarz recalled saying. So the team didn’t dedicate much time to it."



'via Blog this'

How the industry-breaking Spectre bug stayed secret for seven months - The Verge

How the industry-breaking Spectre bug stayed secret for seven months - The Verge: "“In the ‘90s we used to think one-vulnerability, one-vendor, and that was the majority of the vulnerabilities you saw. Now, almost everything has some multi-party coordination element.” says Moussouris. “This is just what multi-party disclosure looks like.”"



'via Blog this'

How the industry-breaking Spectre bug stayed secret for seven months - The Verge

How the industry-breaking Spectre bug stayed secret for seven months - The Verge: "(Fogh said it was clear from the beginning that any workable bug would be disastrous. “When you start looking into something like this, you know already that it’s really bad if you succeed,” he told me. After the Meltdown and Spectre releases and the ensuing chaos, Fogh has decided not to publish any of his further research on the topic.)"



'via Blog this'

How the Meltdown Vulnerability Fix Was Invented - IEEE Spectrum

How the Meltdown Vulnerability Fix Was Invented - IEEE Spectrum: "And here, thanks to the gang at Graz is Meltdown in action:"



'via Blog this'

Interactive map shows which San Diego areas have the worst air quality

Interactive map shows which San Diego areas have the worst air quality

http://www.sandiegouniontribune.com/news/data-watch/sd-me-ozone-map-20180130-story.html

ESET Mac

macOS users version 10.13 (High Sierra)

1. Upgrade to macOS version 10.13.3 or later as soon as possible.
    
2. (optional) Following the upgrade, you can uninstall and install the most recent version of your ESET product for macOS to ensure that you do not experience errors. If you are unable to uninstall, you may need to start macOS in Safe Boot Mode. 

https://support.eset.com/alert6654/

Blockchain: so much bigger than bitcoin… | Technology | The Guardian

Really?

https://www.theguardian.com/technology/2018/jan/28/blockchain-so-much-bigger-than-bitcoin

The Follower Factory - The New York Times

The Follower Factory - The New York Times

https://www.nytimes.com/interactive/2018/01/27/technology/social-media-bots.html

Meltdown & Spectre: Computing's 'Unsafe at Any ...

Comment...

https://www.darkreading.com/vulnerabilities---threats/meltdown-and-spectre-computings-unsafe-at-any-speed-problem/a/d-id/1330884?

Zoom H1 Handy Recorder | Zoom

Zoom H1 Handy Recorder | Zoom

Firmware update?

https://www.zoom-na.com/products/field-video-recording/field-recording/zoom-h1-handy-recorder

Sony eSupport - ICD-MX20 - Support

Sony eSupport - ICD-MX20 - Support

Check out voice activation 

https://esupport.sony.com/US/p/model-home.pl?mdl=ICDMX20

Rise in cryptomining malware impacts organizations worldwide - Help Net Security

Rise in cryptomining malware impacts organizations worldwide - Help Net Security

https://www.helpnetsecurity.com/2018/01/26/cryptomining-malware/

Blockchain's Bid to Rid the World of Data Breaches

https://www.bankinfosecurity.com/interviews/blockchains-bid-to-rid-world-data-breaches-i-3858

Tech firms let Russia probe software widely used by U.S. government

https://www.reuters.com/article/us-usa-cyber-russia/tech-firms-let-russia-probe-software-widely-used-by-u-s-government-idUSKBN1FE1DT

Cloud Outage Could Cause $19 Billion in Losses, Lloyd's Estimates

http://www.eweek.com/cloud/lloyd-s-estimates-the-impact-of-a-u.s.-cloud-outage-at-19-billion

Key Changes with the General Data Protection Regulation

Key Changes with the General Data Protection Regulation: "Under GDPR organizations in breach of GDPR can be fined up to 4% of annual global turnover or €20 Million (whichever is greater). This is the maximum fine that can be imposed for the most serious infringements e.g.not having sufficient customer consent to process data or violating the core of Privacy by Design concepts. There is a tiered approach to fines e.g. a company can be fined 2% for not having their records in order (article 28), not notifying the supervising authority and data subject about a breach or not conducting impact assessment. It is important to note that these rules apply to both controllers and processors -- meaning 'clouds' will not be exempt from GDPR enforcement."

'via Blog this'

How Hedge Funds (Secretly) Get Their Way in Washington - Bloomberg

How Hedge Funds (Secretly) Get Their Way in Washington - Bloomberg

https://www.bloomberg.com/news/features/2018-01-25/how-hedge-funds-secretly-get-their-way-in-washington

Meltdown & Spectre: Computing's 'Unsafe at Any ...

Meltdown & Spectre: Computing's 'Unsafe at Any ...

https://www.darkreading.com/vulnerabilities---threats/meltdown-and-spectre-computings-unsafe-at-any-speed-problem/a/d-id/1330884?_mc=sm%5Fdr&hootPostID=ff96617f8a907a7f676b4bbaeb2fb740

B&O speakers

Forgot to mention this  - some of the guys at work are saying the speakers are very good - so I googled them. They cost $160! So yes, they should be good!

http://www.neimanmarcus.com/B-O-Beoplay-P2-Personal-Bluetooth-Speaker/prod203730081/p.prod?ecid=NMCS__GooglePLA&utm_medium=CSE&utm_source=NMCS__GooglePLA&utm_campaign=BO

Bitcoin's gender divide could be a bad sign, experts say - Business - CBC News

Bitcoin's gender divide could be a bad sign, experts say - Business - CBC News: Google Analytics results put the divide at 96.57 per cent men to 3.43 per cent women.

Targeted Attacks on Speech-to-Text

[1801.01944] Audio Adversarial Examples: Targeted Attacks on Speech-to-Text

https://arxiv.org/abs/1801.01944

A new theory for why Americans can’t get a raise.

A new theory for why Americans can't get a raise.

https://slate.com/business/2018/01/a-new-theory-for-why-americans-cant-get-a-raise.html

Registration self-assessment | ICO

Registration self-assessment | ICO

https://ico.org.uk/for-organisations/register/self-assessment/

PayPal to Pay $7.7 Million to U.S. Over Alleged Sanctions Violations - WSJ

PayPal to Pay $7.7 Million to U.S. Over Alleged Sanctions Violations - WSJ: The U.S. Treasury Department disclosed on Wednesday a $7.7 million settlement with eBay Inc. EBAY 0.48% unit PayPal Inc. over alleged sanctions violations by the electronic payments company.

Cybersecurity | Homeland Security

Cybersecurity | Homeland Security: On January 5, 2017, the U.S. Department of Commerce and the U.S. Department of Homeland Security released a draft report to President Trump in response to the Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure issued on May 11, 2017.

The Unfalsifiability of Security Claims - Microsoft Research

The Unfalsifiability of Security Claims - Microsoft Research: "when justifications are unfalsifiable, deciding the relative importance of defensive measures reduces to a subjective comparison of assumptions"



'via Blog this'

Privacy Rules for Uber | HuffPost

Privacy Rules for Uber | HuffPost: "But the recent outcry over privacy, news of the “God View,” and the threats to journalists reveal a problem that will not solve itself: There should be privacy law to regulate Uber and other companies in the ride-sharing industry." 2014



'via Blog this'

Android Malware in gaming apps on Play Store downloaded 4 million times

Android Malware in gaming apps on Play Store downloaded 4 million times

https://www.hackread.com/android-malware-in-gaming-apps-on-play-store/

Too much business travel can lead to depression, anxiety and trouble sleeping, study says - LA Times

Too much business travel can lead to depression, anxiety and trouble sleeping, study says - LA Times

http://www.latimes.com/business/la-fi-travel-briefcase-health-study-20180113-story.html

Echoes of History: Understanding German Data Protection | Bertelsmann Foundation

Echoes of History: Understanding German Data Protection | Bertelsmann Foundation

http://www.bfna.org/research/echos-of-history-understanding-german-data-protection/

GDPR, Part I: History Of European Data Protection Law - Data Protection - Worldwide

GDPR, Part I: History Of European Data Protection Law - Data Protection - Worldwide

http://www.mondaq.com/unitedstates/x/643052/data+protection/GDPR+Part+I+History+of+European+Data+Protection+Law

Call For Papers – 12th international CARO Workshop

Call For Papers – 12th international CARO Workshop: The 12th International CARO Workshop will be held on�the 23rd and 24th of May 2018 in Portland, OR, USA (*). The main theme of the workshop will be:

WANNA SHARE…? No? Privacy data is not for sharing either…

WANNA SHARE…? No? Privacy data is not for sharing either…

https://share.omada.net/dist/mail/share.html?gclid=EAIaIQobChMI_Z2ivNTq2AIVQnViCh1lzQQuEAEYASAAEgIGMvD_BwE

Hacker Infects Gas Pumps with Code to Cheat Customers | Threatpost | The first stop for security news

Hacker Infects Gas Pumps with Code to Cheat Customers | Threatpost | The first stop for security news

https://threatpost.com/hacker-infects-gas-pumps-with-code-to-cheat-customers/129599/

The Truth About The Deloitte Security Breach

The Truth About The Deloitte Security Breach 

"A single administrator account with access to the Azure implementation was guarded only by a username and password, without any two-factor-authentication(2FA). Attackers stole this administrator's credentials and used them to leverage access to the entire email system."

https://blog.safe-t.com/truth-about-deloitte-security-breach

10 Insanely Good Reasons You Should Publish On Medium | WordStream

10 Insanely Good Reasons You Should Publish On Medium | WordStream: "However, publishers are still finding and adding new contributors to their sites. How? By scouting for popular authors on Medium."



'via Blog this'

You can now unlock your iPhone 5S for free — Quartz

You can now unlock your iPhone 5S for free — Quartz: "As long as the AT&T locked iPhone hasn’t been reported stolen, hasn’t been “associated with fraudulent activity,” and isn’t currently active on a different AT&T customer’s account you can unlock the phones through its website here."

Someone is touting a mobile, PC spyware platform called Dark Caracal to governments • The Register

Someone is touting a mobile, PC spyware platform called Dark Caracal to governments • The Register: "The EFF and Lookout are trying to find out who exactly is running and using the Dark Caracal network. An update is expected in the summer, once attribution can be made with some certainty"



'via Blog this'

Security Passcode for Your Wireless Account - Wireless Support

Security Passcode for Your Wireless Account - Wireless Support: The security passcode helps protect your wireless account. It’s different from your password to sign in, and it’s not related to your device or voicemail.

(20) Crucial Elements of an Incident Response Plan | LinkedIn

(20) Crucial Elements of an Incident Response Plan | LinkedIn: "Every company will suffer a security incident someday, but not all companies are prepared for it, and preparation will determine what impact a security incident will have on your company. "



'via Blog this'

(10) How does Bitcoin Blockchain work and what are the rules behind it? - Quora

(10) How does Bitcoin Blockchain work and what are the rules behind it? - Quora: Store your data on the blockchain and it is incorruptible. [I am not convinced.]

(10) How does Bitcoin Blockchain work and what are the rules behind it? - Quora

(10) How does Bitcoin Blockchain work and what are the rules behind it? - Quora: Store your data on the blockchain and it is incorruptible. [I am not convinced.]

Coalition for Cybersecurity Policy & Law

Check this group out...

https://www.cybersecuritycoalition.org/

The Problems with Seeking and Avoiding True Attribution to Cyber Attacks – Robert M. Lee

The Problems with Seeking and Avoiding True Attribution to Cyber Attacks – Robert M. Lee: Attribution to cyber attacks means different things to different audiences. In some cases analysts only care about grouping multiple intrusions together to identify an adversary group or their campaign. This helps analysts identify and search for patterns.

DROWN Attack

DROWN Attack: DROWN allows attackers to break the encryption and read or steal sensitive communications, including passwords, credit card numbers, trade secrets, or financial data. Our measurements indicate 33% of all HTTPS servers are vulnerable to the attack.

MIT And BU Researchers Uncover Critical Security Flaw In $2B Cryptocurrency IOTA

MIT And BU Researchers Uncover Critical Security Flaw In $2B Cryptocurrency IOTA: IOTA, a�$2 billion cryptocurrency that�supports Internet of things (IoT) transactions, was�shown to have “serious weaknesses” according to a report�recently released by researchers at MIT and Boston University

Juniper Firmware: New Crypto Flaw Found - BankInfoSecurity

Juniper Firmware: New Crypto Flaw Found - BankInfoSecurity: Eight years after a crypto backdoor was added to the ScreenOS firmware that runs Juniper Networks' NetScreen firewalls, among other devices, the U.S. networking giant has promised to eliminate the vulnerability and moved to reassure customers that its products are now safe to use (see Juniper Devices Are Under Attack).

50 Amazing Internet Security Blogs You Should Be Following [Updated]

50 Amazing Internet Security Blogs You Should Be Following [Updated]: If you are concerned about your online security (and you should), it’s essential to know which are the best cyber security blogs that could help you stay informed about the most recent trends in the threat landscape.



Now 69!

Cyber trust and security – Megatrends by HP

Cyber trust and security – Megatrends by HP

https://hpmegatrends.com/cyber-trust-and-security-dc053abb1cca

2015 Piaggio MP3 500 ABS, 3 Wheel Scooter | Cycle World

Apparently these are very big in France, and in Paris in particular.

https://www.cycleworld.com/2014/07/07/2015-piaggio-mp3-500-abs-first-ride-three-wheel-scooters-review-photos

Intel Unveils 'Breakthrough' Quantum Computer - ExtremeTech

Intel Unveils 'Breakthrough' Quantum Computer - ExtremeTech

https://www.extremetech.com/computing/261734-intel-unveils-new-quantum-computer-declares-quantum-breakthrough

Criminologists Are Asking Jeff Sessions To Release FBI Crime Data | FiveThirtyEight

Criminologists Are Asking Jeff Sessions To Release FBI Crime Data | FiveThirtyEight

https://fivethirtyeight.com/features/criminologists-are-asking-jeff-sessions-to-release-fbi-crime-data/

AFRL/RIK Division and Branch Offices > Wright-Patterson Air Force Base > Display

AFRL/RIK Division and Branch Offices > Wright-Patterson Air Force Base > Display:



"AFRL/RIKD - Information Grid and Systems Contracting Branch

Mission Statement
The R&D Contracts Branch reviews adequacy of assigned purchase request packages for contract action. Assists engineering personnel in finalizing Statements of Work, specification and data requirements. Publishes "Notices of Contract Action," and/or "Notice of Award" in the FEDBIZOPPS as required by regulation. Selects sources for solicitation and prepares Request for Proposals (RFPs), receives and evaluates proposals, negotiates, request final proposal revisions or makes awards without discussion if possible, performs source selection and awards appropriate contractual instruments. Negotiates and awards contracts resulting from Broad Agency Announcements (BAAs), the Small Business Innovation Research (SBIR) national solicitation, and the Small Business Minority 8A Program. Conducts Contract and Business Clearance Approval for all contractual actions within the approved thresholds. Distributes all contractual documents. Performs contract management of all contracts issued. Terminates assigned contracts as required. Performs final contract closeout and all contract retirement functions. Inputs appropriate acquisition data into the AFMC automated management system database."



'via Blog this'

Scientists Find New Clues About Mysterious Origins of Humans in Neanderthal Sex and Ape DNA

Scientists Find New Clues About Mysterious Origins of Humans in Neanderthal Sex and Ape DNA

http://www.newsweek.com/scientists-seek-clues-about-mysterious-origins-humans-neanderthal-sex-and-774893

ICS-CERT Advice on AV Updates Solid, But Impractical | SecurityWeek.Com

ICS-CERT Advice on AV Updates Solid, But Impractical | SecurityWeek.Com: "The U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) has offered some advice on how antivirus software should be updated in industrial environments"



'via Blog this'

Across the USA, governments have a gender hypocrisy gap | Fox News

Across the USA, governments have a gender hypocrisy gap | Fox News

http://www.foxnews.com/opinion/2017/11/17/across-usa-governments-have-gender-hypocrisy-gap.html

macos - Stop Pulse Secure from opening at startup Mac - Stack Overflow

Worked for me: macos - Stop Pulse Secure from opening at startup Mac - Stack Overflow: "There is no system configuration switch on the Mac to prevent auto startup of Pulse Secure.

So we have to using Automater, create an app to run the following script during system boot:"



'via Blog this'

Facial recognition...

Gizmodo article from Mar 2015

https://gizmodo.com/man-its-still-so-easy-to-fool-facial-recognition-secur-1692220368

March 2017

http://www.vocativ.com/420681/tools-to-beat-facial-recognition/index.html

From Survivopedia

http://www.survivopedia.com/6-ways-to-defeat-facial-recognition/ 

(Looks like militia men)

Quartz - a new camouflage

https://qz.com/878820/new-camouflage-promises-to-make-you-unrecognizable-to-facial-recognition-technology/ 

Youtube video

https://www.youtube.com/watch?v=ssbAfSExJ-Q 

Software company fighting against facial recognition

https://thinkprogress.org/d-id-startup-answer-to-facial-recognition-tech-c8f2d417b4d/

Solved: xr11 v3 remote - program 30 second skip - Xfinity Help and Support Forums - 2800046

Will try this...http://forums.xfinity.com/t5/X1/xr11-v3-remote-program-30-second-skip/td-p/2800046

Pinterest wall ideas

Pretty cool...https://www.pinterest.com/pin/23995810484752654/

How to Make a Podcast Feed from Blogger

And other handy tips....

https://www.lifewire.com/make-podcast-feed-from-blogger-1616434

Meltdown and Spectre – enterprise action plan | Rendition Infosec

For consideration... https://www.renditioninfosec.com/2018/01/meltdown-and-sceptre-enterprise-action-plan/

San Diego paid out almost $278,000 for security for Trump's border wall build - LA Times

San Diego paid out almost $278,000 for security for Trump's border wall build - LA Times

http://www.latimes.com/local/lanow/la-me-ln-sd-border-wall-20180106-story.html

Rugstc 2x3 Pak Persian Ivory Area Rug, Hand-Knotted,Floral with Silk/Wool Pile | eBay

For example...https://www.ebay.com/itm/Rugstc-2x3-Pak-Persian-Ivory-Area-Rug-Hand-Knotted-Floral-with-Silk-Wool-Pile/253268391430?hash=item3af7f8f606:g:wWoAAOSwAHtaGf8g

Bigso Marten Navy Paper Drawers | The Container Store

Size?

https://www.containerstore.com/s/office/desktop-collections/navy-marten-collection/bigso-marten-navy-paper-drawers/123d?productId=11001121

Global Threat Intelligence Center 2017 Q3 Threat Intelligence Report

Global Threat Intelligence Center 2017 Q3 Threat Intelligence Report

https://www.nttsecurity.com/en-us/gtic-2017-q3-threat-intelligence-report

What’s the Best Way to Take an Afternoon Nap? - WSJ

What's the Best Way to Take an Afternoon Nap? - WSJ

https://www.wsj.com/articles/whats-the-best-way-to-take-an-afternoon-nap-1505743336

Cybersecurity in 2018: What will the new year bring?

Cybersecurity in 2018: What will the new year bring?: "David Harley, senior research fellow at ESET, explained that the number of networked devices, from fridges to toys, could create more opportunities for bad actors, widening the attack surface."



'via Blog this'

Long Jail Terms for Sexual Offenders Do Little Good - The Chronicle of Higher Education

Long Jail Terms for Sexual Offenders Do Little Good - The Chronicle of Higher Education

https://www.chronicle.com/article/Long-Jail-Terms-for-Sexual/236858

Toxic masculinity is probably destroying the planet. | Grist

Toxic masculinity is probably destroying the planet. | Grist

If gender roles are toxic for people and the planet, it's time to rethink them.

http://grist.org/briefly/toxic-masculinity-is-probably-destroying-the-planet/

Taming Cybersecurity Regulation Mayhem

Taming Cybersecurity Regulation Mayhem

https://www.rsa.com/en-us/resources/taming-cybersecurity-regulation-mayhem?utm_source=twitter&utm_medium=social&utm_campaign=corpcomms&utm_content=ebook

Meltdown and Spectre

Meltdown and Spectre: These hardware bugs allow programs to steal data which is currently processed on the computer.

How to Benchmark Your Windows PC: 5 Free Benchmarking Tools

How to Benchmark Your Windows PC: 5 Free Benchmarking Tools

https://www.howtogeek.com/111733/how-to-benchmark-your-windows-pc-5-free-benchmarking-tools/

21st Century Oncology Faces $2.3M HIPAA Settlement ...

21st Century Oncology Faces $2.3M HIPAA Settlement ...: "21st Century Oncology and the US Department of Health and Human Services Office for Civil Rights reached a $2.3 million settlement agreement, following a breach of the company's network SQL database and theft of the medical data and Social Security numbers of millions of patients."



'via Blog this'

The NSA's top talent is leaving because of low pay and flagging morale

The NSA's top talent is leaving because of low pay and flagging morale...

https://www.washingtonpost.com/world/national-security/the-nsas-top-talent-is-leaving-because-of-low-pay-and-battered-morale/2018/01/02/ff19f0c6-ec04-11e7-9f92-10a2203f6c8d_story.html

Does Meeting Compliance Include File Servers? - Enterprise Network Security Blog from ISDecisions

Does Meeting Compliance Include File Servers? - Enterprise Network Security Blog from ISDecisions

https://www.isdecisions.com/blog/it-management/does-meeting-compliance-include-file-servers/

Man, It's Still So Easy to Fool Facial Recognition Software

Still true?

https://gizmodo.com/man-its-still-so-easy-to-fool-facial-recognition-secur-1692220368