Tuesday, March 23, 2021

What I am Reading 3/23/3021

IT Security Guru -  IT Admin sentenced after mass-deleting company accounts -

The client was not satisfied with Kher’s work, who was fired once this feedback reached the head office. Two months after returning to India, Kher took revenge on his former company, by infiltrating the firm’s servers and deleting over 80% of the employee accounts. Out of 1,500 Microsoft accounts, 1,200 were wiped.

AP -  Casting a wide intrusion net: Dozens burned with single hack -

Nimble, highly skilled criminal hackers believed to operate out of Eastern Europe hacked dozens of companies and government agencies on at least four continents by breaking into a single product they all used. 

The victims include New Zealand’s central bank, Harvard Business School, Australia’s securities regulator, the high-powered U.S. law firm Jones Day — whose clients include former President Donald Trump — the rail freight company CSX and the Kroger supermarket and pharmacy chain. Also hit was Washington state’s auditor’s office, where the personal data of up to 1.3 million people gathered for an investigation into unemployment fraud was potentially exposed.

The two-stage mega-hack in December and January of a popular file-transfer program from the Silicon Valley company Accellion highlights a threat that security experts fear may be getting out of hand: intrusions by top-flight criminal and state-backed hackers into software supply chains and third-party services. 

IT Security Guru - Royal Dutch Shell are the latest victim of the Accellion breach -

Royal Dutch Shell has revealed that they have been affected by the Accellion FTA file transfer appliance hack. Last week Shell posted a company statement which said, “Shell has been impacted by a data security incident involving Accellion’s File Transfer Appliance. Shell uses this appliance to securely transfer large data files.”

Al Jazeera - Bitcoin’s dirty secret: ‘This thing is taking a lot of energy’

The energy used by the network of computers that power the digital coin is comparable to that of many developed countries and rivals the emissions from major fossil-fuel users and producers such as American Airlines Group Inc. and ConocoPhillips, according to a report by Bank of America Corp. The level of emissions, which have risen alongside a spike in Bitcoin’s price, have grown by more than 40 million tons in the past two years. And when the digital asset is trading around $50,000 — which it’s done for much of this year — it uses about 0.4% of global energy consumption.

TechCrunch - Biden will nominate Big Tech critic and antitrust star Lina Khan to the FTC -

The White House confirmed its intentions to nominate Lina Khan to the FTC Monday, sending a clear signal that his administration will break from the Silicon Valley-friendly precedents of the Obama era. Politico first reported Biden’s planned nomination of Khan, which will be subject to Senate confirmation, earlier this month.

Lina Khan is a star of the antitrust movement, insofar as a topic like regulating big business can produce one. Khan is best known for a paper she published as a law student in 2017 called “Amazon’s Antitrust Paradox.” The paper argues that thinking about what qualifies as monopolistic behavior hasn’t kept pace with how modern businesses operate, particularly within the tech sector.

Data Breach Today - Swiss Firm Says It Accessed SolarWinds Attackers' Servers -

Swiss cybersecurity firm Prodaft says it has accessed several servers used by an advanced persistent threat group tied to the SolarWinds supply chain attack. These attackers continue to target large corporations and public institutions worldwide, with a focus on the U.S. and the European Union, the researchers say.

Prodaft says the APT group, which it calls the SilverFish group, "has designed an unprecedented malware detection sandbox formed by actual enterprise victims, which enables the adversaries to test their malicious payloads on actual live victim servers with different enterprise AV and EDR solutions, further expanding the high success rate of the SilverFish group attacks." 

Wall Street Journal - Hospitals Hide Pricing Data From Search Results -

Hospitals that have published their previously confidential prices to comply with a new federal rule have also blocked that information from web searches with special coding embedded on their websites, according to a Wall Street Journal examination.

The information must be disclosed under a federal rule aimed at making the $1 trillion sector more consumer friendly. But hundreds of hospitals embedded code in their websites that prevented Alphabet Inc.’s GOOG +1.41% Google and other search engines from displaying pages with the price lists, according to the Journal examination of more than 3,100 sites.




No comments: