BuzzSec

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories warning of critical security flaws affecting products from Sewio, InHand Networks, Sauter Controls, and Siemens. The most severe of the flaws relate to Sewio's RTLS Studio, which could be exploited by an attacker to "obtain unauthorized access to the server, alter from The Hacker News https://thehackernews.com/2023/01/cisa-warns-for-flaws-affecting.html

Please join us to work through a few real-life incidents and discuss the lessons learned from those events. from SBS CyberSecurity https://sbscyber.com/resources/articleType/ArticleView/articleId/3937/hacker-hour-responding-to-common-cyber-incidents

This is a current list of where and when I am scheduled to speak: I’m speaking at Capricon , a four-day science fiction convention in Chicago. My talk is on “The Coming AI Hackers” and will be held Friday, February 3 at 1:00 PM. The list is maintained on this page . from Schneier on Security https://www.schneier.com/blog/archives/2023/01/upcoming-speaking-engagements-26.html

Booklist reviews A Hacker’s Mind : Author and public-interest security technologist Schneier ( Data and Goliath , 2015) defines a “hack” as an activity allowed by a system “that subverts the rules or norms of the system […] at the expense of someone else affected by the system.” In accessing the security of a particular system, technologists such as Schneier look at how it might fail. In order to counter a hack, it becomes necessary to think like a hacker. Schneier lays out the ramifications of a variety of hacks, contrasting the hacking of the tax code to benefit the wealthy with hacks in realms such as sports that can innovate and change a game for the better. The key to dealing with hacks is being proactive and providing adequate patches to fix any vulnerabilities. Schneier’s fascinating work illustrates how susceptible many systems are to being hacked and how lives can be altered by these subversions. Schneier’s deep dive into this cross-section of technology and humanity makes ...

I have been doing some research on Secure Email Gateways. The picture is not that pretty.  Below I will summarize what I found. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/ache-in-the-head-the-problems-with-your-not-so-secure-email-gateway

Popular short-form video hosting service TikTok has been fined €5 million (about $5.4 million) by the French data protection watchdog for breaking cookie consent rules, making it the latest platform to face similar penalties after Amazon, Google, Meta, and Microsoft since 2020. "Users of 'tiktok[.]com' could not refuse cookies as easily as accepting them and they were not informed in a from The Hacker News https://thehackernews.com/2023/01/tiktok-fined-54-million-by-french.html

Tainted VPN installers are being used to deliver a piece of surveillanceware dubbed EyeSpy as part of a malware campaign that started in May 2022. It uses "components of SecondEye – a legitimate monitoring application – to spy on users of 20Speed VPN, an Iranian-based VPN service, via trojanized installers," Bitdefender said in an analysis. A majority of the infections are said to originate in from The Hacker News https://thehackernews.com/2023/01/beware-tainted-vpns-being-used-to.html