The Technology blog and podcast

Security Now! podcast 836: The Meris Botnet

We are going to talk about this botnet thanks to this article by Krebs On Security called KrebsOnSecurity Hit By Huge New IoT Botnet “Meris” but I did hear the end of this week’s Security Now which I intend to listen to and may have other thoughts put in to the notes for the podcast which I’m now working on.

The description of this program is taken from This GRC Security Now page which you can download the program from.

---

This week we’re going to note the apparent return of REvil–not nearly as dead and gone as many hoped. We’re going to look at a new and quite worrisome 0-day exploitation of an old Windows IE MHTML component. Even though IE is gone, it’s guts live on in Windows. We’re going to share the not surprising but still interesting results of security impact surveys taken of IT and home workers, after which we’ll examine a fully practical JavaScript based Spectre attack on Chrome. I have bit of closing the loop feedback to share and a surprisingly serious question about the true nature of reality for us to consider. Then we’ll finish out today’s podcast by looking at the evolution of Internet DoS attacks through the years which recently culminated in the largest ever seen, most problematic to block and contain RPS DDoS attack where RPS stands for Requests Per Second.

---

I urge people to download and listen to this show (57mb) as it may contain news that may be of importance for you. Most importantly, you should listen to the final segment, but I’m not going to hold your hand, so if this interests you, go for it. Enjoy!

Comments (0)

Its time to get your windows update on as well as other software as well

Windows and other related software need to be updated. Krebs On Security and Trend Micro have all of the details.

Trend Micro indicates that there are 66 patches throughout the Windows ecosystem which include 3 critical and 11 reported through the ZDI.

Besides IOS 14.8 released on Monday, Google Chrome also has an update which fixes 9 vulns with 2 actively exploited in the wild.

Please read the article in which you’re interested in, both have good information to provide.

Comments (0)

Apple’s California Event wrapup

This page is the writeup of yesterday’s event. I heard a portion of it through Twit yesterday, but I was getting tired when it replayed and they also had other shows.

The writeup is quite interesting, but like the author of the post, I’ve got my 11 which was baught last year, and I don’t know if we’re going to get new phones or not.

I don’t have a watch, but right now I’m passing on one. Never had an Ipad, as I use a Windows PC as well.

Let’s see what you decided on getting after you read this accompanying article on IOS and other apple things.

Comments (0)

The Security box, podcast 61: CSAM gets a pushback, news notes and other stuff too

The 125.21mb file is here. The RSS is here.

Here are the show notes.

---

Welcome to the Security Box, podcast 61. On this podcast, let’s discuss the updates on CSAM as it pertains to Apple. We’ll have news, notes and more.

Topics

• Under fire from privacy advocates, Apple delays controversial photo scanning plan Cyberscoop

News Notes

• “FudCo” Spam Empire Tied to Pakistani Software Firm Krebs On Security
• 15-Year-Old Malware Proxy Network VIP72 Goes Dark Krebs on Security
• Microsoft: Attackers Exploiting Windows Zero-Day Flaw Krebs on Security
• IRS used vape store receipts to gather evidence against alleged Ukrainian scammer Cyberscoop

Comments (0)

There was an event today, which I did see an email about from apple but didn’t read it. We’ll see if a blog post comes up on it but here’s some news from AppleVis about this important update.

Ahead of tomorrow’s “California streaming” event, Apple has released iOS 14.8, iPadOS 14.8, macOS 11.6, and watchOS 7.6.2. The main changes in these releases are two security updates. Apple has also released a security update for macOS Catalina, however, this has just the one security fix.

Comments (0)

The Security box, podcast 60: The Security Landscape as a whole from broadcasting software and web site services to T-Mobile’s Fiasco

This is the link for the download to last week’s program. Its been a busy time here at the JRN, but I’ll be doing my best to try and do some serious blogging of things I’ve read and try to get back in to things. The file size is 124.5mb. I hope you’ll enjoy the program as much as I have bringing it to you.

---

What has changed on the security landscape? We learn about T-Mobile’s recent failure, and even web sites are braught up as well as broadcasting software among other things. This turned out to be a very interesting show. What do you think has changed? What have we done wrong? What do you think it’ll take to fix it if it can be fixed at all? No news notes this week, but they’ll be back next week.

Comments (0)

supporters webpage

Hi.
I have a supporters/ partners webpage.
It can be found here.
https://wp.me/P1ssMG-1v6
Currently I have the blind perspective and top tech tidbits magazine listed.
Sadly perspective hasn’t returned a request but tidbits has.
The site will be featured in the next issue as a 1 off and this site is classified as a supporter/ partner.
www.toptechtidbits.com/partners.html is the site for the profiles.

I will be working on more casts but these may take a bit.

Comments (0)

The Security box, podcast 59: Scott Schober, The Q2 Intelligence Report, News Notes and plenty of commentary

Hello folks,

Welcome to podcast 59 of the security box. It was recorded on September 2, 2021.

This is our longest podcast to date, but it is well worth the listen. I really liked the interview I did with Scott, but the podcast really took a turn after news notes.

The show notes with all of the links follow.

---

Hello folks, welcome to the Security box, podcast 59. On this edition of the program we have two different prerecorded segments for you.

First, we interview Scott Schober of Berkeley Varitronics Systems, Inc. He’s written various books which we talk about, as well as some of what is going on in the security landscape.

Next, we have a talk that was done by Phishlabs, who did the Quarter 2 Phishing Trends report.

To top it all off, we’ll have news and notes from around the landscape as well as questions and comments after each segment if any.

>

BV Systems
• Scott’s Web Site
• new-quarterly-threat-trends-intelligence-report-now-available Phishlabs

News Notes from around the web

• FBI warns that Hive ransomware hackers are calling victims by phone Cyberscoop
• What the Norton-Avast Merger Means for Cybersecurity Trend Micro
• FCC proposes record $5 million robocall fine for voter suppression scam Cyberscoop
• Poly Network fully recovers assets stolen in unusual $600M cryptocurrency hack Cyberscoop
• Microsoft Azure vulnerability exposed thousands of cloud databases Cyberscoop
• Scammers impersonate Europol chief in an effort to defraud Belgians Cyberscoop

Thanks for listening!

---

Don’t have RSS? No problem! Download our 245.1mb file which you can find by using this link. I hope you enjoy the program and thanks again for listening!

Comments (0)

go to sections menu

---