Category Archives: Security Theater

A new approach to Security? Post-Infection Thread Hunting

Reality update: A New Paradigm For Cyber Threat Hunting … :

Threat hunting requires a shift to a post-infection mentality and sets of tools such as SIEM (security incident and event management), EDR (endpoint detection and response) and NDR (network detection and response). Even with these tools, threat hunting is a challenge for a variety of reasons. For one thing, these solutions are “heavy.” They require some kind of data collection that involves installing agents on endpoints and/or hardware placed on networks. This can get quite expensive for a large enterprise.

Do good and talk about it might bring you to jail in the US

Reality update: Marcus Hutchins, WannaCry-killer, hit with four new charges by the FBI … :

I do not think the whole story is clear yet, but my intuition tells me to doubt the US version of this story – and I know many people are thankful to Mr. Hutchins for stopping Wannacry, however accidentally that may have been. But what is going on in the court room here? I can’t tell. But the sad part is – as long as it remains unclear, this guy is another Snowden, locked away from home:  

Hutchins, who is living in Los Angeles on bail, is unable to leave the United States since last year due to his pending criminal charges. Hutchins stormed to fame and hailed as a hero earlier last year when he accidentally stopped a global epidemic of the WannaCry ransomware attack that crippled computers all across the world.

Vacation in Russia anybody? Your VPN may be forbidden – and you could be fined…

Reality update: Russia to Fine Search Engines for Linking to Banned VPN services … :

According to the bill, individuals who break the law will face fine of 3,000 to 5,000 rubles (approx. $48 to $80), officials will face fines up to 50,000 rubles (approx. $800), and legal entities could be fined 500,000 to 700,000 (nearly $8,019 to $11,227), reports Russian State Duma Government site.

Side channel attacks via CSS in FF and Chrome…

Side-channel attacking browsers through CSS3 features | Security Research – Evonide https://www.evonide.com/side-channel-attacking-browsers-through-css3-features/

With the staggering amount of features that were introduced through HTML5 and CSS3 the attack surface of browsers grew accordingly. Consequently, it is no surprise that interactions between such features can cause unexpected behavior impacting the security of their users. In this article, we describe such a practical attack and the research behind it.

4 Billion Euro GDPR Case Filed Against Facebook et al

#DSGVO #:GDPR:  Max Schrems files first cases under GDPR against Facebook and Google … :

Three complaints worth €3.9 billion were filed in the early hours of Friday morning against Facebook and two subsidiaries, WhatsApp and Instagram via data regulators in Austria, Belgium and Hamburg. Another complaint worth €3.7 billion was filed with French data protection authority France CNIL in the case of Google’s Android operating system for smartphones.

You can and should support Max Schrems and NOYB (None Of Your Business) on their website: