Supported by 1Password and Escape.
Hi folks,
There weren't a lot of articles that jumped out to me this week, so for once this should be a quick read :-)
But there were a lot of stories that fell under the "issues" category, so make sure to skim that list to see if you use any of the affected software.
Enjoy your Friday!
Not a real concern for most people, but if you run your own data center or work for a cloud provider it's definitely worth paying attention to.
In short, these vulnerabilities allow you to hijack PXE (aka netboot) installs, where servers pull the OS image they want to install from a remote server. An attacker would only need access to the network, no local foothold or high-level privileges, to trick the PXE system into installing a backdoored version of the OS.
With all the damage that the MOVEit exploitation caused, this isn't the kind of news that I like to read. Not that I want any company to go bankrupt, mind you. But it just brings home to me that there aren't enough consequences to companies for writing insecure software, and too few incentives for doing it right.
Dive by into key insights on security, design, performance, and reliability of public APIs revealed through Escape’s extensive scanning process. (Sponsored)
Not new, but interesting to see yet another warning about this. I also didn't know that there's now a law in the US that prohibits federal entities from using foreign drones.
Interested read on the link between casino's and cybercrime, especially money laundering. It makes sense, but I never really thought about it. Also interesting to read about the role of the pandemic, which caused many casino's previously catering to tourists being switched over to focus on cybercrime.
I'm not going to write a long marketing-heavy paragraph on this one. I just love using 1Password. The UX, the support, the integrations, it all works wonderfully. Highly recommended. (Sponsored)