More Log4j News
December 16 2021Log4j is being exploited by all sorts of attackers, all over the Internet:
At that point it was reported that there were over 100 attempts to exploit the vulnerability...
Read more
On the Log4j Vulnerability
December 14 2021It’s serious:
The range of impacts is so broad because of the nature of the vulnerability itself. Developers use logging frameworks to keep track of what happens in a...
Read more
Friday Squid Blogging: The Far Side Squid Comic
December 10 2021The Far Side is always good for a squid reference. Here’s a recent one. As usual, you can also use this squid post to talk about the security stories in...
Read moreLaw Enforcement Access to Chat Data and Metadata
December 10 2021A January 2021 FBI document outlines what types of data and metadata can be lawfully obtained by the FBI from messaging apps. Rolling Stone broke the story...
Read moreGoogle Shuts Down Glupteba Botnet, Sues Operators
December 9 2021Google took steps to shut down the Glupteba botnet, at least for now. (The botnet uses the bitcoin blockchain as a backup command-and-control mechanism, making it hard to get...
Read moreNew German Government is Pro-Encryption and Anti-Backdoors
December 8 2021I hope this is true:
According to Jens Zimmermann, the German coalition negotiations had made it “quite clear” that the incoming government of the Social Democrats (SPD), the Greens...
Read more
Someone Is Running Lots of Tor Relays
December 7 2021Since 2017, someone is running about a thousand — 10% of the total — Tor servers in an attempt to deanonymize the network:
Grouping these servers under the KAX17...
Read more
Thieves Using AirTags to “Follow” Cars
December 6 2021From Ontario and not surprising:
Since September 2021, officers have investigated five incidents where suspects have placed small tracking devices on high-end vehicles so they can later locate and...
Read more
Recent Comments