
Jared's Technology Podcast Network
442 episodes — Page 7 of 9

The Security box, podcast 50: 62% of free services are abused
Welcome to the security box, podcast 50. On the big 50th episode, we've got quite a bit of news notes to cover this week. Besides that, we're continuing with Phishlabs and their ongoing rundown of the Q1 Intelligence Report, this time, talking about free tools and their abuse. We hope that users find this of interest like I did. Of course, the lines of communication are always open whether on the show or podcast. Topic: 62% of Phishing Sites Abuse Free Tools or Services Phishlabs Sans News Bites Sans News Bites for June 25th, 2021 covers tons of stuff including Del, Vmware and more News Notes MyBook Users Urged to Unplug Devices from Internet Krebs on Security “I’m totally screwed.” WD My Book Live users wake up to find their data deleted Ars Technica Hackers are using bootleg copies of 'Grand Theft Auto V' game to mine Monero Cyberscoop Tulsa police say 18,000 files are leaked after Conti ransomware hack Cyberscoop NFC flaws let researchers hack an ATM by waving a phone Ars Technica via Wired John McAfee found dead after Spanish court approved extradition to US Cyberscoop Andrii Kolpakov, who supervised hackers for FIN7, sentenced to 7 years in prison Cyberscoop Ukrainian Police Nab Six Tied to CLOP Ransomware Krebs On Security First American Financial Pays Farcical $500K Fine Krebs on Security Russian hackers breached Microsoft customer support to try phishing targets in 36 countries Cyberscoop

the Security Box, podcast 48: Can you believe what is going on with Russia?
Thank you Michael in Tennessee for being our guest throughout the program! We really appreciate it. Welcome to the Security Box, podcast 48. On this edition of the podcast, we've got two topics for you. The first is probably one you can file in the "I can't believe I read this crap" department, while the second deals with Windows Update and what we had to look forward to there. We've got news notes with quite a number of very interesting items, as well as taking your calls, voice messages and stories to boot. Topics Adventures in Contacting the Russian FSB Krebs on Security June Patch Tuesday: Internet Explorer Finally Laid to Rest from Trend Micro and Microsoft Patches Six Zero-Day Security Holes from Krebs should be read for Patch Tuesday. Worth the read as usual. News and notes from around the landscape We may have a lot of the things listed here in articles and commentary on the blog. Feel free to check out the articles and have your voice heard. This is not a drill: VMware vuln with 9.8 severity rating is under attack Ars Technica Trickbot indictment demonstrates how one hacking tool built on older malware Cyberscoop Ransomware hits iConstituent, a service lawmakers use to communicate with voters Cyberscoop Biden revokes TikTok ban, issues new guidance for evaluating foreign apps Cyberscoop 47% Phishing Increase in Q1 Phishlabs blog Unpatched vulnerability in Samsung phones could let hackers read your messages Phone Arena MoviePass settles with the FTC over exposing private information, misleading consumers Cyberscoop RockYou2021 Breach: How to Keep Your Data Secure Now Lastpass For full show notes including articles we didn't cover but read, check the blog.

The Security box, podcast 47: Security in the forefront of everything we do
Welcome to the security box, podcast 47. On this podcast, we're going to talk about Security. A video which I found on Ted Talk's youtube channel will lead this discussion. We're also going to talk about an article from Lastpass talking about protecting your business from data breach trends. It talks about something we've talked about, supply chain attacks. Speaking of supply chain attacks, Jennifer talks about our top story from our show notes, and we'll address any concerns from that as well. We'll have news, notes, questions, comments and more. Want to leave a message by phone? Call 602-887-5198 to do so. Thanks so much for listening! Topics What do you think when you have Cybersecurity issues that keep croping up? Do you talk about your experience? Better cybersecurity starts with honesty and accountability is a Ted Talk done by Nadya Bartol which I think we need to talk about. Let's do so! Protect Your Business From These Dangerous Data Breach Trends is a Lastpass article which I think we need to talk about as well. Commentary from our top story from the News Notes program from last week News Notes FBI blames REvil gang for JBS ransomware hack as global meat supplier gets back to work Cyberscoop Fujifilm shuts down computer systems following apparent ransomware intrusion Cyberscoop Vulnerability in VMware product has severity rating of 9.8 out of 10 Ars Technica Q1 2021 Threat Trends & Intelligence Report Phishlabs Q1 2021 Threat Trends & Intelligence Report Phishlabs Latvian national charged with writing notorious Trickbot malware Tokyo Olympics organizers' data swept up in Fujitsu hack: report Cyberscoop SIM swapping victim alleges T-Mobile failed to stop $20,000 cryptocurrency scam Cyberscoop

The Anatomy of an attack: tech podcast 360
The Anatomy of an attack has been around for quite awhile. I think its within the last couple of years, and I think it is quite important now more than ever. I talk about what has happened with our staple of the box, and how it was an inbound call that started it, but thats not traditionally the case. Listen to this hour long webinar and let's talk.

TThe Security box, podcast 46: q-link wireless updates, ransomware isn't going anywhere, billions of dollars and more
Welcome to podcast 46 of the Security Box. On this podcast, Michael in Indiana is along with an update about a company we talked about in News Notes on podcast 39. We've got a topic dealing with a company that has been able to take advantage of the dark marketplace as they dominated this space very quietly since 2018. We've got a topic also on Ransomware forcing a major speaker manufacturer you all may be aware of, Bose. We'll have news, notes, questions, comments and more. During the program, it was announced that we would be switching telephone companies. Our new number is 602-887-5198. 623-263-8934 will give you this new number, probably for several days, but no more than that. Topics How Hydra, a Russian dark net market, made more than $1 billion in 2020 Cyberscoop Ransomware forced Bose systems offline, exposed personal data of 6 former employees Cyberscoop News Notes Shortages loom as ransomware hamstrings the world’s biggest meat producer Ars Technica Have I been Pwned goes open source, gets FBI data feed 9to5mac.com Fighting, screaming as alleged ATM scammer known as ‘The Shark’ is arrested in Mexico from Cyberscoop and Boss of ATM Skimming Syndicate Arrested in Mexico from Krebs on Security are covering the same thing in slightly different contexts. This is big news! Biden signs executive order to strengthen US cybersecurity from Ars Technica and Biden budget seeks $750 million to respond to SolarWinds compromises, plus billions more for cyber from Cyberscoop are related as Joe Biden seaks money to try and combat the horrific attacks of the past year. Actively exploited macOS 0-day let hackers take screenshots of infected Macs Ars Technica No, it doesn’t just crash Safari. Apple has yet to fix exploitable flaw Ars Technica IN Ars Technica Have something to say? Let's talk! Get in touch. 602-887-5198 or email/imessage/text. The choice is yours.

The Security box, podcast 45: 4 Vulns in Android, Conti ransomware and some news
Topics: 4 vulnerabilities under attack give hackers full control of Android devices Ars Technica Conti ransomware gang victimized US health care, first-responder networks, FBI says Cyber Scoop Irish officials analyze decryption tool as long recovery process from ransomware continues Cyber Scoop News and notes from around the landscape How to Tell a Job Offer from an ID Theft Trap Krebs On Security Recycle Your Phone, Sure, But Maybe Not Your Number Krebs On Security Live Wire is looking at changing telephone companies once again. This is more to benefit callers on the system. If we change companies, the telephone number I've been giving will change. I will announce more if we are changing.

The Security box, podcast 44 for March 19, 2021
Welcome to the Security box, podcast 44. On this episode of the program, its time to make sure we're all caught up on Windows Update and what may be important to you. Next, we'll talk about a task force that hopes to disrupt ransomware payments. We're not done with Experian yet, and we'll have a things to ponder on this particular article I read about their API which is apparently disabled for at least one vendor. We'll also have news, notes, commentary and questions from listeners if any, and yes, even podcast listeners can join the fun. Podcast listeners can dial 623-263-8934 to leave a voice message, just follow the prompts. Email, Imessage, text and whatsapp are all given throughout the show. Windows Update Windows Update is back, and Microsoft has given us only 54 different patches, but a lot of them are critical. 13 of them were from the ZDI program from Trend Micro. May Patch Tuesday Offers Relative Respite Trend Micro Microsoft Patch Tuesday, May 2021 Edition Things to ponder Looks like Experian is still being talked about. In this Things to Ponder, Experian API Exposed Credit Scores of Most Americans is the article which we'll be picking apart as your things to ponder. A true story of a telephone number not to call and why Jennifer is now along with a very interesting story, with a very interesting twist and yes, it is a true story. A task force that is out there to disrupt ransomware I'm happy to read articles like this one, and I want to talk about it as part of the program. Its not too old, but its something of value to all of us. KrebsOnSecurity has the details. Task Force Seeks to Disrupt Ransomware Payments is the article to read. News Notes Four men plead guilty to being go-to ‘bulletproof’ hosts for cybercriminals Cyberscoop Fintech Startup Offers $500 for Payroll Passwords Krebs on Security A Closer Look at the DarkSide Ransomware Gang Krebs on Security Ransomware Playbook: Defense in Depth Strategies to Minimize Impact Phishlabs DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized Krebs on Security Stop Ransomware Groups Who Weaponize Legitimate Tools Trend Micro Worried About Ransomware? Turn on MFA Last pass

The Security box, podcast 43 for May 12, 2021
Welcome to the Security box, podcast 43. On this edition of the podcast, we've got two topics. The first talks about a fake vaccine web site that is now shut down, thanks to the US Government. The second topic talks about the Exim 21 bug that recently hit headlines. We'll have news, notes, your questions comments and any catch up from any older podcasts. Topics Feds Shut Down Fake COVID-19 Vaccine Phishing Website Qualys researchers uncover 21 bugs in Exim mail servers > Sans News Bites Sans News Bites for May 7, 2021 'Jugular' of the U.S. fuel pipeline system shuts down after cyberattack Investment Scammer John Davies Reinvents Himself? See podcasts 10, 12 and 14 for other coverage in different aspects whether news notes or full discussions. Florida homecoming queen faces up to 16 years after alleged scheme to hack high school contest Malicious Office 365 Apps Are the Ultimate Insiders We hope you enjoy the program as much as we have bringing it together for you. See you next week!

The Security box, podcast 42: Has Experian learned anything?
Welcome to the security box, podcast 42. I think I've got two very interesting topics. One of these topics is the ongoing saga over at Experian. We know they had a big time breach, but do we really know what else is going on at the company? Brian has the entire details. Finally in the topic department, we know Ransomware has taken a big toll during the pandemic and there is no slowing down in that department. According to Cyberscoop, demands are higher by 43 percent so far in 2021. We'll talk about it. I'll also give you some news and notes, although it may be dated. Your questions and comments are always welcome, so please get in touch! I hope you enjoy the program as much as I have putting it together! Topics We used to put all of the notations within the file, but I've decided against that unless people want me to do that. I've heard nothing, so I'm reverting back to linking to the articles, and letting people decide on what interests them. Experian’s Credit Freeze Security is Still a Joke Ransomware demands up by 43% so far in 2021, Coveware says News Notes Sans News bites May 3, 2021 Lots of interesting things including IOS 14.5.1 on the heals of 14.5 fixing a zero day. A Clubhouse bug let people lurk in rooms invisibly

The Security box, podcast 41: Ubiquiti and other stuff
Welcome to the Security Box, podcast 41. On this edition of the podcast, we're going to talk about Ubiquiti and their big time breach, as well as something I recently read from Park Mobile and their potential breach. We'll have news, notes and more. Topics: Whistleblower: Ubiquiti Breach “Catastrophic” Ubiquiti All But Confirms Breach Response Iniquity Both of these articles are from Krebs on Security and while they're a bit old, you can't deny that it is worth talking about. Company aught to be ashamed of themselves. ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users A bit of sad news: :-( Security Researcher Dan Kaminsky died Saturday at age 42 of complications (ketoacidosis) from diabetes, which he had struggled with for years. Security Now! researchers know of Dan's discovery of a critical weakness in the DNS servers at the time. He will be missed. News Notes The latest malware hiding in video game cheat codes DeepDotWeb boss pleads guilty to laundering millions Trend Micro + ROS-I: Building a more secure future

The Security box, podcast 40: Windows Update and Ransomware in the Manufacturing landscape
Welcome to podcast 40 of the Security Box. On this podcast, we're going to have our main topic that deals with the Windows Updates which you may have been prompted to install. Instead of news notes, I'll pick a few of the articles and we'll see what you think about them as I'll give my thoughts. No full news notes this week, but plenty of content to boot. We hope you enjoy the program, and thanks for listening! April Patch Tuesday Sets Record High for 2021 Microsoft Patch Tuesday, April 2021 Edition As ransomware stalks the manufacturing sector, victims are still keeping quiet For full notations, check the blog. Enjoy!

The Security box, podcast 39 for April 14, 2021
Welcome to podcast 39 of the Security Box. Looks like we've got commentary from the replay of broadcast 38's airing. We'll answer any questions from those comments if any, as well as talk about yet another story I read afterword in regards to Facebook and why it might be a good idea to remove your telephone number or use something like Google or Text Now as your number instead of your primary one. We'll have news, notes, commentary and more. We hope you enjoy the program as much as I have bringing it to you. Thanks for listening! Topic: More on Facebook, why Brian Krebs deleted his Facebook account In an article that I read on April 7th, Brian goes in to detail on why he eventually deleted his Facebook account sometime in 2020. According to the article, a paragraph says: The phone number associated with my late Facebook account (which I deleted in Jan. 2020) was not in HaveIBeenPwned, but then again Facebook claims to have more than 2.7 billion active monthly users. We know that Facebook has never been trustworthy after any type of incident, and I honestly don't believe that Mr. Krebs couldn't be part of the 533 million people affected by the breach. Checking with the site, yours truly isn't effected either, but I honestly wouldn't believe it now-a-day especially since news of this is two years old. The supposed database has been kicking around the Internet Cybercrime community since Last Summer, according to the article. I've never seen any of these databases, and with the massive amounts of databases out there and what they contain, who could confirm every piece of data in it? I like what Have I been Poned and what it is trying to offer, so don't get me wrong when it says that I'm not in there when I put my mobile number in the site to check. We now learn that the database was put up since June 2020 and include names, mobile number, gender, occupation, city, country and marital status. It includes data for 100 different countries and there is a link to a January 2021 twitter post within the article. KrebsOnSecurity goes on to talk about what might happen if someone with malicious intent gets ahold of your mobile number. One of the things that could happen is your phone number changing hands, otherwise known as a Sim-swapping attack. This happens because an employee at the store you got service is tricked in to changing the information to the attacker and you don't find out until you use your phone. Brian talks about how it is probably time to remove your number from services like Facebook once verification of the account is complete. I'm almost tempted on doing this myself. There is a very interesting paragraph in which I got interested in. It says: Why did KrebsOnSecurity delete its Facebook account early last year? Sure, it might have had something to do with the incessant stream of breaches, leaks and privacy betrayals by Facebook over the years. But what really bothered me were the number of people who felt comfortable sharing extraordinarily sensitive information with me on things like Facebook Messenger, all the while expecting that I can vouch for the privacy and security of that message just by virtue of my presence on the platform. We can't vouch for a presence of a sensitive message just because we're on the platform. I've never used Facebook or its messenger client for anything secure anyway, but that paragraph is very important. Are You One of the 533M People Who Got Facebooked? is the question and article title we're talking about in this segment, do read the article. News notes on the blog. Enjoy!

The Security Box, podcast 38: we've got Facebook in the spotlight, news, notes and more
Welcome to the Security box, podcast 38. This week, we had planned to go back to DKIM and have a discussion on it, but we aren't going to do that. Why? It looks like news has gotten about Facebooks's 2019 breach and 535 million people whose information may now be out there on the free Internet as well as it already being sold to the dark web when the initial breach occurred. We'll have news, notes and more as well as your thoughts and comments to boot. Enjoy the program! Topic: Has Facebook done it again? Michael in Tennessee sent me an article from Phone Scoop, as well as me seeing the article we'll be taking from, which came from Cyberscoop. It looks like Facebook is really paying for a 2019 breach in which 500 plus million people's information including phone number were exposed somehow and later patched by Facebook. The data, which comes from people from over 100 countries, includes users’ phone numbers, email addresses, full names, birthdates and location, among other identifiers, according to Insider, which first "reported the news." The leak, was first reported by Motherboard, according to the article. The only thing that I'm unclear on is the section that talks about the fact that the leak was reported by Motherboard in January. The information was made available by paying a Telegram bot a couple of bucks for the details according to the article. According to the article, Facebook removed the ability of searching people by telephone number after the breach. Facebook will be probed by Ireland, and its unclear if the Unnited States will follow suit by the FTC. The article goes on on what the actors may do with the information now that the information has been made available for free. The website "have I been poned" has been updated by Mr. Troy Hunt with the information that was made available by the breach. For more information and to read the full article, 533 million Facebook users’ personal data leaked online is the article and do read this. News Notes for podcast 38 Office 365 is no stranger to attack. A Phishlabs article talks about the latest threat. This time, actors can mimic websites by using Google's API through Google Ads that allow redirects to whatever they want. The issue with this one is that once you log in, they capture your credentials as well as sending you to your account. For complete information, Breaking Down the Latest O365 Phishing Techniques is the article, which will talk about this entire process. Ubiquiti is back in the news. A post by Krebs on Security talks about the latest drama at the company who now has come out saying that there was a problem. After making a change that forced people to log in to their network, they were later told to reset their passwords because of a "third-party cloud provider" may have been breached. There's more including the very interesting fact that this company should have invalidated all credentials. Ubiquiti All But Confirms Breach Response Iniquity is the article. This is going to get very interesting now. Finally, due to time constraints, I've got some good news I want to pass along. Another web boss now has been pleaded and this guy pleaded guilty. This boss was behind selling heroin, firearms and hacking tools. He pleaded guilty on charges of money laundering. Tal Prihar was captured by French authorities. Read Cyberscoop's article DeepDotWeb boss pleads guilty to laundering millions for more. Thanks so much for listening!

The Security box, podcast 37: The beginning of DKIM, other commentary, news, notes and more
Welcome to the Security Box, podcast 37. On this episode of the program, we're going to talk about something I don't think people know much about dealing with email, verification of domains in the process, the standards of what it is and how it came to be. We will also cover a very interesting webinar that I listened to by Trend Micro that delbt with the security predictions for 2021. We'll also have news, notes, questions, comments and more as the show progresses and the listeners choice on whether they have something to contribute. I hope you enjoy the show as much as I have bringing it together for you, and thanks so much for listening! For full details including links, check out the the blog and thanks for listening!

The Security box, podcast 36: Password Managers, what exactly do you need?
Welcome to podcast 36 of the security box. On this edition of the program, we'll be talking about password managers. Herbie Allen is along with a Things to Ponder section talking about Scams, one in particular dealing with Amazon. We also have a webinar that will be of interest from F-secure. We'll have news, notes and more. Hope you'll enjoy the program! Full notations willbe provided on the blog so check back often for those. Enjoy!

Audio Centric applications for podcast 35 of the security box
On this edition of the podcast, audio-centric applications like clubhouse. News, notes and more. Read the blog for full notations.

The Security box, podcast 34: The Rest of the Key Logging discussion
Welcome to podcast 34 of the Security Box. On this edition, we'll pick up where we left off on the Key Logging aspect of our discussion and we'll have news, notes, commentary and more. We also have something from Michael in Tennessee who sent us a video of 12 Android apps you must get rid of. Some of these, are quite interesting. Hope you enjoy the program as much as I am bringing it together for you. News Notes will be on the blog and I did enjoy the program. Hope you do too. See you next week!

The Security box, podcast 33: Part 2 of the Keylogging discussion and more
On this podcast, we continue where we left off with our Key Logging topic, and we'll also have news, notes, questions, comments and concerns. Hope you'll enjoy the program as much as we have putting it together for you. Topic: Continuing Key Stroke Logging This may take several programs, but we must cover keystroke logging. We take from the Wikipedia page on keystroke logging so you can follow along. Different heading include, but not limited to: application, software based keyloggers, keystroke logging and writing processes, related features, hardware based keyloggers and history. There are 4 different headings for this article and a lot to read. I figured it would be a good discussion to have since it has come up in discussions of other things. I hope you enjoy the discussion as much as I am bringing it to you. There's more, news notes will be posted on the blog for everyone to see what links and items we have. Enjoy the show!

The Security Box, podcast 32: The Beginning of Keyloggers
These are the show notes. For full news notes, please check the blog. Welcome to the security box, podcast 32. On this edition of the program, we're going to taolk about keystroke loggers. I found a Wikipedia article which is detailed and there could be a possibility that this goes in to multiple weeks. We'll also have news, notes, questions, comments and even a "things to ponder" segment to boot. Topic, Keystroke logging: This may take several programs, but we must cover keystroke logging. We take from the Wikipedia page on keystroke logging so you can follow along. Different heading include, but not limited to: application, software based keyloggers, keystroke logging and writing processes, related features, hardware based keyloggers and history. There are 4 different headings for this article and a lot to read. I figured it would be a good discussion to have since it has come up in discussions of other things. I hope you enjoy the discussion as much as I am bringing it to you. Things to Ponder During last week's program, we were still learning about the possible issue in a small town in Florida that could've had some serious problems with its water supply if it weren't for a worker noticing something as simple as a mouse moving. In this things to ponder segment, I talk about what we've learned to date, and its quite interesting. To date, I have two sources you can read more, one an article by our good companion Brian Krebs, the other from CISA. You should read them both, and of course listen to what my thoughts are and participate. What’s most interesting about the Florida water system hack? That we heard about it at all. Krebs on Security Alert (AA21-042A) Compromise of U.S. Water Treatment Facility CISA I hope you'll participate in this interesting story.

The Security box, podcast 31: Domain discussion continued, news, notes and more
The show notes are full of links, and those will be posted to the blog as soon as we can. The program only has two tracks at the end, and I'm happy with how it turned out I think. While there were no calls, I know this show will have a lot of info, and the podcast notes will explain things by linking to various things. Welcome to the security box, podcast 31. On this podcast, we're going to continue the discussion of domains with several different things that we couldn't get to from last week. Also, we'll have news, notes, questions, comments and more. I hope you enjoy the program as much as we have putting it together for you. I hope you all enjoy the program, and see you for keyloggers next week.

The Security Box, podcast 30: Domain discussion, security segment, news, notes and Drama
Welcome to podcast 30 of the Security Box. On this security box podcast, the goal is to talk about domains. We'll talk about what a domain is, how they work, a little bit about the IP system, and some recent news in regards to domains, registration companies, look-alike domains and more. We'll have news, notes, questions, comments and Michael in Tenessee with a segment to boot. For full show notes, check the tech blog. Some tech issues occurred, but the show must go on. Enjoy!

Tech podcast 359 for January 29, 2021
Welcome to podcast 359 of the technology podcast. I'm Jared, and its time to bring you another podcast. Today, we've got something I think you'll be interested in as I talk about something that has been around awhile that seems to be finally dismantled, at least for now. What might that be? Its called Trick Bot. I heard a podcast about it and how it has pretty much fell, but yet, its still around according to an article I'll be talking about and reading later. Next, I talk about Weather Gods. Its one of many different apps on the app store. I posted on the tech blog and on Applevis in regards to this topic, and I chose this app because of my needs, and something I feel isn't fair called double extortion. There is a paid app, and then they want us to pay for a subscription for what I can get for either beta testing, or paying for the subscription. Thoughts are welcome. Finally, could Net Neutrality be coming back? According to a podcast, it might be, and I talk about it here instead of the security box. Contact info is at the end of the program as usual. What to read or listen to: Trickbot may be down, but can we count it out? The Cyber Wire Daily Thanks for listening!

The Security Box, podcast 29: messaging apps and security, news, notes and more
Welcome to the security box, podcast 29. On this episode of the podcast, what seems to be the problem with messaging applications such as Whatsapp, Signal and others when it comes to their security? What do you think of for cloud security for 2021 as the pandemic continues? We'll have news, notes, questions, comments and more including bits from Sans News bites, Trend Micro and more. Topics Security Now episode 802 was released and broadcasted the week of January 19, 2020. On this podcast, are we really concerned about what application we choose to use to message? Steve says that it doesn't honestly matter, as metadata isn't all that big of a deal. Who really cares if phone numbers, time of messages, and even how long audio messages may be? There are apps discussed for more private communication, but metadata doesn't cover the content of the message itself. From Steve's introduction taken from his security now page he writes in part: Then we wrap up by looking at various aspects of the frenzy caused by WhatsApp's quite predictable move to incorporate its users' conversation metadata into Facebook's monetization ecosystem. This segment lasts roughly 20 minutes as I play the segment for all to hear. What do you think about this? What about cloud security for 2021? The Top Worry In Cloud Security for 2021 is the Trend Micro article, and I found a video on their youtube page that seems to voice the article. We'll play this video and we'll discuss. Cloud Dynamics: Top Cloud Security Challenges for 2021 is the video. Your thoughts are welcome. For complete news notes, please see the tech blog for details. Thanks so much for listening!

The Security box, podcast 28: Year in Review items Teledildonics, and more
Welcome to the program. Full news notes will be on the blog, but here are the topics and what is talked about before news notes. Hope you enjoy! Welcome to podcast 28 of the Security Box. On this podcast, a couple of year in review items, news, notes, something called teledildonics or "The Male Chasity Cage" from a recent Security Now podcast, news, notes, questions, comments and more. Topics: Year In Review: Ransomware The Year In Review: How COVID-19 Has Changed Cyber Security Security Now has a segment on something that I really don't understand, but yet, caught my attention. I believe the term used by Steve was Teledildonics. Something we should be concerned about? The Internet of Dongs Covid-19 scam alert on vaccines

The Security Box, podcast 27: Trend Micro report, breaches of the year and more
Hello folks, welcome to the security box, podcast 27. Trend Micro has a report they do each year talking about the trends of the next year and its worth talking about. Did you know about any of the breaches of the past year? We'll go through that thanks to Solutions Review, as well. We'll have news, notes, commentary and more and even a guest to boot if everything goes well. Thanks so much for listening, and make it a great day! Topics: The Security Predictions from Trend Micro is always something fun to read. We'll talk about some highlights that might be of interest, and of course, we'll take questions and comments in regards to this. You can read the article entitled: Takeaways from Trend Micro's 2021Predictions to learn more. I also posted a blog post with my thoughts on this one, and its available for everyone to read. Are you aware of the biggest breaches of the year? There is a post with videos and text, and we'll talk about this. Ben Canner, a follower of mine on twitter, tweeted out Solutions Review Presents: The Top Data Breaches of 2020 and boy, is it something that I think we should cover. Cyber Wire Daily has what they call Research Saturday. This is a link to January 9th's episode on Emotet and I will be summarizing this as part of this week's program. There is a link to read show notes, and thanks to Overcast for providing a link to the episode, I think its worth sharing. News Notes: I think we're going back to the original format that we started with, its much easier to maintain it that way. If you liked the other format, please let me know. According to Cyberwire Daily, a podcast, President Trump was removed from Twitter for several days, as well as removed from Facebook until he leaves office. The Washinton Post may have an article on this, as they site the post as being where the reports of him being kicked off. The January 7th program talked about the fact President Trump urged people to show their displeasure, although a tweet said to do it peacefully. It made no difference, as people demonstrated and caused problems on January 6th and caused the recount to be delayed. It was resumed later in the evening, and president elect Joe Biden was confirmed. Facebook bans Trump indefinitely; risks 'simply too great,' Zuckerberg says and Facebook, Twitter act on Trump's false messaging after violence at Capitol should be read in regards to the latest on this ordeal. These two articles were read after listening to the podcast. This Week in Security News - Jan 8, 2021 has quite a lot of articles, some of which I had meant to cover but haden't had an opportunity to blog about. Russian man sentenced to 12 years in prison for massive JPMorgan data heist is a bit of good news after a long bout of wondering if we are going to get some good news. While I published some good news recently, 2021 has gotten off to a great start with this one. This J.P. Morgan breach at the time was the biggest to date for that time, but Solar Winds today tops that. This was well orchestrated, and you should read this. There's more, check the blog for complete notes. Enjoy!

The technology podcast, podcast 358: Stripe demo, people violating terms of service and more
The show notes are short for this episode, but the program is not short. I hope you enjoy the program as much as I have. On this edition of the technology podcast, a stripe demo for you on their app. Also, people getting away with blatently violating terms of service. Finally, Dark Net Diaries had an episode on the darknet and someone who got caught in the crosshairs of the law because they baught and sold drugs on the underground. I hope you all enjoy the program. This program lasts 84 minutes. Enjoy!

The Security box, podcast 26 for January 6, 2021
Welcome to the Security Box for this week. We continue with the breach that is, by catching up with some commentary from Security Now from two episodes. We also have a "things to ponder section" and some News and notes to boot. For full show notes, please go on over to the blog as there may be links to things that might be of interest to you. I hope that you enjoy the program as much as I have putting it together, and I'll see hyou next week! The topic of Shaken and Stir will get its wrapup from podcasts 21 and 23. Combating Spoofed Robocalls with Caller ID Authentication Federal Communications Commition STIR/SHAKEN Wikipedia This should be the last of this as we don't have far to go with it. There's more, so remember to check the blog!

The Security box, podcast 25: Year End part 2
Welcome to podcast 25 of the security box. This podcast was compiled on Christmas day, but was released on the 30th of December. On it, we go through podcasts 341-357 of tech, playing a few segments which were also covered on this podcast like catphishing, some of the security items throughout the year from the blog, and even other highlights. Highlights the security box and some of what we covered in podcasts including two interviews. This podcast is 167 minutes and is the last of the two podcasts before we resume the first week in January. Hope everyone enjoys the lookback, and thanks for listening!

The Security box, podcast 24: The breach that is, and year end stuff
Welcome to podcast 24 of the security box. This is a full podcast, as we're on a two week break. Here is what we have for the podcast. The biggest item that we have in the podcast is the biggest breach in the Solar Winds feasco. We're still learning, check the blog for more. Here is a blog post to get you started with the whole fiasco, but there is definitely more. Podcasts 333-340 is covered in different segments throughout the year in regards to what has happened throughout the year. We'll continue it next podcast. The podcast is a little over 2 hours including our final track. Thanks so much for listening!

The Technology podcast, podcast 357: Weather Underground
On this edition of the podcast, the final podcast of 2020, we'll demo Weather Underground. I wanted to do two demos, but I think one is enough. I hope you'll enjoy it.Apple Vis has a post in their directory of apps about Weather Underground - Forecast which was written up. While I do like the app, I believe the person writing this has the same points I do. I do find it accurate, but there are definitely some accessibility issues which you'll hear about in the demo.The Security Box will have other podcasted content, so the feed will still be going strong in 2020. On podcast 358, I hope to have another demo of something i learned about, an app that'll assist me with billing credit cards. See you all then!

The Security Box, podcast 23: The continuing Education of Shaken and Stir, Philmore and more
Welcome to podcast 23 of the security box. Picking up where we leave off, we continue with Shaken/Stir and its discussion from podcast 21. Besides that, we'll go ahead and talk about a company which doesn't really care about the security of its customers. The name has been mentioned in passing, but now its time to talk about some very serious stuff on a podcast. We'll have news, notes, and more. Topic: Shaken/Stir was discussed on podcast 21 of the podcast, and podcast 23 will finish it off. Here are the links, taken from podcast 21's notations. Combating Spoofed Robocalls with Caller ID Authentication Federal Communications Commition STIR/SHAKEN Wikipedia News Notes and more will be on the blog version of the show notes. This address is given throughout the program. News notes was live. Enjoy today's program!

The Security box, podcast 22: BEC and what it is, a couple of guys who aren't safe and more
Welcome to the security box, podcast 22 picking up the podcast with business email compromise. Business Email Compromise (BEC) definition Billion-Dollar Scams: The Numbers Behind Business Email Compromise Besides that, we talk about a couple of people who have been a problem in the phone world, tie it in to phone security, and find out if these guys would be capable of using such tech. Comments also came in about scams when looking for a place to live, and of course some tunes come along with it. Enjoy! Delving into the World of Business Email Compromise (BEC) Business email compromise

The Security box, podcast 21: the beginning of Shaken and Stir
The beginning of Shaken and Stir, lots of news items and more. For full show notes, go over to the blog to do some reading of anything that interests you. Welcome to podcast 21 of the security box. This week, I thought it would be interesting to take you through the Shaken and Stir protocol. This protocol is supposed to go through and make sure we get adequate caller ID. Below, please find resources that we found on the Internet for the Shaken and Stir protocol, and I'll be working on braille material so that I have something in writing. We hope that you enjoy the program today. Topic: Combating Spoofed Robocalls with Caller ID Authentication Federal Communications Commition STIR/SHAKEN Wikipedia For full news notes, go to the blog and we'll continue shaken and stir in two weeks. Enjoy!

The Security box, podcast 20: PCIDSS, OCSP Stapling and more
Hello Folks, welcome to episode 20 of the technology podcast series known as the Security Box. A few tech issues but we press on. Please check The Blog for complete notations as we have segmented everything. Both Michaels are on with segments, I continue where we left off last week, and we even talk about an email I posted as part of protecting our security even though it is a little unrelated from the main topic. News, notes, and more. I hope you enjoy the program even though there was a few glitches, I still enjoyed the program. See you all next time!

The Technology podcast, podcast 366: Braille Transcription, a company in trouble, Mac, IOS, and More
Welcome to the tech podcast. Assignment 19 was a complete fail, and I know that I had a lot of failure but not all was my fault. You can search out this write up on the blog, but I talk about it here. Next, a company may be getting themselves in some trouble Forget going to a hotel … especially since records go back to 2013 … were you effected is the blog post I wrote, are you effected? Next, JFW 2021 and MAC version 11 are out and I taklk about both. Finally, I found some good news in the security field and I even have one more. Finally, a laugh and contact info at the end. Hope that you enjoy the program and I'll see you all later!

The Securoity Box, podcast 19: its all about the credit card: part 1
We're going to continue the credit card talk next week, but this should get you started. Welcome to podcast 19 of the security box. This week, let's talk about credit cards, PCIDSS, and more. PCI DSS Compliance Guide: UK Costs & Checklist PCI DSS requirements for building and maintaining a secure network and systems The PCI SECURITY web site Payment Card Industry Data Security Standard We're putting the Wikipedia link in for reference. Please do not rely on it alone, as the page talks about a lot of unsourced material. We also posted two of those sources as I liked them, and we'll use one of them to talk about what PCIDSS is, and what is required. News Notes Thinking about getting an Android phone? Think that its security is better than IOS and what it may have to offer? Thats your choice, and we're not going to change your mind. According to an article from the Register, maybe you should think about this again. According to the article, Google is being sued because it is taking a couple hundred MB from you on your cellular data even if the phone is sitting there quietly not being touched. Why? Because Google is preparing potential ads that might be of interest to you after it collects data in the background. The article goes on to say that Google people agree to multiple terms of service, none of which talks about the passive collection of data that has nothing to do with your use. New lawsuit: Why do Android phones mysteriously exchange 260MB a month with Google via cellular data when they're not even in use? is the article, think about this when you decide which operating system you want. This Week in Security News: Ransomware Gang is Raking in Tens of Millions of Dollars and Microsoft Patch Tuesday Update Fixes 17 Critical Bugs has a bunch of items in it, and we'll let you decide what you want to talk about. Other news Looks like we've finally gotten something that might work. After some time, I am now back on MyTelespace, where they have a call in number for callers who do not have the other technology to use. That number is 720-787-1080 and my box number is 8347 over there. Just another option for people to use. Thanks so much for listening, and make it a great day.

The Security box, podcast 18: election stuff, updates on podcast 6, and more
The show notes are quite lengthy, so not everything is going to be listed here, but please check the blog under podcasts for the complete notes. Things to ponder Disclaimer: The following are going to be things to ponder. Some things could be posted as a blog post, others are just thoughts based on one topic or another and may not be linked to anything. The opinions expressed are those of the presenter, and may not necessarily be those of the JRN, its staff, providers of software and services, or the like. I got the best email ever. What was so interesting about it was the domain. Normally, I don't comment on Spam, but Just saw the best email ever … in my inbox … domain is relatively new is the blog post. You'll see the domain, as well as my thoughts. I talk about this one. Amazon put a little bit of a scare in me by sending me an OTP when I did not even request one. I did some quick investigating and found I was not compromised, but turn on two factor (2sv) on Saturday, the 7th. I checked my transactions, card history, and other log in activity and didn't find anything suspicious. On podcast 6 of the Security Box, it was discussed that Michael in Tennessee had a security concern about his apartment WIFI setup. He isn't wrong, as on September 7th, he called in to Twit' The Tech Guy and asked Leo. On this podcast, we'll play said segment and play Michael's things to ponder segment as we give an update on the worst security ever. If you want to listen to podcast 6 from August 19, 2020 here's the link to use (162162.33mb) for your enjoyment. Also read the text from tech guy labs, the tech guy: episode 1743. That is only some of what is up, the blog will have more.

The Security Box, podcast 17: Catch up, Trend Micro and more
Welcome to podcast 17 of the technology series known as the security box. Catch up Michael in Tennessee makes an appearance as he was not able to make it last week. We talk about encryption, the lack there of from the government, and companies in general in the security landscape.We are not pointing our fingers at any one company, but mainly an open discussion. Topics: A subset of apps were targeted in an article that indicates that 76 percent of them have at least one vulnerability or bug. The goal is not to write perfect software, but software that can be fixed within a reasonable time frame. Different types of terms are used within this article, none of which I'm too familiar with, but the article I found quite interesting. It came from the folks at help net security. 76% of applications have at least one security flaw is the article, let us discuss. Trend Micro has a program for free called House Call which is accessible. This was actually talked about this past Thursday with Andy and Josh. In the article Trend Micro HouseCall for Home Networks Trend Micro talks about what they've done with the program and how it can benefit you. URL tracking systems like add words and add cents by Google can be abused just like the URL shorteners before it. How URL Tracking Systems are Abused for Phishing comes from Phishlabs, and its well worth the read. This should probably be talked about, because sites use these services including blindness related sites. Do you think it is time to move away from the services in the name of security? News Notes and more In some good news, we've definitely got some. Two Charged in SIM Swapping, Vishing Scams is the article penned by Mr. Krebs. Maybe this is a start to something, only time will tell what happens. There may be more news that I didn't cover here or on the podcast of the box, let me know what you want covered. Books Due to space limitations, the books section of the show notes can't be reproduced here. The Tech blog will have the entire notations including the books for you to peruse. Thanks so much for listening and contributing!

The Security box, podcast 16: catch up work, domains, and more
We've got shorten short notes although detailed. Here goes. Welcome to broadcast 16 of the Security Box. Time to catch up: Jennifer, the staple it seems to this program, comes in with 8 different commentary pieces we'll step through in regards to last week's significant program on privacy, personal information online and the like. We'll see how this segment goes when it comes to whether there needs to be anything else said, or whether it'll speak for itself. Topics: What do you think when it comes to your web host and what they offer? Some web hosts are Windows based, some are linux based, some may have both, and some ... well ... may just not care what they host no matter what the platform. In an article entitled Planetary Reef: Cybercriminal Hosting and Phishing-as-a-Service Threat Actor which comes from Phish Labs, we'll talk about a company that seems to be under multiple names, yet surves up all kinds of things that most web hosts would not tolerate. The group behind Planetary Reef leases IP space from a large reseller. I'm considered a reseller, selling space given to me, but a large reseller may be under a company that they buy their space from each month and they sell it to others. Let's talk about this as there is a history behind the web space market throughout the years. In a related topic I covered and didn't originally cover under the rundown, we talk about this Krebs on Security article QAnon/8Chan Sites Briefly Knocked Offline and tie this and the first article together. Has the Department of Justice not learned anything about why we need security today? I guess they really haven't because a Cyberscoop article entitled DOJ efforts to weaken encryption place national security at risk, congressman says was written by Shannon Vavra and it is quite well written. Rep. Ro Khanna has one message for politicians who continue to suggest technology companies should give law enforcement agencies access to encrypted data: This is a power grab. The U.S. Department of Justice has long called for technology firms to create software that would allow law enforcement agencies to investigate suspects who use encryption to hide illegal behavior. For Khanna, a California Democrat, the tradeoff is too dangerous Most in government do not understand this, and its time that someone really hit the hammer home with this nonsense and lets put it to bed once and for all. News, notes, and more For a complete news notes overview, watch this space on the blog. I may have posted more than what is covered here, and what I do cover is only a few items from the subset of things I thought would be of interest. We're not going to link to everything, but maybe something else caught your attention that I did not cover. Let us see what you think of the news covered in the program, and of course, the comment boards await you. Things to ponder I honestly didn't see this coming. Now, … for a random breach … a psychotherapy center is something I bring up in news notes, but yet it is a serious thing. In things to ponder, I'll give my thoughts on this one. Its beyond repair.

The technology podcast, podcast 355: 2020 predictions, what do you think today?
As you listen to this podcast, what came true and didn't to date in regards to the 2020 report on what might happen in the security landscape? MyTelespace is currently down, blog posts are on the blog about it, and of course contact info as well. Enjoy!

The Security box, podcast 15: all about the privacy
This is episode 15, the show notes follow. Welcome to the Security box, podcast 15. It was mainly an open forum of privacy talk today. Armando, a broadcaster here on the mix, was on talking about his experience with Covid and other privacy concerns he had in regards to that. We also got in to a twitter discussion with names we've seen. No mention of exact names are mentioned here but we do talk about this. The Melting Pot, October 9, 2020 and Armando's Testimony can be listened to. These files will eventually expire, so get them while you can. Within the Internet Radio program, go in 86 minutes to hear the discussion. In hour 2, I start and it continues in to hours 3-4 where we talk about privacy, the Internet, finding information, and other aspects of the discussion as Michael in Tennessee and Indiana both join me for hours 3-4 as part of this discussion. This week's show lasts about 4 hours, and I hope you enjoy!

The Technology podcast, podcast 354: m-braille, yahoo groups, and discounts for disabled
Welcome to podcast 354 of the technology podcast series. The segments on this podcast are mid-length, but quite interesting I think for a change in pace for this particular podcast. Let's tell you what we're going to cover. Time to get your M-braille On is the blog post for written communication, but why gripe when this happens to many pieces of software besides M-Braille? It got fixed, and it now works again. All operating systems has its fallbacks when upgrading, and I talk about this. Shaun Everiss and I talk about Yahoo. Shaun sent me an email which prompted me to create this blog post and segment 2 is all his. Segment 4 is mine. Its always nice to have a discount, but why do we, the disabled, need a discount? Yes I get it, our software is quite expensive, especially if you use Jaws or the discontinued Window-Eyes. Other pieces of software which include Duxbury and even Braille2000 are expensive. There are discounts for specific cases, but why phones? This blog post: A petition on lowering the cost of an iphone for the disabled? Let’s discuss talks about This Apple Vis forum post: A petition asking Apple to consider discounts for people with disabilities. which has quite a number of negitive comments. I see what was tried with this post, but there are already discounts for phones through the carriers and even through Apple itself through care. I'm linking to my blog post and Applevis in this show notes so you can choose which one you want to read. I hope you enjoy the program as much as I have putting it together, and I'll see you all on another edition of the program next time.

The Security box, podcast 14 for October 14, 2020
A day late, but its better than not posting at all. The podcast is packed, and I hope you all enjoy it! The Security Box, podcast 14 must continue with the ongoing saga of John Bernard. We've got an article on that. What do you guys think of a passwordless future? Lastpass talks about it. News, notes, comments, and more. Topics: What do you think of John Bernard? Apparently, the suspect that has been identified as this person walked away with 30 million dollars, and it doesn't stop there. The end of the article claims from one company that they hope that he comes through with his promise. Promising Infusions of Cash, Fake Investor John Bernard Walked Away With $30M is the article. Could this be the end? Passwords have long been one of the leading drivers of security risks and employee frustrations for businesses, which has only increased since organizations transitioned to working remote. Passwordless authentication, on the other hand, securely connects employees to their work without the need to type a password through technologies such as biometric authentication, single sign-on and federated identity. Is passwordless authentication the solution to the password problem? This is only the first paragraph of this facinating article on a passwordless future which will get interesting. The article LastPass Research Finds 92% of Businesses Believe Passwordless Authentication Is in Their Organization’s Future is going to be discussed. What is up with privacy? Conversations that could go awry because of an innocent conversation. Listen to the segment and form your own opinion. News Notes: I've done some reading but what about you? Submit things either by voice or text and lets discuss it. Other things: Twit had an event held on October 8, 2020. Here is a sendspace link to that download which I'll have expire in 8 weeks from today. This is the property of twit, I'm supplying it as a courtesy to you. Visit the twit network to learn more about them.

The Security Box, podcast 13: A discussion on Identity issues
The show notes are not lengthy this time, that is because we don't have a whole lot for them. Yes, news notes was covered, yet, we have some interesting discussion. Below, please find the show notes. Welcome to podcast 13 of the technology blog and podcast series known as the Security Box/. On this episode, we are going to cover NCSAM, week 1. The big thing now a days are your security and identity protection when it comes to your online safety. The first article Identity Fraud: How to Protect Your Identity Data, Accounts and Money During the Coronavirus Crisis is discussed in a taped segment. Speaking of identity, Preston from Pensylvania is going to be on with an interview that I did with him talking about experience, stories, and the like. We'll also cover some news if time allows. Please make sure that you tune in to the blog web site for all of the news, as NCSAM will be busy and lots of items will be posted. You may want to decide to subscribe so you don't miss anything. Thanks for listening!

The Technology podcast, podcast 353: NCSAM and Identity, Google and More
While the podcast is an hour, I know that I want to do more with the tech podcast in all kinds of tech not just the security landscape. In this podcast, I think I have covered a bit, even talking about some stuff in a different light unlike the Security Box. Here are the show notes. Welcome to podcast 353 of the technology podcast. NCSAM is out now, its the month of October and its definitely going to be an interesting month. Our first segment talks about the fact that identity theft may be more of a problem now more than ever. blog post KNFB reader was intigrated in to newsline. People were griping about it on Apple Vis, and may have been in social media as well. I looked at the app one day, and I find it quite interesting but still easy to use. They griped because they had to reverify their info, otherwise known as reauthenticate. KNFB Reader lite works well, and I am glad I have choices. blog post Michael in Tennessee taught me about Google and pairing to bluetooth devices. While I told my phone to forget the device, I had to go back in to google and get it repaired as I tried to demo how I got it to work. Be that as it may, this was kind of cool. Thanks Michael for this! On a prior podcast, we covered SSL and what is happening with threat actors today. I intend to write a blog post with my thoughts, but the Security Box definitely covered this. Podcast 12 of the box covers this in a talk show format, but I figure it should be covered here for those who don't want the longer program. Tell me what you think. The full program lasts an hour, so I hope you'll enjoy it. Thanks for listening! See you on another edition of the program.

The Security Box, podcast 12 for September 30, 2020
Welcome to podcast 12 of the tech podcast series known as the Security Box. Topics: On podcast 10 of the box, we link to an article about due dilligence. It was segment 2 of that podcast. Just recently,, its time to update this, as now Krebs has an article asking the question: Who is Tech Investor John Bernard? Seems to me that this guy, whoever he is, is not a good guy, and I think I visited the page in the first story just to see what it was about. In no way was I going to utalize the services, but I was mainly curious what the main page had to say. It is funny to see that the site has a general closed message on it, and people still come forward afterword to people like Brian and tell him what has happened to them. This is quite funny, and I think I'll have this as my first topic. Did you read the article linked to in podcast 10, and if so, what did you think? What do you think now? Apparently, another tech company is hitting the news in regards to a ransomware attack. The company in question put out the same type of info that most companies put out in regards to the breach or lack there of when it comes to personal information that may have been taken. The problem is that the investigation is still ongoing, and even though the article was updated after initial printing, we can't say who is telling the truth. Govt. Services Firm Tyler Technologies Hit in Apparent Ransomware Attack is the article, and I think this aught to be quite interesting. Only time will tell. APWG is the Anti Phishing working group. This group does work to try and advise security experts and us on how to be as safe as possible. Now they're saying that SSL should not be used in determining if a website is secure. We've known through Phishlabs articles on the blog that the rate of SSL certificates by actors was on the rise, but now we shouldn't rely on it. APWG: SSL Certificates No Longer Indication of Safe Browsing comes from the Phishlabs folks, and I think its worth the read. We also put it in the news notes rundown, and I am sure it'll garner conversation. News Notes: News Notes has quite a few items even though I have had technical problems as of late. The weather isn't helping with health concerns as well, so it may not be large, but it is good none the less. If you're interested in the news I've gathered, head on over to this blog post and check out what might interest you. There may be some overlap, but at the same time, you might find something you want discussed that I didn't read. Podcast segments Michael in Tennessee is on with us for about 37 minutes talking about one particular article that caught his attention. He and I discuss this particular article, and we even bring up other odds and ends tying this up with other revelant but could be off topic stuff as well. The article we reference comes from Cyber Scoop, and its a good one. FBI hopes a more aggressive cyber strategy will disrupt foreign hackers which was posted to that site on the 21st of September. This article was written by Sean Lyngaas.

Tech podcast 352 for sep 24, 2020
Voice mail systems, are they gone? Covid-19 and the email landsscape, a webinar and IOS 14 and other OS's and whether apps are updated timely if they are broken. Enjoy this 65 minute podcast!

The Security box, podcast 11: a shortened edtion
A shortened edition of the show today, and that is OK. Several topics too. Welcome to podcast 11 of the Security Box. Topic: Ransomware is everywhere. Last week, Michael in Tennessee sent this article during the show, and I finally got a chance to read it. This time, Newhall schools are effected, and while the advice given in the article is sound, we can officially say that nothing is predictable in this strange year. ABC7 in Los Angeles gives us: Ransomware attack shuts down remote classes in Newhall which has some good points. The article talks about what is being done which includes getting ferenzic folks in there, law enforcement, and other people who may be needed to restore data. The article didn't talk about training. Question, where is the training so people in the district know what to look for when something like this happens again? Ransomware starts with an email in most cases. TikTok is back in the news, and this can't be good news anyhow. The article Lame-duck versions of TikTok and WeChat are definitely a problem, security experts say is what we're going to talk about, and we'll play this CNET video: TikTok, WeChat ban explained. I didn't know WEChat was a problem, but then again, I've not used that app at all. From what I've heard, its similar to apps for communication like Whats app, and other messaging apps. To top this all off, Michael in Tennessee recently sent me an article in regards to the TikTok Sale to Oracle. The TikTok deal solves quite literally nothing is the article, and it is quite interesting. This whole story aught to get interesting now, but suffice it to say, TikTok is saved, for now. Open forum: what do you want to talk about? This is your time to shine. News Notes and things The biggest topic right now is TikTok and their very interesting developing story as it continues to unfold. Besides that, we've got some recent arrest news and other items in this blog post which has been cut short because of the fact I haden't felt well. The news also covers a Chinese firm who is supposed to do antivirus work being part of apt41. This is going to be interesting. For the first time to our knowledge, ransomware may have lead to a death for a critically ill patient. The attack was an apparent accident, as the actors gave the hospital the key after it was determined they made a mistake on their target. Hospitals have never really fixed their security problems, mainly because of the lack of funding. This could hurt them now that they know that someone died. Ransomware may have led to the death of a German hospital patientRansomware may have led to the death of a German hospital patient is the article that talks more about this very interesting story.

The Security box, podcast 10, sep 16, 2020
While we didnt have a shot at news notes, we do cover some news and other stuff too. Found something of value? Get in touch! Welcome to podcast 10 of the security box. On this edition of the program, we're going to leave room for Michael in Indiana to talk to us about phone stuff. We'll also have some other stuff as well. Topics Phishing has all kinds of forms, and the Security Box, podcast 5 only covered a little bit. Podcast 345 of the tech podcast series also covered Phishing. Also, we've covered Phishing in articles that I've read as well. This search page from the blog will bring up everything on phishing that might be of interest to you. Recently, I've learned about tricky types of phishing using services out there that can produce documents and forms for free or low cost. Tricky Forms of Phishing | Tricky 'Forms' of Phishing is the topic on this first segment of the program today. Did you know there are 13 different sites that can produce documents and forms that could trick users in to divulging information they shouldn't? The only one out of the 13 I've used is Google documents, but I'll talk about the 13 different ones in turn. Time to learn. Recently, I've read an article talking about doing your due diligence . Do you do yours? Looks like a scammer knows how to play it well, and the name seems to be well known. The article Due Diligence That Money Can’t Buy talkes about someone by the name of John Bernard. What a facinating story! Michael in Tennessee came on about a ransomware attack effecting Neuhal. We'll have more next week on this. Michael in Indiana will be on talking about phone systems, security, and what he has seen in the landscape as an administrator. News Due to the time of the interview, news did not get aired this week. I'll keep this for a show next week, and we'll reference this next week. If you find anything from the below section you want covered, you're welcome to have your thoughts heard. Here's the news from this week we didn't cover that might be of interest to you. News Notes September 12, 2020 is the main source for news this time.

Episode 9: the security box, typosquatting and more
Please check the tech blog for full show notes. They are longer than space permits in these notations. I hope you all enjoy the program as much as I have bringing it to you. We'll be back to Wednesday next week.