Episode 44 - Fly My Pretties, Fly!

The Host Unknown Podcast

This week in Infosec

Liberated from the “today in infosec” twitter account:

25th February 1989: Knight Lightning published an Enhanced 911 technical doc (it had been stolen from a BellSouth computer) to Phrack under the pseudonym "The Eavesdropper".

http://phrack.org/issues/24/5.html#article

https://en.wikipedia.org/wiki/United_States_v._Riggs

On This Day: Feb. 25, 2005, authorities arrested Dennis Rader, a municipal employee and church leader, for the so-called BTK (blind, torture, kill) serial killings that terrorized Wichita, Kan. Rader was convicted and sentenced to 10 consecutive life terms.

Between 1974 and 1991, he murdered at least 10 people in Wichita, Kansas. He apparently got away with it for over a decade.

In 2004 an article was published suggesting that nobody remembered him.

Desperate for notoriety, he began to write to the police and media gloating and showboating.

In 2005 he sent a floppy disk with some bragging. When police examined the disk, they found metadata of an old word document on it which revealed the name of the Church where he worked and his surname.

https://www.abajournal.com/magazine/article/how_the_cops_caught_btk

Bill Big Balls of the Week

I use an email tracker to spy on people I work with. This is why

https://www.independent.co.uk/life-style/email-trackers-how-to-work-b1806723.html

Rant of the Week

Apple has long held its position on iCloud backups. It has focused on usability rather than total security. If a user changes iPhone and wants all their old iMessages, the easiest way to retrieve them is by getting Apple to store and send them from the iCloud to the new device. It’s the same for other messaging apps like WhatsApp, which offers backups.

But Apple has reportedly considered making iClouds much more difficult for police to access.

A Reuters report last year suggested that Apple did have plans to fully encrypt iCloud accounts too, so only users had the key, but backed down. Though the report claimed the decision was made after the FBI asked for iClouds to remain accessible, Reuters found no evidence of Apple’s motivation for ditching the plans.

https://www.forbes.com/sites/thomasbrewster/2021/02/15/when-imessages-arent-private-government-raids-apple-icloud-in-a-dark-web-drug-investigation/

Industry News

Internet Registry RIPE NCC Warns of Credential Stuffing Attack

Concern as Attacker “Breakout” Time Halves in 2020

US Retailer Kroger Admits Accellion Breach

Aircraft-Maker Bombardier Breached by Accellion FTA Hackers

Legal Firm Leaks 15,000 Cases Via the Cloud

Kia Denies Ransomware Attack

Aston Martin Partners with SentinelOne

CrowdStrike Slams Microsoft Over SolarWinds Hack

Educational Adaptation Required to Close the Cyber-Skills Gap

Javvad’s Weekly Stories

6000 vmware vcentre devices vulnerable to remote attacks

Is Clubhouse safe, and should CISOs stop its use?

Google Alerts used to launch fake Adobe Flash Player updater

Hackers are using Google Alerts to help spread malware

Javvad wins 2021 Cybersecurity Professional Awards – Winners

Tweet of the Week (not aired)

https://twitter.com/HackingDave/status/1364945642599182344?s=20

The Little People

Yousef Syed and security architects

Come on! Like and bloody well subscribe!