Tag Archive for: Everywhere

Code-execution bug in Pulse Secure VPN threatens patch laggards everywhere

Code-execution bug in Pulse Secure VPN threatens patch laggards everywhere

Enlarge (credit: Bid.in2corporate.com)

Organizations that have yet to install the latest version of the Pulse Secure VPN have a good reason to stop dithering—a code-execution vulnerability that allows attackers to take control of networks that use the product.

Tracked as CVE-2020-8218, the vulnerability requires an attacker to have administrative rights on the machine running the VPN. Researchers from GoSecure, the firm that discovered the flaw, found an easy way to clear that hurdle: trick an administrator into clicking on a malicious link embedded in an email or other type of message.

Phishing season has now officially started

“While it does require to be authenticated,” GoSecure researcher Jean-Frédéric Gauron wrote in a post, referring to the exploit, “the fact that it can be triggered by a simple phishing attack on the right victim should be evidence enough that this vulnerability is not to be ignored.”

Read 10 remaining paragraphs | Comments

Biz & IT – Ars Technica

How The Public Domain Coronavirus ‘Beauty Shot’ You Now See Everywhere Came To Be

By now, you’ve probably seen this image of the coronavirus responsible for COVID-19 a million times:

It’s freaking everywhere. And it’s in the public domain. That’s because it was created by employees at the CDC, and as a work of the US government it is exempt from copyright laws, meaning anyone can use it. Which is probably why everyone uses it. One of the many reasons why a public domain is so useful.

The NY Times has a nice story about how the image came to be that’s well worth reading.

On Jan. 21, the day after the C.D.C. activated its emergency operations center for the new coronavirus, Ms. Eckert and her colleague Dan Higgins were asked to create “an identity” for the virus. “Something to grab the public’s attention,” she said. Ms. Eckert expected that whatever they came up with might appear on a few cable news programs, as their creations had in the past.

Instead, as the pandemic spread and intensified, their rendering’s reach did, too. “It started popping up around the world,” she said.

The story goes into a fair bit of detail about how it was created and also some of the design choices that Alissa Eckert and Dan Higgns made to make that design so memorable.

They chose a stony texture, wanting it to seem like “something that you could actually touch,” Ms. Eckert said. Other details — like the level of realism and the lighting, which has the spikes cast long shadows — were calibrated to “help display the gravity of the situation and to draw attention,” she said.

After reading about that, I discovered that there were a variety of other images of this particular coronavirus used around the globe. Here’s just a few (there are so many more…):

Indeed, this is the image that the European Centre for Disease Prevention and Control has been using:

Not quite as nice as the CDC’s… and thanks to more murky copyright laws in the EU, not as clear if it’s in the public domain, so wasn’t nearly as likely to catch on and become the symbol we all associate with COVID-19.

Techdirt.

Sextortion scam leverages Nest video footage to fool victims into believing they are being spied upon everywhere

A bizarre sextortion scam is attempting to trick victims that not only has their smartphone been hacked to spy upon their private lives, but also every other device they have encountered which contains a built-in camera.

Read more in my article on the Hot for Security blog.

Graham Cluley

A New Security Vulnerability Means iPhone and Android Phones Could Be Tracked Everywhere They Go Online – Inc.

A New Security Vulnerability Means iPhone and Android Phones Could Be Tracked Everywhere They Go Online  Inc.

Researchers at Cambridge University demonstrated that the unique calibration data associated with the sensors in iOS and Android smartphones can be used …

“android security news” – read more