Daniel Cid @dcid@noc.social

WordPress deploys forced security update for dangerous bug in popular plugin | ZDNet: https://www.zdnet.com/article/wordpress-deploys-forced-security-update-for-dangerous-bug-in-popular-plugin/

After over 15 years of using #google, my account has been permanently disabled without any reason given. All my emails, contacts, photos, docs, accounts connecting with google, etc.... Everything is gone. Without warning or chance of recovery. I'm at a complete loss...

https://twitter.com/Cleroth/status/1318911490863337472

Loginizer < 1.6.4 - Unauthenticated SQL Injection

https://wpscan.com/vulnerability/10441

This is serious. Over 1m WordPress sites have this plugin running.

If you are using WordPress, check if this plugin is installed - and update now.

The absolutely fascinating story of the JP Morgan Chase hack. #infosec #podcast

https://darknetdiaries.com/episode/76/

~Open Source Security Tool of the Day~

#osstotd

Fully automated offensive security framework for reconnaissance and vulnerability scanning

https://j3ssie.github.io/Osmedeus/

The level of blatant censorship occurring on all social platforms, regardless of where you sit on the political spectrum, should worry us all. Social platforms should not be arbiters of truth, and it's just getting worse.

My “we have no evidence this outage is caused by a security breach or hack” shirt has people asking a lot of questions already answered by my shirt.

Outlook RCE bug is much more serious, but the bug you have to be on the same physical network to exploit got a name, so it's the one people (read: media and managers) think is serious.

Ok, let's move on to more pressing issues..

What's your highest score: http://www.trex-game.skipser.com/

-2m scanned websites contained outdated software which could potentially lead to an exploit.

-70k sites were infected with SEO spam, accounting for 39.59% of website infections.

-19k scanned websites contained malicious scripts or iframes from blacklisted domains.

-11% of infected sites were found to include scripts and iframes from blacklisted domains.

Pretty good report from Sucuri:

https://blog.sucuri.net/2020/10/sitecheck-malware-report-september-summary.html

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work.

There's an old adage in information security: "Every company gets penetration tested, whether or not they pay someone for the pleasure." Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to ...
https://krebsonsecurity.com/?p=53255

If you are on mastodon.social please go on another instance
Not because it's a bad one but because it's ruining the federation point by concentrating too many users on a single instance

Many Mastodon, Pleroma, GNU Social, Honk and so on instances would be glad to welcome new users
And those are cool and generally extremely friendly

DuckDuckGo slams Google’s Android search engine auction as “fundamentally flawed” - The Verge - https://www.theverge.com/2020/9/29/21494316/microsoft-bing-android-google-search-alternative-option-download

My thoughts on the Apple walled garden after spending a couple of years in the iOS ecosystem.

https://kevq.uk/the-apple-walled-garden/

#Apple #iOS

Who’s Behind Monday’s 14-State 911 Outage?.

Emergency 911 systems were down for more than an hour on Monday in towns and cities across 14 U.S. states. The outages led many news outlets to speculate the problem was related to Microsoft's Azure web services platform, which also was struggling with a widespread outage at the time. However, mu...
https://krebsonsecurity.com/?p=53121

I went totally the wrong way with #LinkChomp

ShadyURL - Don't just shorten your URL, make it suspicious and frightening.
http://www.shadyurl.com/