SweetOps #security for April, 2019

Archive: https://archive.sweetops.com/security/

2019-04-08

Erik Osterman (Cloud Posse)

https://techcrunch.com/2019/04/08/secret-service-mar-a-lago/

No one, not even the Secret Service, should randomly plug in a strange USB stick attachment image

If you’ve been on Twitter today, you’ve probably seen one story making the rounds. So the Secret Service stuck Zhang’s thumbdrive into their computer. https://t.co/0T6LAfOtEl pic.twitter.com/RSfUgw4I4n — Chris Wysopal (@WeldPond) April 8, 2019 The case follows a Chinese nation…

2019-04-10

Erik Osterman (Cloud Posse)

09:41:25 PM

https://www.wired.com/story/triton-hacker-toolkit-fireeye/

A Peek Into the Toolkit of the Dangerous Triton Hackers attachment image

Security firm FireEye is naming a collection of tools it says might help identify more active Triton intrusions.

2019-04-26

Erik Osterman (Cloud Posse)

03:51:32 AM

https://news.ycombinator.com/item?id=19763413

Erik Osterman (Cloud Posse)

03:52:02 AM

Docker Hub Hacked. 190K accounts affected (~5%), GitHub tokens may be exposed.

2019-04-29

Maciek Strömich

08:55:22 AM

but tbh, it was a matter of time when that happens. too valuable of a target

2019-04-30

Maciek Strömich

02:19:58 PM

https://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-hidden-backdoors-in-huawei-equipment

Vodafone Found Hidden Backdoors in Huawei Equipment attachment image

While the carrier says the issues found in 2011 and 2012 were resolved at the time, the revelation may further damage the reputation of a Chinese powerhouse.

Erik Osterman (Cloud Posse)

03:03:36 PM

Wow

Erik Osterman (Cloud Posse)

03:03:47 PM

Fianally the smoking gun