Domain Name Services – Friend & Foe Every reader of this blog will know that the Domain Name Service is a program/component/server role (depending on how old you are and how you take your poison) which turns the names for Internet resources like websites, mail servers etc. into their registered IP addresses. More technical readers … Read more
Last week, cloud security outfit Wiz announced what they called a ‘secret agent’ group of vulnerabilities that enable takeover and privilege escalation of Linux servers in the Azure cloud. These have now collectively been called ‘OMIGOD’ which has a logo. We all know that means serious. This is. The issue is to do with the automatic installation of a software agent … Read more
Those of you who have read more than one of these missives (thank you, thank you) may have noticed our fascination with the activities of the REvil ransomware group. For those not up to speed, here is a REvil primer. REvil (Ransomware Evil, see what they did there) is a Russian speaking cybercriminal gang that, as the name suggests, focus on encrypting, … Read more
This week, Indonesia has had more than a few serious issues with its Cyber security. After a month or so of communications and rectification, the Indonesian Government came clean, admitting that up to 13 Million records of travellers had been exposed to the public internet due to a poorly, or not at all, secured Elastic database, internet-facing, whoops. The data exposed … Read more