Metadata is data about data. Some people don’t think that type of data is revealing. But it is!
Possibly NSFW below
.
.
.
.
.
Found online, someone was helping his sister move their mattress… That’s what I call an oops-find! Damn you memory foam!
Cisco made a great video (4 minutes) that I honestly think everyone must see. It breaks down a complex ransomware attack. Picture this happening to your organization. Are you ready for it?
According to Gartner, NIST says 30 percent of U.S. organizations used the framework in 2015, and it expects that percentage to grow to 50 percent by 2020.
There is a new security consulting company that has the amazingly funny name
; DROP TABLE “COMPANIES”;– LTD
Of course the first thing I think about is Exploits of a mom…
In an odd twist, the Koolova ransomware will decrypt for the low price of reading two articles on ransomware… The articles that Koolova wants you to read are an article from Google Security Blog called Stay safe while browsing and BleepingComputer’s Jigsaw Ransomware Decrypted: Will delete your files until you pay the Ransom article.
Once you read both articles, the Decripta i Miei File, or Decrypt My Files, button becomes available.
You’ll most likely never run into this in the wild, it seems like a nice proof of concept and does extreme forced learning!
Everyone knows that the CIA Triad stands for the Confidentiality, Integrity, and Availability of data, earlier in 2016 at a Gartner conference though, I ran across this. The CIAS model, which is improved to include the safety of people and environments. Keep that in mind as you plan out 2017 and beyond! Happy New Year!!!
CIA: Old Busted
CIAS: New Hotness (from a Gartner conference in 2016)
Should auld acquaintance be forgot,
And never brought to mind?
Should auld acquaintance be forgot,
And days of auld lang syne?
And days of auld lang syne, my dear,
And days of auld lang syne.
Should auld acquaintance be forgot,
And days of auld lang syne?
The information security community is abuzz about the DHS/FBI Joint Analysis Report which was published on December 29th, 2016. The report investigates if Russia interfered with the U.S. election process through hacks on the Democratic National Committee, the Democratic Congressional Campaign Committee, and Clinton Campaign Chief John Podesta. All you need to know in the report is the first 3 pages.
The reporting is very lacking and more than half of it are actionable recommendations for future reference. It does reveal that the largest vulnerable attack target is the people, through spearphishing campaigns. I can almost guarantee that the majority of companies will have the take away that more money is needed in technical safeguards and not focus on the education of people to identify and report phishing attacks. Though it’s clearly identified that attackers were able to phish their targets, social engineer them to use a fraudulent password changing service to harvest credentials, the report does not list educating their staff as the number 1 mitigation strategy.
Did Russia do it? Quite possibly… Was it the Russian Federal Security Service? Not 100% sure.
Read more
January
February
March
April
May
June
July
August
September
October
November
December
We had a great time in Michigan with the Michigan family for Christmas this year! The only thing that wasn’t pleasing was dealing with the airlines.
![CarmeloWalsh[.]com](https://www.carmelowalsh.com/wp-content/uploads/2025/03/cropped-20250226_105950000_iOS.jpg)