MedStar Health

It’s assumed that MedStar Health is a victim of crypto-ransomware as MedStar forced a shutdown of their email and records database yesterday in order to stop the spread of the malware from encrypting more systems.

Most operations went back to the manual use of paper-charts and records.

It’s very likely that this wasn’t a targeted attack to the MedStar Health company… It’s more likely that this could have been a user accidentally visiting a website that was compromised with malware or a blanketed/random phishing attack.

Can you imagine the persons making the decision to shut down all IT? That couldn’t have been an easy decision…

The FBI was brought in to investigate.

Stay up-to-date with their Facebook page

Posted in Security Blog | Tagged , , , , , | Comments Off on MedStar Health

Wireless Mice Leave Corporate Networks Vulnerable To Attack

Wireless mice, the non-bluetooth kind, are a large gaping hole to computer/network security. Yes, not all wireless is bluetooth, matter of fact, Dell, Amazon, HP, and Lenovo sell and ship wireless accessories that aren’t bluetooth; they transmit data unencrypted.

With a connection distance of 180 feet, it’s possible for an attacker to use a dongle and antenna worth about $20, and a few lines of code to connect to a computer ‘as a mouse’ then tell the computer it’s no longer a mouse, but a keyboard.

Here is the Reuters video (opens in a new tab).

Some vendors have started releasing some updates.

Here is a link to the article.

Posted in Security Blog | Tagged , , , , , , , , , , | Comments Off on Wireless Mice Leave Corporate Networks Vulnerable To Attack

Easter Weekend

We celebrated all weekend, starting with Viviana’s birthday, meeting up with some of our family, and then continuing the next day at our house for a small get-together.

20160326_222257754_iOS

20160326_222842995_iOS

20160326_224629656_iOS

20160326_224651571_iOS

20160327_002952747_iOS

Posted in life | Comments Off on Easter Weekend

Verizon Breached. Check!

Creator of the infamous Data Breach Investigations Report has themselves been breached.

Contacted about the posting, Verizon Enterprise told KrebsOnSecurity that the company recently identified a security  flaw in its site that permitted hackers to steal customer contact information, and that it is in the process of alerting affected customers.

From the article, customer contact information of about one and a half million was stolen and up for sale in the underground. The seller(s) were asking $100,000 for the whole lot and even would sell chunks of 100,000 for $10,000.

It is assumed that buyers of this information will use the data to create sophisticated social engineering attacks.

Posted in Security Blog | Tagged , , , , , , | Comments Off on Verizon Breached. Check!

9 Whole Years

It’s our anniversary… In a way… Not our marriage anniversary though, but the day we first started seeing each other.

I recorded a video a little earlier in the day. I kept it to myself to reveal later.

When Jaime got home, she had gifts for me! A ukulele tuner and some blank sheet-music to transpose some of my own stuff! It was really cool! After dinner we ended up going to the music store and I bought a new Ukulele!

20160318_140209000_iOS

When we got home, I had to show Jaime the video I made her! It’s badly sung, but it’s my best after MANY MANY takes!

Posted in life | Comments Off on 9 Whole Years

USB Compromise Reveals 22,000 ISIS Identities

A man who names himself Abu Hamed has defected from ISIS and he plausibly stole a USB stick from ISIS security headquarters that contained recruiting questionnaires.

The information in the questionnaires contained name, date and place of birth, hometown, telephone number, education and blood type of 22,000 recruits. There was even a list of members who would perform suicide missions. I guess ISIS has not deployed a DLP agent or has misconfigured reporting.

I wonder what will happen to their CISO…

More here

Posted in Security Blog | Tagged , , , , , , , , | Comments Off on USB Compromise Reveals 22,000 ISIS Identities

The First iPhone Hacker Built a Self-Driving Car in his Garage

George Hotz says he built a self-driving car in a month.
George was the first person to hack an iPhone and a Playstation. He has a great philosophy on the AI that drives the self-driving car.

Posted in Security Blog | Tagged , , , , , | Comments Off on The First iPhone Hacker Built a Self-Driving Car in his Garage

IRS and Seagate?

The Internal Revenue Service issued an alert on March 1st, 2016, to payroll and human resources professionals to be aware of an emerging phishing email scheme that purports to be from company executives and requests personal information on employees.

The following are some of the details contained in the e-mails:

  • Kindly send me the individual 2015 W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review
  • Can you send me the updated list of employees with full details (Name, Social Security Number, Date of Birth, Home Address, Salary).
  • I want you to send me the list of W-2 copy of employees wage and tax statement for 2015, I need them in PDF file type, you can send it as an attachment. Kindly prepare the lists and email them to me asap.

More information is on the IRS website.

Today on Brian Krebs’ website, Seagate Technologies has confessed that they fell for this scam… on March 1st, 2016. In Brian’s article he wrote:

“On March 1, Seagate Technology learned that the 2015 W-2 tax form information for current and former U.S.-based employees was sent to an unauthorized third party in response to the phishing email scam, the information was sent by an employee who believed the phishing email was a legitimate internal company request.”

It’s highly recommended that HR and Finance get notified of this specific phishing attack. Please let them know! Share this article with them.

Posted in Security Blog | Tagged , , , , , , , , | Comments Off on IRS and Seagate?

KBB Car Hacking Survey Results

Kelley Blue Book performed a survey that they revealed at RSAC 2016 regarding vehicle vulnerabilities and even though 2015 was the year that the public really started learning about car hacking. Since the last big media news blast, awareness on car hacking has dropped.

Cars today are more connected than they have ever been and even more are getting built and sold, and every new model has even more entry points than the last.

  • According to a previous vehicle vulnerability survey conducted in July 2015, awareness of hacking incidences has dropped substantially to just 26% of consumers being able to recall an instance of vehicle hacking from the past year.
  • 50% of millennials are the least likely of all generations to think vehicle hacking will be a frequent problem within the next three years. Nearly 70% of all respondents believe the same.
  • The majority of Millennials support vehicles becoming more connected at 60%; however, 58% are reluctant to get an autonomous vehicle. In comparison, only 42% of all consumers support vehicles becoming more connected, and 75% are reluctant to get an autonomous vehicle.
  • The most common motive for hacking a vehicle is believed to be theft, according to more than half of respondents.
  • Only 13% of consumers would never use Google’s Android Auto or Apple CarPlay while driving if it increased the potential for their vehicle to be hacked. Meanwhile, 33% said they would only use these applications in emergencies.
  • Among all generations, 56% of consumers believe that vehicle manufacturers should be the primary entities offering software to prevent vehicle hacking, and half of all consumers prefer they provide insurance to cover any potential losses should a hack occur.
  • 44% of consumers think the vehicle manufacturer is most responsible for securing a vehicle from hacking vulnerabilities. More than 66% view vehicle manufacturers as partially responsible, even if a car is hacked through a mobile phone’s software or applications.

From Braking the Connected Car: The Future of Vehicle Vulnerabilities Braking the Connected Car

Posted in Security Blog | Tagged , , , , , | Comments Off on KBB Car Hacking Survey Results

RSA Conference 2016 – Part 2

To me, some of the fun of the RSA conference is running into Security Celebrities! My personal goal this year was to get some selfies with a few of them. Sometimes I just couldn’t though but was able to snap a few pics of them.

20160301_232323155_iOS

Rami Malek from Mr. Robot at the Qualys booth, RSA Conference 2016

Mr. Robot is an entertaining show, I like it. It’s a little bit “Fight Club” and a little bit “Hackers” mixed together with a large serving of drama. The description of the show from IMDB is:
A young computer programmer who suffers from social anxiety disorder and forms connections through hacking. He’s recruited by a mysterious anarchist, who calls himself Mr. Robot.

 

James Lyne, RSA Conference 2016

James Lyne, RSA Conference 2016

When I started researching those passionate about their craft, James Lyne’s videos really interested me. The first video I saw with James Lyne was about cryptography and the power of randomness.

 

Jack Jones at RSA 2016

Jack Jones, RSA Conference 2016

I first met Jack Jones about 12 years ago when we were both at Nationwide Insurance Companies… Well, I was at a subsidiary of Nationwide at the time as a contractor. Jack was one of the many people who interviewed me for an FTE position and eventually, as his risk quantification analysis methodology developed, I was one of the many in the company that was taught by him. I held on to his methodology and used his examples to raise the knowledge of my peers and impress future bosses.

 

Dr. Charlie Miller & Chris Valasek at RSA 2016

Dr. Charlie Miller & Chris Valasek, RSA Conference 2016

I’ve had a huge fascination with vehicle hacking over the last few years as you can tell in my blog (tag car hacking) and it’s mostly due to these guys who have, in my opinion, gone above and beyond to prove that vehicles are not secure by design, and are showcasing their work to try to make our roads safer from cyber-attacks.

 

Malcolm Harkins!

Malcolm Harkins, RSA Conference 2016

Malcolm Harkins is the global chief information security officer (CISO) at Cylance Inc. He joined Cylance following 23 years with Intel, where he most recently served as a vice president and its first chief security and privacy officer (CSPO). Malcolm has come and spoke at my work for National Cyber Security Awareness Month in 2015, his message was strong and very valuable. Malcolm’s book, Managing Risk and Information Security: Protect to Enable, is a must read for any information technology and security leadership as well as for the executive.

 

Walking through the expo floor, there was so much to take in. How is it that multiple vendors of similar products were “World leaders in ____”? The way I see it, if a vendor is a world leader in something, we would all be coming up to them telling them they are instead of them coming up to us trying to convince us they are. Thanks for the logoed pens though.

It was interesting being recognized as I walked around the event, a vendor recognized me as my old personality of being an adult-themed cake decorator and others just seemed to recognize me from LinkedIn. It is a fun experience.

I attended several more conference booths in the West center and really felt that the many workstreams I’m involved in at work are validated. I hope that other’s experience is the same. How difficult would it be to come to a conference, attend some sessions and find out everything you’ve been doing is wrong?

Aside from work life, I really liked the RSAC CyberSafety Kids booth, they’ve made some games to raise awareness of dangers for kids. I know it’s a crappy picture, but this is a good starting point for those with children to get involved in their capability to identify and avoid threats.

20160301_000136864_iOS

 

Posted in Security Blog | Tagged , , , , , , , , | Comments Off on RSA Conference 2016 – Part 2