Security News For The Week Ending August 12, 2022
Windows 11 May Damage Data on Some CPUs
Microsoft issued a warning that computers that use the Vector AES instruction set might damage data , but they don’t say how or why. Microsoft says fixes in June and May prevent further damage but the result is that encryption is much slower after the patch. They also say that the July patch release fixes the performance problem. This only affects Windows 11 and Server 2022. Credit: Bleeping Computer
Facebook Turned Over Chat Messages Between Mom and Daughter Now Charged Over Abortion
Facebook turned over chats between a mother and daughter to Nebraska police after they were served with a warrant related to an abortion. The mom is accused of giving her daughter abortion pills and then burying the fetus. In Nebraska abortion is illegal after 20 weeks and this abortion happened at 28 weeks. Facebook really didn’t have a choice and it is a case of user beware. Credit: NBC News
Professional Hacking Company Cellebrite Hacked, 4 TB of Data Leaked
Cellebrite is loved or hated, depending on whom you talk to. They hack phones for a living and they are less concerned about for what country than whether the check clears. Now 4 TB of their code has been stolen and leaked. For now, the web site is restricted as to whom they are letting download the stolen code. Credit: Hackread
12 Years After Stuxnet, Critical Infrastructure Still Vulnerable
Author and journalist Kim Zetter, speaking a Blackhat, said the the Colonial Pipeline hack last year shows that critical infrastructure operators have made little progress in protecting their networks. From our first hand experience with critical infrastructure, I would absolutely agree with her. Adversaries all over the world would love nothing more than to create fear and chaos and it is mostly through luck that more attacks have not happened. Credit: Dark Reading
OUCH! 25% of Employees Don’t Care Enough to Report an Incident
30% of employees don’t think their personally play a role in maintaining their company’s security posture. Worse yet, only 39% say they are very likely to report an incident. Why? 42% say they would not know if they caused an incident and 25% say they just don’t care. We got our work cut out for us. Credit: Helpnet Security
by 