Security Bits Logo no alpha channel

Security Bits with Bart Busschots — 12 June 2022

Feedback & Followups

  • 🇺🇸 An interesting (and slightly depressing) look at the DOJ’s change in official policy around the CFAA from the security researcher’s POV: What Counts as “Good Faith Security Research?” — krebsonsecurity.com/…
  • Social Media Developments
    • Instagram brings Amber Alerts to 25 countries, including the US, Canada, Australia, New Zealand, the UK, and much of Europe — www.imore.com/…
      • Argentina, Australia, Belgium, Bulgaria, Canada, Ecuador, Greece, Guatemala, Ireland, Jamaica, Korea, Lithuania, Luxembourg, Malaysia, Malta, Mexico, the Netherlands, New Zealand, Romania, South Africa, Taiwan, Ukraine, the UK, the United Arab Emirates and the US
    • Instagram is making its Sensitive Content Controls available in more parts of their interface (currently only on the Explore tab) — www.imore.com/…
      > “… the protections will soon apply to search, Reels, hashtag pages, ‘accounts you might follow’ and suggested posts that appear in users’ main feeds.”

❗ Action Alerts

  • Windows users beware, the Follina zero-day is being actively exploited, and there’s no patch yet — for now, disable the ms-msdt:// url scheme — nakedsecurity.sophos.com/…
    • Microsoft’s official guidance — msrc-blog.microsoft.com/…
    • Related: experimenting with other non-standard URL schemes in Windows, a security researcher found a way to use search-ms:// URLs to pop up a window showing a file listing on a remote server which could be helpful as part of a social engineering attack — nakedsecurity.sophos.com/…

Notable News

Interesting Insights

Palate Cleansers

*A very joyful episode of the SMR Podcast about Chris Ashley’s new Ford F-150 Lightning EV Episode F-150: SMRpodcast Episode #450

Legend

When the textual description of a link is part of the link it is the title of the page being linked to, when the text describing a link is not part of the link it is a description written by Bart.

Emoji Meaning
🎧 A link to audio content, probably a podcast.
A call to action.
flag The story is particularly relevant to people living in a specific country, or, the organisation the story is about is affiliated with the government of a specific country.
📊 A link to graphical content, probably a chart, graph, or diagram.
🧯 A story that has been over-hyped in the media, or, “no need to light your hair on fire” 🙂
💵 A link to an article behind a paywall.
📌 A pinned story, i.e. one to keep an eye on that’s likely to develop into something significant in the future.
🎩 A tip of the hat to thank a member of the community for bringing the story to our attention.

Leave a Reply

Your email address will not be published.

Scroll to top