Security Talk 12 | US repeals privacy law, ISPs can sell your data | Summary and Q&A

TL;DR

Recent events include the repeal of a privacy law in the US, a missile strike in Syria, dos attacks being marketed, a UAC bypass using Windows backup and restore, and Google's dis trust of Symantec certificates due to poor quality control.

Key Insights

• 🤨 The repeal of the privacy law in the US raises concerns about the privacy and security of citizens' browsing data.
• 🇸🇾 Controversy and differing stories surround the recent US missile strike in Syria, highlighting the complexity of the situation.
• 👊 DOS attacks are a profitable industry for cybercriminals, with long-term plans and recurring costs.
• 🚙 The potential UAC bypass using Windows backup and restore utility poses a risk to machines on a network if one is already infected.
• 👤 Google's reduction in trust for Symantec certificates showcases the importance of quality control in maintaining security and user trust.
• 👤 Ransomware campaigns, such as the Matrix ransomware, continue to target users through various delivery methods.
• 💻 Malware propagation through shortcuts is a common technique used to infect other computers on a network.

Transcript

security talk 12 April the 8th finally got around to doing one in the weekend kicking things off we have some political news so if you're especially turned off by that maybe you should skip the first two topics but unless you've been living under a rock you're probably aware that the United States government recently voted in favor of repealing a P... Read More

Questions & Answers

Q: What is the major concern following the repeal of the privacy law in the US?

The major concern is that internet service providers can now sell browsing data, compromising the privacy and security of citizens' personal information.

Q: What are the differing viewpoints surrounding the Syrian missile strike?

The US claims it was in response to a chemical attack orchestrated by the Assad regime, while Russia and Assad argue it was an accident, destroying chemical weapons stored by terrorists.

Q: How profitable are DOS attacks according to Kaspersky?

Kaspersky states that 95% of cybercriminals make a profit off of DOS attacks, making it a thriving industry with various plans for customers to pay for.

Q: What potential risk does the Windows backup and restore utility pose?

If a local machine is already infected with ransomware, it can use the utility to deliver the ransomware to other machines on the network, making it a possible attack vector.

Q: Why is Google reducing trust in Symantec certificates?

Google has found significant flaws and poor quality control in Symantec certificates, leading to at least 30,000 flawed certificates. They aim to incrementally distrust Symantec certificates in future Chrome releases.

Summary & Key Takeaways

• The United States government has repealed a privacy law, allowing internet service providers to sell browsing data, raising concerns for citizen's privacy.

• Controversy surrounds the recent US missile strike in Syria, with differing versions of the story from the US, Russia, and the Assad regime.

• Kaspersky released an article on DOS attacks, revealing their profitability and the increasing threat to online businesses and websites.

• A potential UAC bypass using Windows backup and restore utility may deliver ransomware, but it is only possible if a local machine is already infected.

• Google is reducing trust in Symantec certificates due to flawed quality control, leading to incremental distrust in future Google Chrome releases.