What happens if you don't patch your system - Ask Equifax

Everyone wants to go to heaven but, no one wants to die.
Every company wants to be fully protected but most of them don't want to patch (in time)

Apache Foundation pointed out earlier this week, it reported CVE-2017-5638 in March 2017


BTW.
The company also appears to have suffered another data breach, this time in Argentina where its Bryan Krebs reports “an online portal designed to let Equifax employees in Argentina manage credit report disputes from consumers in that country was wide open, protected by perhaps the most easy-to-guess password combination ever: “admin/admin.”


For More info:
https://www.theregister.co.uk/2017/09/14/missed_patch_caused_equifax_data_breach/

Are You Really Buying Spring Water?

Water sold in a bottle may be labeled distilled, spring, mineral, artesian or sparkling to name a few. More than 17 million barrels of oil are used in the manufacture of bottled water and 50 billion water bottles are used and discarded every year.² The cost of bottled water may be as much as 2,000 times more than tap water;³ 8 glasses of water each day from your tap costs approximately 49 cents per year while the same amount in bottled water costs $1,400.⁴

For More details:
http://articles.mercola.com/sites/articles/archive/2017/09/06/are-you-really-buying-spring-water.aspx

Free - Pen Test Cheat Sheet for Power Shell from SANS

Nothing great, just a few important commands in 2 pages

Get it here:
https://pen-testing.sans.org/blog/2016/05/25/sans-powershell-cheat-sheet?utm_medium=Social&utm_source=Twitter&utm_content=SANSPenTest+BLOG+PowerShell+Cheat+Sheet&utm_campaign=SANS+Pen+Test

Single SpamBot had 711 million records of which 80 million are credentials

“Just for a sense of scale, that’s almost one address for every single man, woman and child in all of Europe,” Hunt wrote

The spambot is called Onliner and it’s been around since 2016 and is best known for spreading the Ursnif banking Trojan.


For more info:
https://threatpost.com/spambot-contains-mind-boggling-amount-of-email-smtp-credentials/127722/

Can you change a benign email to a malicious one after it has been sent? - YES , we have ROPEMAKER

Ropemaker - stands for Remotely Originated Post-delivery Email Manipulation Attacks Keeping Email Risky

A successful exploitation of the Ropemaker attack could allow an attacker to remotely modify the content of an email sent by the attacker itself, for example swapping a URL with the malicious one.

This can be done even after the email has already been delivered to the recipient and made it through all the necessary spam and security filters, without requiring direct access to the recipient’s computer or email application, exposing hundreds of millions of desktop email client users to malicious attacks.


More Details Here:
https://thehackernews.com/2017/08/change-email-content.html

Dark Side of Technology - Sound based hacks (CovertBand)

• Detect people’s activities
• Induce false readings in a phone’s accelerometer
• balancing gyroscopes like drones and hoverboards could be similarly disrupted
• remotely hacking into air-gapped computers
• Covert Sonic Weapon

More details here:
https://www.fastcompany.com/40455626/hack-music-can-watch-you-through-your-devices

check your password if it is already in the compromised list

You think you have a strong password
Or
You create a new password and you believe it is good enough

Are you sure it is not part of the  compromised password list?


Go the the site below and test your password.

https://haveibeenpwned.com/Passwords