SECURITY WARNINGS & Notices - Please post them here

[Be Secure]

New Azer CryptoMix Ransomware Variant Released
https://www.bleepingcomputer.com/news/security/new-azer-cryptomix-ransomware-variant-released/
V.T-https://www.virustotal.com/en/file/6f5f3bd509c22f0aec4a55fd4d08b7527be4708145b760bc3bd955c6e7538064/analysis/

[Be Secure]

Decryptor Released for the Mole02 CryptoMix Ransomware Variant
https://www.bleepingcomputer.com/news/security/decryptor-released-for-the-mole02-cryptomix-ransomware-variant/

[Be Secure]

New BTCWare Ransomware Decrypter Released for the Master Variant
https://www.bleepingcomputer.com/news/security/new-btcware-ransomware-decrypter-released-for-the-master-variant/

[polonus]

https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

While not sticking to the rules, these certifiers have endangered website visitors and are not trusted any longer by Google.

Background read: https://www.lowendtalk.com/discussion/95618/google-chrome-distrusting-wosign-and-startcom-certificates

Comics can tell more than a thousand words: -http://dilbert.com/search_results?terms=Vast+Power+Of+Certification

pol

[polonus]

Most providers and CDNs in cahoots with Big GubbermentRead: https://www.eff.org/who-has-your-back-2017

This not about protecting your personal data through security technology, best practices etc, this just touches transparency,
policy towards end-users, Amazon and Whatsapp has a bad reputation for the total lack of protecting your data against snoopers.

Adobe, Amazon, Apple, Facebook, Google, LinkedIn, Microsoft, T-Mobile, Twitter, WhatsApp, WordPress en Yahoo. Providers Verizon, T-Mobile, Comcast en AT&T just scored one star in protecting your data from Government requests.

polonus

[polonus]

Big Campaign in USA for Netneutrality:

https://www.battleforthenet.com/july12/

polonus

[Para-Noid]

Big Campaign in USA for Netneutrality:

https://www.battleforthenet.com/july12/

polonus

Knowing the political climate here in the good ol' U.S. of A. this looks like a losing cause. 
We can always hope. 

[ehmen]

Data of 14 Million Verizon Customers Exposed in Server Snafu

https://www.bleepingcomputer.com/news/security/data-of-14-million-verizon-customers-exposed-in-server-snafu/

[ehmen]

Don't Open SPAM Containing Password Protected Word Docs
(Should be obvious at this point.)

https://www.bleepingcomputer.com/news/security/psa-dont-open-spam-containing-password-protected-word-docs/

[polonus]

The WPSetup Attack: New Campaign Targets Fresh WordPress Installs
Read: https://www.wordfence.com/blog/2017/07/wpsetup-attack/

The best method for "wizzard"-like  setups for webapplications is to have the set-up done locally at home, and when the set up is what you like it to be, then you are  to rsync it to the webserver, together with the right permissions, security and unnecessary files being deleted.

Even better stil is using git and make sure through a .gitignore that no vulnerable files land onto your live server.

Whenever you do not need an interactive site really, in that case you should make use of a static site generator! (When you need comments on posts you could do that using Disqus - https://gohugo.io/extras/comments/)

For starters there is Hugo, giving the least problems for beginners; http://gohugo.io/

(Info credits go to Soeperees and Neb Poorten, thanks folks)

polonus (volunteer website secruity analyst and website error hunter)

[ehmen]

"Particle" Chrome Extension Sold to New Dev Who Immediately Turns It Into Adware

https://www.bleepingcomputer.com/news/security/-particle-chrome-extension-sold-to-new-dev-who-immediately-turns-it-into-adware/

[polonus]

New way to boycot or undermine: https://www.theregister.co.uk/2017/07/13/bitcoins_might_just_vanish_into_the_ether/

polonus

[polonus]

Retire QuickTime for Windows for good, uninstall!

Read why? Re: https://www.us-cert.gov/ncas/bulletins/SB17-191

polonus (volunteer website security analyst and website error-hunter)

[polonus]

Researchers find up serious holes in Web Ex: https://bugs.chromium.org/p/project-zero/issues/detail?id=1324

11 holes in Radius found in DHCP and RADIUS packet parsers via fuzzing: https://guidovranken.wordpress.com/2017/07/17/11-remote-vulnerabilities-inc-2x-rce-in-freeradius-packet-parsers/

polonus (volunteer website security analyst and website error-hunter)

Advice: always fully patch, upgrade and backup 

D.

[Be Secure]

“Perverse” malware infecting hundreds of Macs remained undetected for years
https://arstechnica.com/security/2017/07/perverse-malware-infecting-hundreds-of-macs-remained-undetected-for-years/