Technical

[DavidR]

New update options for Windows 10, version 1703
https://blogs.technet.microsoft.com/windowsitpro/2017/04/24/new-update-options-for-windows-10-1703/

I can't recall where I read it, but aren't you required to make changes to your privacy settings before installing the Creators Update ?

I can't see why it would be necessary to change privacy settings to receive updates.

[bob3160]

New update options for Windows 10, version 1703
https://blogs.technet.microsoft.com/windowsitpro/2017/04/24/new-update-options-for-windows-10-1703/

I can't recall where I read it, but aren't you required to make changes to your privacy settings before installing the Creators Update ?

I can't see why it would be necessary to change privacy settings to receive updates.

No. What you probably read was that this version has more settings under privacy than prior versions.
(It still doesn't change the fact that there is no privacy.....)

[Asyn]

OSX Malware is Catching Up, and it wants to Read Your HTTPS Traffic
http://blog.checkpoint.com/2017/04/27/osx-malware-catching-wants-read-https-traffic/

[Asyn]

Verizon’s 2017 Data Breach Investigations Report
http://www.verizonenterprise.com/verizon-insights-lab/dbir/2017/
http://www.verizonenterprise.com/resources/reports/rp_DBIR_2017_Report_execsummary_en_xg.pdf

[Asyn]

Remote security exploit in all 2008+ Intel platforms
https://semiaccurate.com/2017/05/01/remote-security-exploit-2008-intel-platforms/
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr

PS: Thanks to Dwarden for the links..!!

[Asyn]

Privacy Threats through Ultrasonic Side Channels on Mobile Devices
http://christian.wressnegger.info/content/projects/sidechannels/2017-eurosp.pdf

[Asyn]

Why the Next 10 Days Are Critical to the Internet’s Future
Net neutrality is in jeopardy again. We need another grassroots movement
https://blog.mozilla.org/blog/2017/05/08/next-10-days-critical-internets-future/
https://advocacy.mozilla.org/en-US/net-neutrality

[Asyn]

MsMpEng: Remotely Exploitable Type Confusion in Windows 8, 8.1, 10, Windows Server, SCEP, Microsoft Security Essentials, and more.
https://bugs.chromium.org/p/project-zero/issues/detail?id=1252
https://technet.microsoft.com/library/security/4022344.aspx

[Asyn]

Keylogger in Hewlett-Packard Audio Driver
https://www.modzero.ch/modlog/archives/2017/05/11/en_keylogger_in_hewlett-packard_audio_driver/index.html
https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txt

[Asyn]

Multiple Vulnerabilities in ASUS Routers
https://wwws.nightwatchcybersecurity.com/2017/05/09/multiple-vulnerabilities-in-asus-routers/

[Asyn]

Ransomware that infected Telefonica and NHS hospitals is spreading aggressively, with over 50,000 attacks so far, today
https://blog.avast.com/ransomware-that-infected-telefonica-and-nhs-hospitals-is-spreading-aggressively-with-over-50000-attacks-so-far-today

[Asyn]

Ransomware that infected Telefonica and NHS hospitals is spreading aggressively, with over 50,000 attacks so far, today
https://blog.avast.com/ransomware-that-infected-telefonica-and-nhs-hospitals-is-spreading-aggressively-with-over-50000-attacks-so-far-today

Customer Guidance for WannaCrypt attacks
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

[Asyn]

Ransomware that infected Telefonica and NHS hospitals is spreading aggressively, with over 50,000 attacks so far, today
https://blog.avast.com/ransomware-that-infected-telefonica-and-nhs-hospitals-is-spreading-aggressively-with-over-50000-attacks-so-far-today

Customer Guidance for WannaCrypt attacks
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

How to Accidentally Stop a Global Cyber Attacks
https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html

[DavidR]

<snip quotes>
How to Accidentally Stop a Global Cyber Attacks
https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html

A very interesting article.

[Asyn]

Deprecation of SHA-1 for SSL/TLS Certificates in Microsoft Edge and Internet Explorer 11
https://technet.microsoft.com/en-us/library/security/4010323