Technical

[Asyn]

Ransomware that infected Telefonica and NHS hospitals is spreading aggressively, with over 50,000 attacks so far, today
https://blog.avast.com/ransomware-that-infected-telefonica-and-nhs-hospitals-is-spreading-aggressively-with-over-50000-attacks-so-far-today

Customer Guidance for WannaCrypt attacks
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

How to Accidentally Stop a Global Cyber Attacks
https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html

The need for urgent collective action to keep people safe online: Lessons from last week’s cyberattack
https://blogs.microsoft.com/on-the-issues/2017/05/14/need-urgent-collective-action-keep-people-safe-online-lessons-last-weeks-cyberattack/

[Asyn]

Ransomware that infected Telefonica and NHS hospitals is spreading aggressively, with over 50,000 attacks so far, today
https://blog.avast.com/ransomware-that-infected-telefonica-and-nhs-hospitals-is-spreading-aggressively-with-over-50000-attacks-so-far-today

Customer Guidance for WannaCrypt attacks
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

How to Accidentally Stop a Global Cyber Attacks
https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html

The need for urgent collective action to keep people safe online: Lessons from last week’s cyberattack
https://blogs.microsoft.com/on-the-issues/2017/05/14/need-urgent-collective-action-keep-people-safe-online-lessons-last-weeks-cyberattack/

WannaCry update: The worst ransomware outbreak in history
https://blog.avast.com/wannacry-update-the-worst-ransomware-outbreak-in-history

[Asyn]

Keylogger in Hewlett-Packard Audio Driver
https://www.modzero.ch/modlog/archives/2017/05/11/en_keylogger_in_hewlett-packard_audio_driver/index.html
https://www.modzero.ch/advisories/MZ-17-01-Conexant-Keylogger.txt

HPSBGN03558 rev.7 - Conexant HD Audio Driver Local Debug Log
https://support.hp.com/us-en/document/c05519670

[Asyn]

Meet Adylkuzz: cryptocurrency mining malware spreading using the same exploit as WannaCry
https://blog.avast.com/meet-adylkuzz-cryptocurrency-mining-malware-spreading-using-the-same-exploit-as-wannacry

[Eddy]

Researcher is able to decrypt the files under XP :
http://mashable.com/2017/05/18/wannacry-wannakey-decrypted-ransomware/?utm_campaign=Mash-Prod-RSS-Feedburner-All-Partial&utm_cid=Mash-Prod-RSS-Feedburner-All-Partial#KMqYt0c_SmqB

https://github.com/aguinet/wannakey

[Asyn]

Stealing Windows Credentials Using Google Chrome
http://defensecode.com/news_article.php?id=21

[Asyn]

Ransomware that infected Telefonica and NHS hospitals is spreading aggressively, with over 50,000 attacks so far, today
https://blog.avast.com/ransomware-that-infected-telefonica-and-nhs-hospitals-is-spreading-aggressively-with-over-50000-attacks-so-far-today

Customer Guidance for WannaCrypt attacks
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

How to Accidentally Stop a Global Cyber Attacks
https://www.malwaretech.com/2017/05/how-to-accidentally-stop-a-global-cyber-attacks.html

The need for urgent collective action to keep people safe online: Lessons from last week’s cyberattack
https://blogs.microsoft.com/on-the-issues/2017/05/14/need-urgent-collective-action-keep-people-safe-online-lessons-last-weeks-cyberattack/

WannaCry update: The worst ransomware outbreak in history
https://blog.avast.com/wannacry-update-the-worst-ransomware-outbreak-in-history

Avast Wi-Fi Inspector can tell you if your PC is vulnerable to WannaCry
https://blog.avast.com/avast-wi-fi-inspector-can-tell-you-if-your-pc-is-vulnerable-to-wannacry
https://help.avast.com/en/av_free/17/hns/hns-doublepulsar-infection.html

[Asyn]

New SMB Worm Uses Seven NSA Hacking Tools. WannaCry Used Just Two
https://www.bleepingcomputer.com/news/security/new-smb-worm-uses-seven-nsa-hacking-tools-wannacry-used-just-two/

[DavidR]

New SMB Worm Uses Seven NSA Hacking Tools. WannaCry Used Just Two
https://www.bleepingcomputer.com/news/security/new-smb-worm-uses-seven-nsa-hacking-tools-wannacry-used-just-two/

Don't you just love the so called security services, that leave the rest of the worlds computer users at risk of their so called security tools.

[Asyn]

New SMB Worm Uses Seven NSA Hacking Tools. WannaCry Used Just Two
https://www.bleepingcomputer.com/news/security/new-smb-worm-uses-seven-nsa-hacking-tools-wannacry-used-just-two/

Don't you just love the so called security services, that leave the rest of the worlds computer users at risk of their so called security tools.

NSA officials worried about the day its potent hacking tool would get loose. Then it did.
https://www.washingtonpost.com/business/technology/nsa-officials-worried-about-the-day-its-potent-hacking-tool-would-get-loose-then-it-did/2017/05/16/50670b16-3978-11e7-a058-ddbb23c75d82_story.html

[Asyn]

*bleed continues: 18 byte file, $14k bounty, for leaking private Yahoo! Mail images
https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.html

[Asyn]

Porting Windows Dynamic Link Libraries to Linux
https://github.com/taviso/loadlibrary

[Asyn]

Cloak & Dagger
http://cloak-and-dagger.org/
http://cs.ucsb.edu/~yanick/publications/2017_oakland_cloakanddagger.pdf

[Asyn]

Avast releases decryptor tool for AES_NI ransomware
https://blog.avast.com/avast-releases-decryptor-tool-for-aes_ni-ransomware

[mchain]

Intel chip flaw allows hackers to hijack thousands of PCs
http://www.telegraph.co.uk/technology/2017/05/08/intel-chip-flaw-allows-hackers-hijack-thousands-pcs/
Dated May 8th, somehow not noted:  Apparently only affects commercial systems.