Microsoft changes encryption, another D-Link bug, phishing dangers, and more Let's look at some of the latest security news you may have missed this week. Baltimore ransomware outbreak made worse by bad storage practices This year's ransomware infection at the City of Baltimore made headlines, in part because of the eye-popping $18.2m price tag its damage and recovery bills racked up. It turns out that …
> they are doing that because it turned out that the disks that were claiming to be encrypting the data weren't doing that, at all
Yea, it's uncanny, flaws like setting the master password to zero length and burying this in some obscure setting. Makes one wonder if the manufacturers had help from the NSA?
"Tested the link - it redirected to a fake Office 365 login page hosted at Windows.net. Holy shit. I tested the URI string from Adobe, and sure enough you can put anything after "&p1=" and adobe will redirect you."The admin noted the matter was reported to Microsoft and the scammer's account was deleted.
Why on all earth wasn't the Adobe redirect fixed too?
https://www.bleepingcomputer.com/news/security/adobe-and-google-open-redirects-abused-by-phishing-campaigns/
The ultimate URL does appear at the end of the string, albeit not necessarily including http:// or www, but I suppose it could be obfuscated.
What is the advantage to Google, Adobe etc of these redirects?
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
