This week in InfoSec (10:25)

With content liberated from the “today in infosec” twitter account and further afield

17th July 1997: Major Disruption in Sending Most E-Mail Messages.  A programming error temporarily threw the Internet into disarray in a preview of the difficulties that inevitably accompany a world dependent on e-mail, the World Wide Web, and other electronic communications.

At 2:30 a.m. Eastern Daylight Time, a computer operator in Virginia ignored alarms on the computer that updated Internet address information, leading to problems at several other computers with similar responsibilities. The corruption meant most Internet addresses could not be accessed, resulting in millions of unsent e-mail messages.

15th July 1999: DilDog of Cult of the Dead Cow confirmed official Back Orifice 2000 CD-ROMs distributed during DEF CON 4 days prior were infected with the destructive CIH virus. Initially, cDc blamed pirated copies as the source, later discovering a duplicating machine had been infected.

https://twitter.com/todayininfosec/status/1283523195371282434

19th July 1985: Chase Manhattan Bank discovered a message in one of its computer systems from Lord Flathead. The message said that unless he was given free use of the computer, he would destroy records in the system. Lord Flathead? He founded Myspace 18 years later!

https://www.nytimes.com/1985/10/19/business/chase-computer-raided-by-youths-officials.html

https://twitter.com/todayininfosec/status/1153507276629504006

Rant of the Week (16:28)

Secret Service gives thousands of documents to January 6 committee, but hasn't yet recovered potentially missing texts

(CNN)The US Secret Service produced an "initial set of documents" to the House select committee investigating the January 6, 2021, insurrection on Tuesday, in response to a subpoena last week that was issued amid reports of potentially missing text messages from the day of the insurrection.

However, Tuesday's document production didn't include any of the potentially missing texts from January 5 and 6, 2021, a Secret Service official told CNN. That's because the agency still has not been able to recover any records that were lost during a phone migration around that time, the official said.

“The USSS didn’t just delete texts after knowing they were evidence in a federal probe; it didn’t just lie about why/how the texts were deleted; the texts were so *professionally* deleted they can’t be recovered.”

https://twitter.com/SethAbramson/status/1549488007614529538

Billy Big Balls of the Week (24:07)

Glassdoor ordered to reveal identity of negative reviewers to New Zealand toymaker

A California court has ordered employer-rating site Glassdoor to hand over the identities of users who claimed they had negative experiences working for New Zealand toy giant Zuru.

In a decision that could prompt unease for online platforms that rely on anonymity to attract candid reviews, Glassdoor was ordered to provide the information so Zuru could undertake defamation proceedings against the reviewers in New Zealand.

Industry News (33:26)

TikTok Engaging in Excessive Data Collection

CISA Set to Open London Office

New MacOS Backdoor Communicates Via Public Cloud

DOJ Recovers $500K Paid to North Korean Ransomware Actors

Legal Experts Concerned Over New UK Digital Reform Bill

Romanian Man Accused of Distributing Gozi Virus Extradited to US

Unpatched Flaws in Popular GPS Devices Allow Adversaries to Disrupt and Track Vehicles

UK Regulator Issues Record Fines as Financial Crime Surges

Magecart Supply Chain Attacks Hit Hundreds of Restaurants

Tweet of the Week (45:58)

https://twitter.com/hela_luc/status/1549326122067890177

Come on! Like and bloody well subscribe!