This Week in InfoSec (07:20)

With content liberated from the “today in infosec” Twitter account and further afield

26th January 2011: Facebook Enables HTTPS So You Can Share Without Being Hijacked.  Facebook announced Wednesday it would begin supporting a feature to protect users from having their accounts hijacked over Wi-Fi connections or snooped on by schools and businesses.

19th January 2012: Feds Shutter Megaupload, Arrest Executives.  Since the shutdown of Megaupload, stories have erupted about the life and exploits of the company’s founder, a self-styled “Dr. Evil” of file sharing. Kim Dotcom’s opulent digs, high-end cars, fondness for models and other Bond-villain-esque behaviours have been splashed across websites and have confused evening newscasts for the last week.

25th January 2003: A new worm took the Internet by storm, infecting thousands of servers running Microsoft’s SQL Server software every minute. The worm, which became known as SQL Slammer, eventually became the fastest-spreading worm ever and helped change the way Microsoft approached security and reshaped the way many researchers handled advisories and exploit code. The Inside Story of SQL Slammer. 

Rant of the Week (15:35)

Court papers indicate text messages from HMRC's 60886 number could snoop on Brit taxpayers' locations

Britain's tax collection agency asked a contractor to use the SS7 mobile phone signalling protocol that would make available location data of alleged tax defaulters, a High Court lawsuit has revealed.

Her Majesty's Revenue and Customs had the potential to use SS7 to silently request that tax debtors' mobile phones give up location data over the past six years, according to papers filed in an obscure court case about a contract dispute.

Billy Big Balls of the Week (25:31)

Unmasking Poopsenders, The Anonymous Website That Sends People Fake Poop

Since 2007, Poopsenders.com has let people send packages filled with disturbingly realistic feces. Now, 'United States of America v. Poopsenders.com' has named two men who may be responsible.

Industry News (34:25)

Merck Wins $1.4bn NotPetya Payout from Insurer

Cyber Essentials Overhauled for New Hybrid Working Era

Experts Call for More Open Security Culture After VW Sacking

EyeMed Fined $600k Over Data Breach

Government Trials Effort to Make Bug Scanning Easier

Best Cybersecurity Research Paper Revealed

North Korea Loses Internet in Suspected Cyber-Attack

Florida Considers Deepfake Ban

IT and DevOps Staff More Likely to Click on Phishing Links

Tweet of the Week (41:12)

https://twitter.com/ra6bit/status/1486695164332711939

Come on! Like and bloody well subscribe!