Join Scott Young and Shaun Sturby from Optrics Engineering as they discuss the iPhone zero click WiFi exploit,  cybersecurity company FireEye hacked and their red team tools being stolen, how network management and performance monitoring tool Solarwinds Orion was used to install a backdoor and the CIA is found to own Omnisec another Swiss cypto company.

For more IT tips go to:

> www.OptricsInsider.com

Timecodes:

0:00 - Intro

0:16 - Today's 3 topics

0:49 - Topic 1: iPhone Zero-Click Wi-Fi exploit

3:45 - Topic 2: How FireEye was hacked

6:48 - Topic 3: How SolarWinds Orion was used to install a backdoor

9:34 - Bonus Topic: Cypto AG update

11:00 - Closing remarks

Learn more about the Iphone's Zero-Click Wi-Fi Exploit:

> An iOS zero-click radio proximity exploit odyssey 

> iPhone zero-click Wi-Fi exploit is one of the most breathtaking hacks ever

Learn more how FireEye was hacked and their Red Team tools were stolen:

> FireEye Shares Details of Recent Cyber Attack, Actions to Protect Community

> GitHub - Red Team Tool Countermeasures

Learn how SolarWinds Orion was used to install a backdoor:

> Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor

> US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor

> SolarWinds Breach Used to Infiltrate Customer Networks (Solarigate)

Learn more about the CIA owning Swiss cryptography company Omnisec:

> Report Claims CIA Controlled Second Swiss Encryption Firm

#OptricsInsider #TechNews #ITNews

Join Scott Young and Shaun Sturby from Optrics Engineering as they discuss the FBI's warning about malicious banking apps, the "Internet of Troubles", IBM's cloud being down for 2 hours plus both Honda and the City of Knoxville being hit by malware.

For more IT tips go to:

> www.OptricsInsider.com

Timecodes:

0:00 - Intro

0:21 - Today's 3 topics

0:51 - Topic 1: FBI Warning About Malicious Banking Apps

3:58 - Topic 2: Internet of Troubles (IoT)

6:30 - Topic 3: IBM Cloud Down for 2 hours

8:23 - Topic 4: Honda and City of Knoxville Hit by Malware

12:30 - Closing remarks

FBI Public Service Announcement - Increased Use of Mobile Banking Apps Could Lead to Exploitation:

> Increased Use of Mobile Banking Apps Could Lead to Exploitation

Learn more about why it's important to update the firmware on Internet of Things (IoT) devices:

> An Internet of Trouble lies ahead as root certificates begin to expire en masse, warns security researcher

Learn more about IBM's cloud being down for 2 hours:

> From off-prem to just off: IBM Cloud goes down planet-wide so hard even the status page didn't work

> IBM blames 'external' network provider, incorrect routing, traffic flood for its two-hour cloud outage

Learn more about the malware that hit Honda:

> Honda confirms its network has been hit by cyberattack

Learn more about the City of Knoxville and how they fell victim to a ransomware attack:

> Knoxville still quiet on ransomware attack and what's being done to fix it

#OptricsInsider #ITSecurityTips #cybersecurity #technews #infosec

Join Scott Young and Shaun Sturby from Optrics Engineering as they discuss Contact Tracing App spoofing, issues with the latest Windows 10 2004 Update (and why you should wait to update to it) and how an email pwned an IT help desk.

For more IT tips go to:

> https://www.OptricsInsider.com

Timecodes:

0:00 - Intro

0:21 - Today's 3 topics

0:39 - Topic 1: Contract Tracing App Spoofing

2:05 - Topic 2: Windows 10 2004 Update

4:49 - Topic 3: Have I Been Pwned?

7:15 - Closing remarks

Contact tracing app spoofing is already happening – and it's dangerously simple to do:

> Contact-tracer spoofing is already happening – and it's dangerously simple to do

Learn more about issues with the Windows 10 2004 May update:

> Windows 10 2004: Microsoft warns of a new bug that makes connected displays go black

> Microsoft Reveals Long List Of Windows 10 May 2020 Issues

> Microsoft Puts Windows 10 May 2020 Update on Hold for Most Devices

Learn how an email pwned entire firm's helpdesk ticket system:

> Weekly Update 194

> Have I Been Pwned breach report email pwned entire firm's helldesk ticket system

#OptricsInsider #TechNews #ITNews

Join Scott Young and Shaun Sturby from Optrics Engineering as they discuss the CIA owning Swiss crytography company Crypto AG, the $1 billion worth of Bitcoin that we were seized and the hacker who released 49,000 firewall passwords after hacking Fortinet's VPN.

For more IT tips go to:

> https://www.OptricsInsider.com

Timecodes:

0:00 - Intro

0:17 - Today's 3 topics

0:40 - Topic 1: CIA & Swiss Crypto AG working together

2:39 - Topic 2: $1 Billion Bitcoin seized from Silk Road

4:27 - Topic 3: Hacker releases 49k Fortinet passwords

6:40 - Closing remarks

Learn more about the CIA & Crypto AG:

> https://www.theregister.com/2020/11/12/crypto_ag_swiss_parliament_report

Learn more about the seizure of $1 billion worth of Bitcoin:

> https://www.secplicity.org/2020/11/10/us-justice-department-makes-one-billion-dollar-drug-seizure

Learn more about the hacker who posted 49,000 firewall passwords:

> https://www.bleepingcomputer.com/news/security/hacker-posts-exploits-for-over-49-000-vulnerable-fortinet-vpns

#OptricsInsider #TechNews #ITNews

Join Scott Young and Shaun Sturby from Optrics Engineering  as they discuss the ThunderSpy vulnerability  for Thunderbolt connections, the possibility of working from home till  the end of 2020 and into the new year plus a vulnerability that was  discovered with QNAP network attached storage (NAS) devices.  

For more IT tips go to: 

> https://www.OptricsInsider.com  

Timecodes:

0:00 - Intro

0:20 - Topic 1: ThunderSpy

3:08 - Topic 2: Work from Home Till End of 2020

5:13 - Topic 3: QNAP Vulnerability

8:42 - Closing remarks

Learn more about ThunderSpy: 

> When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security

> Thunderspy. Who Said External DMA Was a Good Idea

Learn more about working from home till the end of the 2020: 

> Snap! Twitter employees WFH, scam site boom, FB Avatars, SpaceX simulator

Learn more about the QNAP vulnerability: 

> Hundreds of thousands of QNAP devices vulnerable to remote takeover attacks

#OptricsInsider #ITSecurityTips #cybersecurity #technews #infosec

Join Scott Young and Shaun Sturby from Optrics Engineering as they discuss a Microsoft Teams Vulnerability, Windows Bugs Report and COVID-19 Contact Tracing Apps. Plus as a bonus, Shaun will discuss something to consider when buying an IoT (Internet of Things) device for your home and their hidden costs.

For more IT tips go to:

> www.OptricsInsider.com 

Timecodes:

0:00 - Intro

0:35 - Topic 1: MS Teams Vulnerability

1:51 - Topic 2: Windows Bugs Report

6:05 - Topic 3: COVID-19 Contact Tracing Apps

8:20 - Topics 4: IoT Buyer Beware

11:58 - Closing remarks

Learn more about the Microsoft Teams Vulnerability::

> We could have pwned Microsoft Teams with a GIF, claims Israeli infosec outfit

Learn more about the Windows Bugs Report::

> >We're going on a vuln hunt. We're going catch a big one: Researchers find Windows bugs dominate – but fixes are fast

Learn more about COVID-19 Contact tracing apps::

> Privacy Preserving Protocols to Trace Covid19 Exposure/a>

IoT Buyer Beware::

> Three things in life are certain: Death, taxes, and cloud-based IoT gear bricked by vendors. Looking at you, Belkin

#OptricsInsider #TechNews #ITNews

Join Scott Young and Shaun Sturby from Optrics Engineering  as they discuss a bug in Apple Mail iOS, the  Zoom v5 update and online meeting etiquette tips.  

For more IT tips go to: 

> www.OptricsInsider.com  

Timecodes:

0:00 - Intro

Learn more about the Apple Mail Bug: 

> Apple Mail Bug Lets Hackers Control Your iPhone

Learn more about the Zoom version 5 update: 

> It’s Here! 5 Things to Know About Zoom 5.0

Learn more about online meeting etiquette: 

> The Dos and Don’ts of Online Video Meetings

> 13 etiquette tips for video conference calls

> 12 Tips For Making Your Virtual Meetings More Professional

Learn more about OBS Studio:

> https://obsproject.com/

#OptricsInsider #TechNews #ITNews

Join Scott Young and Shaun Sturby from Optrics Engineering as they discuss work from home PCs and patches, the notable increase in COVID-19 related spam emails as well as CMR (conventional magnetic recording) vs. SMR (shingled magnetic recording) hard drives and what you need to consider when using either for  network attached storage (NAS) devices.   

For more IT tips go to: 

> www.OptricsInsider.com

For information on ManageEngine's Desktop Central go to: 

> www.ManageEngine.ca/desktop-central

For information on F-Secure go to: 

> www.Optrics.com/partners/f-secure

CMR vs. SMR Hard Drive Additional Reading: 

> www.servethehome.com/surreptitiously-swapping-smr-into-hard-drives-must-end

> https://blocksandfiles.com/2020/04/14/wd-red-nas-drives-shingled-magnetic-recording

#OptricsInsider #TechNews #ITNews

Join Scott Young and Shaun Sturby from Optrics Engineering as they discuss the top 3 work from home IT security issues that IT administrators and IT managers currently face as their employees transition to working remotely from home.  

For more IT tips go to: 

> https://www.OptricsInsider.com

Timecodes:

0:00 - Intro

Resources mentioned in the interview:  

> OpenDNS: www.OpenDNS.com

> CIRA D-Zone DNS Firewall: www.CIRA.ca/cybersecurity-services/canadian-alternative-opendns

> WhatISMyIPAddress: https://WhatIsMyipAddress.com

> ManageEngine Desktop Central: www.ManageEngine.ca/Desktop-Central

> KnowBe4 Security Awareness Training: www.Optrics.com/KnowBe4

#OptricsInsider #TechNews #ITNews