The Insecurity Brief

New exploit found that targets sys admin admins programmers and others that routinely copy and paste commands

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/copy-paste-exploit/

Youtube:

https://youtu.be/aAwa53GEbSw

Rumble:

https://rumble.com/vrylkt-copy-and-paste-exploit.html

iTunes:

ituneslink

Spotify:

spotifylink

Trip’s books

Developers, sysadmin, security researchers, and hobbyists who copy-paste commands from webpages into a console or terminal are warned that their system may be compromised.

https://en.secnews.gr/379042/min-kanete-copy-paste-commands-webpages/

Trip talks about virus detection and how to see if you are infected

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/how-to-tell-if-your-device-has-a-virus/

Youtube:

https://youtu.be/AirdMI8C5mg

Rumble:

https://rumble.com/vru60p-how-to-tell-if-your-device-has-a-virus.html

iTunes:

ituneslink

Spotify:

spotifylink

Trip’s books

Hashtags go here

Peel back the layers of your enterprise with our newest and most powerful release yet.

https://download.securityonion.net/file/securityonion/securityonion-2.3.91.iso

https://securityonionsolutions.com/

An alert was made by many that Chinese bots are promoting its own form of democracy

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/chinese-propaganda-targets-redefining-democracy-uses-bots-to-spread-message/

Youtube:

https://youtu.be/qttAxXMKacw

Rumble:

https://rumble.com/vr79j1-chinese-propaganda-targets-redefining-democracy-uses-bots-to-spread-message.html

iTunes:

ituneslink

Spotify:

spotifylink

Trip’s books

#china #democracy

https://therecord.media/report-beijing-unleashed-a-massive-propaganda-campaign-to-redefine-democracy/

China’s entire propaganda system is working at full force in the largest Chinese state-sponsored overt influence campaign to date observed by Recorded Future. The narrative warfare operation, which aims to reshape global definitions of democracy, criticize American democracy, and position China as a democracy itself, has been amplified by nearly every Chinese state-affiliated media

https://www.recordedfuture.com/chinas-narrative-war-democracy/

Millions have watched Lee and Oli Barrett’s YouTube dispatches from China. The father and son duo visit hotels in exotic locales, tour out-of-the-way villages, sample delicacies in bustling markets and undergo traditional ear cleanings.

https://www.nytimes.com/interactive/2021/12/13/technology/china-propaganda-youtube-influencers.html

Friday schools across the nation cancel classes over a viral threat of mass shooting on Ticktock the system found no credibility

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/tiktok-school-shooting-viral-threat-cancels-classes-for-millions-of-children/

Youtube:

https://youtu.be/pKKluUhmDjY

Rumble:

https://rumble.com/vr7788-tiktok-school-shooting-viral-threat-cancels-classes-for-millions-of-childre.html

iTunes:

https://podcasts.apple.com/us/podcast/tiktok-school-shooting-viral-threat-cancels-classes/id1583788677?i=1000545748027

Spotify:

https://open.spotify.com/episode/2oxFmEJwh4KcNAbwu9c6UC

Trip’s books

#tiktock

https://www.cnn.com/2021/12/17/tech/tiktok-school-threat-december-17/index.html

PARK RIDGE, Ill. (WLS) — An unfounded threat of school violence spreading on the social media app TikTok prompted several Chicago area school districts to respond Friday.

Meta makes headlines blocking 5 paramilitary groups from its Facebook and Instagram platforms citing hypocrisy in its actions.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/paramilitary-groups-plant-malware-it-makes-the-news-but-spying-on-us-doesnt-matter/

Youtube:

https://youtu.be/NW45f4rpH6s

Rumble:

https://rumble.com/vqxhuq-paramilitary-groups-plant-malware-it-makes-the-news-but-spying-on-us-doesnt.html

iTunes:

https://podcasts.apple.com/us/podcast/paramilitary-groups-plant-malware-it-makes-the-news/id1583788677?i=1000545252619

Spotify:

https://open.spotify.com/episode/072hzR7hR52Id53GB4yxNZ

Trip’s books

#predator #hack #nso

While NSO Group was taking flak for hacking into the phones of journalists, activists and human rights defenders, an entire class of spyware makers and surveillance-for-hire outfits were operating as normal, largely unnoticed.

We confirmed the hacking of the devices of two individuals with Cytrox’s Predator spyware: Ayman Nour, a member of the Egyptian political opposition living in exile in Turkey, and an Egyptian exiled journalist who hosts a popular news program and wishes to remain anonymous.

https://citizenlab.ca/2021/12/pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware/

From print to live television nearly every show has had some mention of this exploit but very few suggest what to do about it.

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/log4j-exploit-its-been-on-the-news-but-does-it-really-matter/

Youtube:

https://youtu.be/JTJssC8BJdE

Rumble:

https://rumble.com/vqv8f3-log4j-exploit-its-been-on-the-news-but-does-it-really-matter.html

iTunes:

https://podcasts.apple.com/us/podcast/log4j-exploit-its-been-on-the-news-but-does-it-really-matter/id1583788677?i=1000545128756

Spotify:

https://open.spotify.com/episode/4H2agmV9fxCkXDxJk6iOpP

Trip’s books

CISA and its partners, through the Joint Cyber Defense Collaborative, are responding to active, widespread exploitation of a critical remote code execution (RCE) vulnerability (CVE-2021-44228) in Apache’s Log4j software library, versions 2.0-beta9 to 2.14.1, known as “Log4Shell” and “Logjam.” Log4j is very broadly used in a variety of consumer and enterprise services, websites, and applications—as well as in operational technology products—to log security and performance information. An unauthenticated remote actor could exploit this vulnerability to take control of an affected system.

https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance

Websites are under constant attack what you should do if you have a site upate as soon as possiable

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/wordpress-under-attack-over-16000-ip-addresses-used-to-target-over-1-6-million-sites/

Youtube:

https://youtu.be/Tk8TW5PFia0

Rumble:

https://rumble.com/vqmdhy-wordpress-under-attack-over-16000-ip-addresses-used-to-target-over-1.6-mill.html

iTunes:

https://podcasts.apple.com/us/podcast/wordpress-under-attack-over-16-000-ip-addresses-used/id1583788677?i=1000545022394

Spotify:

https://open.spotify.com/episode/33gXTgy0D3KdPNGkZVlMuv

Trip’s books

Vulnerable Plugins

As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes.

https://thehackernews.com/2021/12/16-million-wordpress-sites-under.html

Today, on December 9, 2021, our Threat Intelligence team noticed a drastic uptick in attacks targeting vulnerabilities that make it possible for attackers to update arbitrary options on vulnerable sites. This led us into an investigation which uncovered an active attack targeting over a million WordPress sites. Over the past 36 hours, the Wordfence network has blocked over 13.7 million attacks targeting four different plugins and several Epsilon Framework theme

Both Facebook and Twitter released new programs to protect one sided speech treating to deplatform those who don’t comply

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/social-media-censorship-programs-developed-to-shield-elites-and-protect-unlawfulness/

Youtube:

https://youtu.be/DyUJFwI2rPc

Rumble:

https://rumble.com/vqmcf3-social-media-censorship-programs-developed-to-shield-elites-and-protect-unl.html

iTunes:

https://podcasts.apple.com/us/podcast/social-media-censorship-programs-developed-to-shield/id1583788677?i=1000544905684

Spotify:

https://open.spotify.com/episode/7w8r9rI0K1fOHrSBKL2Ynw

Trip’s books

Hashtags go here

https://thehackernews.com/2021/11/twitter-bans-users-from-posting-private.html

Meta, the company formerly known as Facebook, on Thursday announced an expansion of its Facebook Protect security program to include human rights defenders, activists, journalists, and government officials who are more likely to be targeted by bad actors across its social media platforms.

New exploit for DDE explained that bypasses antivirus with .ics links

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/new-windows-exploit-phishing-appointment-links-bypass-anti-virus-checks/

Youtube:

https://youtu.be/dbxiL_ptNcY

Rumble:

https://rumble.com/vqm7aw-new-windows-exploit-phishing-appointment-links-bypass-anti-virus-checks.html

iTunes:

https://podcasts.apple.com/us/podcast/new-windows-exploit-phishing-appointment-links-bypass/id1583788677?i=1000544780894

Spotify:

https://open.spotify.com/episode/6yFE2zXNZm0V8vlD9jK7Ri

Trip’s books

Hashtags go here

Meeting invites are one of the most common types of emails sent today, so it should come as no surprise that attackers have found a way to manipulate them. Multiple organizations that utilize Abnormal Security recently received emails which contained a .ics attachment—an invitation file commonly used to populate online calendar applications with meeting and event information.

https://abnormalsecurity.com/blog/calendar-invite-malware-attack

“Facebook is like a robot programmed with a singular mission: to grow. And the undeniable reality is that Facebook’s growth, fueled by hate, division, and misinformation, has left hundreds of thousands of devastated Rohingya lives in its wake,” from the complaint

Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation. 

Join our community!!

Follow me on Twitter

@trip_elix

Links

Our Website:

https://www.tripelix.com/insecurity/meta-aka-facebook-sued-for-150-billion-claiming-algorithm-promoted-genocide/

Youtube:

https://youtu.be/x0aa3at6lWs

Rumble:

https://rumble.com/vqiaje-meta-aka-facebook-sued-for-150-billion-claiming-algorithm-promoted-genocide.html

iTunes:

https://podcasts.apple.com/us/podcast/meta-aka-facebook-sued-for-150-billion-claiming-algorithm/id1583788677?i=1000544543140

Spotify:

https://open.spotify.com/episode/3pS1NoCgRDRrxTUD7BEVVj

Trip’s books

Hashtags go here

Facebook failed to quickly stop the spread of hate speech and misinformation against the Rohingya people, in turn contributing to the persecution and alleged genocide of the minority community in Myanmar, according to a lawsuit filed Monday in a California court that asks for more than $150 billion in compensation.

https://www.washingtonpost.com/world/2021/12/07/facebook-rohingya-genocide-refugees-lawsuit/

In February 2019, not long before India’s general election, a pair of Facebook employees set up a dummy account to better understand the experience of a new user in the company’s largest market. They made a profile of a 21-year-old woman, a resident of North India, and began to track what Facebook showed her.

https://www.washingtonpost.com/technology/2021/10/24/india-facebook-misinformation-hate-speech/