Microsoft Whac-A-Moles Websites of Chinese Hackers APT15 (‘NICKEL’) - Security Boulevard

Vixen Panda, Royal Dragon: Microsoft issued another of its “look how clever we are” press releases yesterday. It claims to be thwarting Chinese hackers it codenames NICKEL.

It’s not the first time we’ve seen @Microsoft try this tactic. In today’s #SBBlogwatch, we wonder if it actually does any good.

At @SecurityBlvd: https://t.co/BV5CKz4W8u

— @Richi 😷 Jennings (@RiCHi) December 7, 2021

Home Routers are Full of Security Bugs—Patch NOW - Security Boulevard

Cheap, Lazy Vendors: Researchers running automated pentests against nine consumer routers discovered a bucketful of bugs. Vendors such as TP-Link and Linksys came off worst.

So, yes, check for #patches—even if your router isn’t one of the ones tested. In today’s #SBBlogwatch, we don’t trust the auto-update feature.

At @SecurityBlvd: https://t.co/7IR8yuccRd

— @Richi 😷 Jennings (@RiCHi) December 6, 2021

$150M Stolen in ‘Imaginary Money’ Crypto/DeFi Hacks - Security Boulevard

DeFi DAO D’oh! This week saw a pair of high-profile cryptocurrency thefts, totaling over $150 million. One from MonoX and one from BadgerDAO.

Schadenfreude for those of us who know this craze for #ImaginaryMoney is hilariously dumb.

In today’s #SBBlogwatch, we break out the popcorn. At @SecurityBlvd: https://t.co/PZACAzzF3J #DeFi

— @Richi 😷 Jennings (@RiCHi) December 3, 2021

AWS re:Invent Roundup: Private 5G | Graviton3 ARM Chips | DevOps Guru++ - DevOps.com

The Moral of the Story: Misfortune tests the sincerity of friends

In this week’s #TheLongView, three things that caught my eye from Amazon Web Services’ #reInvent 2021 conference:
1⃣ #Private5G,
2⃣ #Graviton3 chips, and
3⃣ something called #DevOpsGuru for RDS (yes, really).

At @DevOpsDotCom: https://t.co/zxrm4gd0M1 @AWSCloud #DevOps #5G $AMZN

— @Richi 😷 Jennings (@RiCHi) December 2, 2021

Crypto Mining Hackers vs. Cloud Computing—Google States the Obvious - Security Boulevard

GCP CAT Fluff: Google’s new Cybersecurity Action Team (CAT) would like you to know that insecure cloud instances can be hijacked by hackers. And the #1 workload they use to steal your CPU time is cryptocurrency mining.

But let’s look closer. In today’s #SBBlogwatch, we see if there’s a “there” there.

At @SecurityBlvd: https://t.co/jLlki8EdHX

— @Richi 😷 Jennings (@RiCHi) November 29, 2021