Episode 104 - The Late Late Show

This Week in InfoSec (07:03)

With content liberated from the “today in infosec” twitter account and further afield

15th May 2003: In the Friends episode "The One in Barbados, Part One", Ross Geller's laptop was infected by the Kournikova worm when Chandler Bing checked his email on it and opened an email claiming to contain nude images of tennis player Ana Kournikova.

https://twitter.com/todayininfosec/status/1523719745555648514

Rant of the Week (09:34)

Department of Justice Announces New Policy for Charging Cases under the Computer Fraud and Abuse Act

DOJ says it will no longer prosecute good-faith hackers under CFAA

The U.S. Justice Department announced Thursday it will not bring charges under federal hacking laws against security researchers and hackers who act in good faith.

The policy for the first time “directs that good-faith security research should not be charged” under the Computer Fraud and Abuse Act (CFAA), a seismic shift away from its previous policy that allowed prosecutors to bring federal charges against hackers who find security flaws for the purpose of helping to secure exposed or vulnerable systems.

The Justice Department said that good-faith researchers are those who carry out their activity “in a manner designed to avoid any harm to individuals or the public,” and where the information is “used primarily to promote the security or safety of the class of devices, machines, or online services to which the accessed computer belongs, or those who use such devices, machines, or online services.”

Billy Big Balls of the Week (17:05)

National bank hit by ransomware trolls hackers with dick pics

After suffering a ransomware attack by the Hive operation, the Bank of Zambia made it clear that they were not going to pay by posting a picture of male genitalia and telling the hackers to s… (well, you can use your imagination).

Last week, the Bank of Zambia, the country's central bank, disclosed that recent technical outages resulted from a cyberattack.

"The Bank of Zambia wishes to inform members of the public that it experienced a partial disruption to some of its Information Technology (IT) applications on Monday 9th May 2022," disclosed the bank in a press release.

"The disruption, which affected some systems at the Bank such as the Bureau De Change Monitoring System and the Website, emanated from a suspected cybersecurity incident. We wish to advise that these systems have since been fully restored."

Industry News (20:50)

Doctor Accused of Being Prolific Ransomware Developer

US Government Warns Firms to Avoid Hiring North Korean IT Workers

Police Warn of £15m Courier Scams

Digital Skimming is Now the Preserve of Non-Magecart Groups

UK Government: Lack of Skills the Number One Issue in Cybersecurity

Jav: Personal Information of Nearly Two Million Texans Exposed

Half of IT Leaders Store Passwords in Shared Docs

Microsoft President: Cyber Space Has Become the New Domain of Warfare

CISA Issues Emergency Directive for VMware Vulnerabilities

Tweet of the Week (26:16)

https://twitter.com/haveigotnews/status/1526505336017936384

Come on! Like and bloody well subscribe!