Security

LinkedIn – Security – Two Factor Authentication – Verification Method – Phone

Daniel Adeniji Authentication ( Security ), LinkedIn, Multi-factor Authentication, security ( LinkedIn ), Technical, Two-factor authentication ( Security - Authentication )

Background Please continue to follow Best Practices as much as possible with your online Accounts. Online Accounts inclusive of Banking, Email, Social Media. Linked In Security Relative to Facebook there is not a lot of miscreants on LinkedIn. Please use that grace wisely. Two Factor Authentication If you do not have Two Factor Authentication setup, … Continue reading LinkedIn – Security – Two Factor Authentication – Verification Method – Phone

Log4j – Security Vulnerability – Detection Tool – WhiteSource – Windows Binary

Daniel Adeniji Apache Foundation ( Security - Vulnerability ), Jack Wallen ( Blogger - Technology - Linux ), log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), PowerShell ( Microsoft ), Security Vulnerability ( Security ), Technical, TechRepublic, WhiteSource

Background Let us quickly try out another of the freely available tools for detecting the Log4J security vulnerabilities.   Lineage Log4j – Security Vulnerability – Detection Tools Link Log4j – Security Vulnerability – Detection Tool – CERT ( Community Emergency Response Team ) – PowerShell Script Link WhiteSource Our Story Here is a beautiful story: … Continue reading Log4j – Security Vulnerability – Detection Tool – WhiteSource – Windows Binary

Log4j – Security Vulnerability – Detection Tool – CERT ( Community Emergency Response Team ) – PowerShell Script

Daniel Adeniji Apache Foundation ( Security - Vulnerability ), Carnegie Mellon University ( University ), CERT ( Community Emergency Response Team ), log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), PowerShell ( Microsoft ), Security Vulnerability ( Security ), Software Engineering Institute ( SEI ) - Carnegie Mellon University ( University ), Technical

Background Library ( Jar ) Files Patched / Apache / v2.17.1 Link Package File Type File Name Link Apache Log4j 2 binary ( tar.gz ) apache-log4j-2.17.1-bin.tar.gz Link Apache Log4j 2 binary ( zip ) apache-log4j-2.17.1-bin.zip Link Extract Jar File Usage Purpose JAR File Name Syntax JAR File Name ( Version Specific ) Log4J API File Provides … Continue reading Log4j – Security Vulnerability – Detection Tool – CERT ( Community Emergency Response Team ) – PowerShell Script

Log4j – Security Vulnerability – Detection Tools

Daniel Adeniji Apache Foundation ( Security - Vulnerability ), CERT ( Community Emergency Response Team ), Check Point, David Strom ( Software ), Infoworld, JFrog, log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), Mayank Deshmukh ( Software Engineer ), PortSwigger, Qualys, Security Vulnerability ( Security ), Technical, WhiteSource

Background Thankfully, just about everyone and their mama have a tool for detecting software stacks that are susceptible to Apache Log4J's Log4Shell Security Vulnerability.   Tools David Strom, InfoWorld Here is a list pulled together by David Strom @ Infoworld Link Company Product Platform Product Link Explanation Qualys Qualys Web Application Scanning Cloud Link Link … Continue reading Log4j – Security Vulnerability – Detection Tools

Apache/Log4j – Log4Shell:- Alibaba Group Holding – Computing Services Unit

Daniel Adeniji Alibaba Group Holding, Apache, Apache Foundation ( Security - Vulnerability ), Chen Zhoujun ( Software Engineer ), log4j, Log4j ( Security - Vulnerability - Apache ), Log4jShell ( Security - Vulnerability - Apache - Log4j ), Security Vulnerability ( Security ), Technical

Background There are so many angles to the recently disclosed Apache Foundation Log4J's Security Vulnerabilities. As a footnote, this post covers the Log4Shell vulnerability. A month ago, 2021-November-24th, Chen Zhoujun from Alibaba's Cloud Security Team discovered the bug. Via email, Apache Foundation Log4J was quickly notified.   Stories South China Morning Post Apache Log4j bug: … Continue reading Apache/Log4j – Log4Shell:- Alibaba Group Holding – Computing Services Unit

Google:- Project Zero Versus NSO Group

Daniel Adeniji Android, Apple, Citizen Lab ( University of Toronto ), crime ( Criminal Justice ), Google, Humanity, Ian Beer ( Software Engineer ), iMessage ( Apple - Service ), Inspiration, Israel ( Country ), Life, Lily Hay Newman, MSNBC, Multi-factor Authentication, Natalie Silvanovich ( Software Security Researcher ), NSO Group ( NSO Group Technologies ), Phishing ( Email ), Project Zero ( Google - Project ), Samuel Groß ( Software Engineer ), Security, service ( Apple ), Social Media, Two-factor authentication ( Security - Authentication ), United Arab Emirates - UAE ( Country ), United Kingdom ( Country ), University of Toronto ( Toronto - Ontario - Canada ), WhatsApp, Wired

Stories Wired Lily Hay Newman Hackers Can Break Into an iPhone Just by Sending a Text Link When you think about how hackers could break into your smartphone, you probably imagine it would start with clicking a malicious link in a text, downloading a fraudulent app, or some other way you accidentally let them in. … Continue reading Google:- Project Zero Versus NSO Group

Facebook:- Facebook parent company, metaverse, bans private spy firms from Facebook, Instagram

Daniel Adeniji Ayman Nour ( Politician - Egyptian Exile ), BelltroX, Black Cube, Bluehawk CI, Business Standard ( Newspaper - India ), Citizen Lab ( University of Toronto ), Cobwebs Technologies, Cognyte, crime ( Criminal Justice ), Cytrox, Daily Beast, Dubai ( Country ), FaceBook, Hacker, Harvey Weinstein, Humanity, Inspiration, Instagram, Israel ( Country ), Life, MSNBC, Multi-factor Authentication, Phishing ( Email ), Security, Social Media, Two-factor authentication ( Security - Authentication ), United Arab Emirates - UAE ( Country ), United Kingdom ( Country ), University of Toronto ( Toronto - Ontario - Canada ), WhatsApp

Background It is really sad to the extent that journalists, human rights activists & advocates, political dissidents, and private citizens and their families are the subject of intrusion by governments, corporations, and organizations. Stories Daily Beast 2021-December-16th Reports From Meta, Citizen Lab Reveal Dark World of Facebook Cyber Spies-for-Hire Adam Rawnsley Link Researchers at Facebook … Continue reading Facebook:- Facebook parent company, metaverse, bans private spy firms from Facebook, Instagram

BBC:- Apple Versus NSO Group

Daniel Adeniji Android, Apple, BBC, BBC News ( BBC ), Biden - 2021 thru ( Governance - United States - Administration - Presidential ), Cisco, Citizen Lab ( University of Toronto ), FaceBook, Google, Humanity, Inspiration, iPhone, Life, Microsoft, NSO Group ( NSO Group Technologies ), Products ( NSO Group ), Security, Social Media, Spiritual Maturity, Technical, Tim Cook ( Apple - CEO ), University of Toronto ( Toronto - Ontario - Canada )

  Stories BBC:- Apple sues Israeli spyware firm NSO Group Link Apple is suing Israeli spyware firm NSO Group and its parent company for allegedly targeting iPhone users with a hacking tool. NSO's Pegasus software can infect both iPhones and Android devices, allowing operators to extract messages, photos, and emails, record calls, and secretly activate … Continue reading BBC:- Apple Versus NSO Group