Top all-time · #3940
securingtomorrow.mcafee.com
Company blog · securingtomorrow.mcafee.comsecurity
securingtomorrow.mcafee.com is the company blog at securingtomorrow.mcafee.com, writing about security. Since 2017, 20 different Hacker News readers have linked it 24 times, most often “CHIPSEC Support Against Vault 7 Disclosure Scanning”. No feed was found, so read it on the site itself.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN readers link McAfee's security blog for posts on Intel ME firmware, EFI rootkit detection (Chipsec), ransomware such as Tox and Clop, and zero-day and vulnerability reports. Comments cite it as a source.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- CHIPSEC Support Against Vault 7 Disclosure Scanning3 people · 3 mentions · first linked 2017-03-10
- Analysis of a Chrome Zero Day: CVE-2019-57862 people · 2 mentions · first linked 2019-03-21
What Hacker News says?
Occam’s razor. I’m a very conspiratorial person and I’ve seen nothing to suggest any nefarious activity or collusion so I’m not getting carried away on this. https://securingtomorrow.mcafee.com/executive-perspectives/a... This is a statement by the Intel CTO from 2016 on the ME discussions, and briefly reassured us that Intel is conscious of the security of the ME, and that they have teams dedicated to it and can pu…
Comment linking /executive-perspectives/agile-secure-intels-approach-designing-world-class-security/
on “How to hack a turned-off computer, or running unsigned code in Intel ME”Submitted The Exploit Model of Serverless Cloud Applications as a story · 7 points
HN discussionAre we forgetting that Chrome had a zero-day literally three months ago? https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/... > Google is aware of reports that an exploit for CVE-2019-5786 exists in the wild.
Comment linking /other-blogs/mcafee-labs/analysis-of-a-chrome-zero-day-cve-2019-5786/
on “Firefox zero-day was used in attack against Coinbase employees, not its users”Submitted Further Analysis of WannaCry Ransomware as a story · 4 points
HN discussionThis is a better link (it is Intel's original blog post): https://securingtomorrow.mcafee.com/business/chipsec-support... It includes a few more details about what was released: It extracts EFI firmware from flash ROM memory automatically if the firmware file is not specified. We recommend generating an EFI whitelist after purchasing a system or when you are sure it has not been infected: # chipsec_main -m tools.uef…
Comment linking /business/chipsec-support-vault-7-disclosure-scanning/
on “After CIA leak, Intel Security releases detection tool for EFI rootkits”Submitted An Analysis of the WANNACRY Ransomware Outbreak as a story · 4 points
HN discussionReputable brands that passed FIPS testing have also been hacked in the past. https://securingtomorrow.mcafee.com/business/vulnerability-i...
Comment linking /business/vulnerability-in-some-secure-usb-sticks/
on “‘eyeDisk’ USB drive secured with iris recognition reveals password in plain text”Submitted Examining Code Reuse Reveals Undiscovered Links Among North Korea’s Malware as a story · 2 points
HN discussionInterestingly it does not seem to be a new concept: https://www.reddit.com/r/netsec/comments/37ko5v/introducing_... https://securingtomorrow.mcafee.com/mcafee-labs/meet-tox-ran... They used to take 20% 'commission'.
Comment linking /mcafee-labs/meet-tox-ransomware-for-the-rest-of-us
on “Ransomware as a Service”Submitted ‘Operation Sharpshooter’ Targets Global Defense, Critical Infrastructure as a story · 2 points
HN discussionAllegedly it's the CLOP ransomware. "All dhcp-servers, Exchange-servers, domaincontrollers and networkdrives have been encrypted." Source in Dutch: https://tweakers.net/nieuws/161538/deel-diensten-universitei... Clop: https://securingtomorrow.mcafee.com/blogs/other-blogs/mcafee...
Comment linking /blogs/other-blogs/mcafee-labs/clop-ransomware/
on “Dutch university hit by cyber attack on its Windows systems”Submitted 80 to 0 in Under 5 Seconds: Falsifying a Medical Patient’s Vitals – McAfee Blogs as a story · 2 points
HN discussionSubmitted Ask Cortana (CVE-2018-8140) as a story · 2 points
HN discussionSubmitted Critical Office Zero-Day Attacks Detected in the Wild as a story · 2 points
HN discussionSubmitted Buran Ransomware; the Evolution of VegaLocker as a story · 1 points
HN discussionSubmitted Analysis of a Chrome Zero Day: CVE-2019-5786 as a story · 1 points
HN discussionSubmitted Attackers Exploiting WinRAR UNACEV2.DLL Vulnerability (CVE-2018-20250) as a story · 1 points
HN discussionSubmitted 'Insight' into Home Automation Reveals Vulnerability in Simple IoT Product as a story · 1 points
HN discussionSubmitted McAfee acquires cloud security company Skyhigh as a story · 1 points
HN discussionSubmitted Suspected cybercrime gang arrested in top malware of 2016 as a story · 1 points
HN discussionSubmitted Welcome to China's highly structured cybercrime underground as a story · 1 points
HN discussionSubmitted Petya cyber attack designed to maximize destruction as a story · 1 points
HN discussionSubmitted Intel releases tool to detect compromised EFI firmware as a story · 1 points
HN discussionSubmitted CHIPSEC Support Against Vault 7 Disclosure Scanning as a story · 1 points
HN discussion
