Top all-time · #934
Security
Company blog · securityintelligence.comsecurity
Security is the company blog at securityintelligence.com, writing about security. Since 2014, 73 different Hacker News readers have linked it 97 times, most often “ChatGPT Confirms Data Breach”. No feed was found, so read it on the site itself.
Too few sampled comments (24) to say how often HN recommends it.?
Why HN links it
HN readers link IBM's Security Intelligence blog as a source for threat research on malware, banking trojans, SS7 swatting, Android overlay malware, spam domains and social-engineering scams.
Summarised by Claude from a sample of 24 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Leverage educational content like blogs, articles, videos, courses, reports and more, crafted by IBM experts, on emerging security and identity technologies.
Most-linked posts?
- ChatGPT Confirms Data Breach4 people · 4 mentions · first linked 2023-05-02
- Racing round and round: The little bug that could3 people · 3 mentions · first linked 2024-07-30
- CISA hit by hackers, key systems taken offline2 people · 4 mentions · first linked 2024-03-19
- Package Delivery Cybercriminals at Your Doorstep2 people · 2 mentions · first linked 2019-08-07
What Hacker News says?
As an aside, for those looking to understand YARA rules, [1] provides a brief introduction and [2] introduces how to write them. I needed to look it up myself, but seems relatively straightforward if you have a programming background. tl;dr: YARA rules are a method of categorizing malware based on their characteristics. So the PDF here released a YARA rule to determine a specific piece of malware used in the hack (i…
Comment linking /signature-based-detection-with-yara/
on “Technical report on DNC hack [pdf]”Submitted Side-Channel Attacks Against Multicore Processors in Cross-VM Scenarios: Part II as a story · 28 points
HN discussion>This is the average way a consumer does online banking, and it’s much more secure than on iOS. lol. At least on iOS they can trust what they see. On desktop they can't, https://securityintelligence.com/tatanga-attack-exposes-chip... All of your security theater falls apart when the device is infected with malware that can make the bank site say anything. On iOS your banks app/site will never ever lie to you, if it…
Comment linking /tatanga-attack-exposes-chiptan-weaknesses/
on “HP installs system-slowing spyware on its PCs”Submitted CISA hit by hackers, key systems taken offline as a story · 6 points
HN discussionI'm leaning towards the browser vendors on this one, AV software has been sloppy and has been known to enlarge the attack surface area. Here's an example from earlier this year. https://securityintelligence.com/news/bad-medicine-symantec-... @VessOnSecurity whines about a lack of hooks for AV to hang on in Google Chrome, but kind of laughs at the hooks that Microsoft Office offers (we didn't need them anyway, we rea…
Comment linking /news/bad-medicine-symantec-antivirus-comes-with-easy-exploit/
on ““AV is my single biggest impediment to shipping a secure browser.””Submitted Web injections are back on the rise as a story · 3 points
HN discussionThat's one of the problems with cheap domains in the sub $5 range. Some gTLD registries (.space included) thought it was a good idea to offer them really cheap, but what they got were mostly spammers which puts you in a bad neighborhood. There are a few others which you may want to avoid according to this report: https://securityintelligence.com/enticing-clicks-with-spam/
Comment linking /enticing-clicks-with-spam/
on “Show HN: Copyfish – Extract text from images, videos or PDF”Submitted ChatGPT Confirms Data Breach as a story · 3 points
HN discussionIt's really easy to trick people to commit crimes. Post a bunch craigslist job postings for a non-existant bank QA job that pays $100/hr. Have them withdraw the cash from the ATM, deposit it into their bank and wire the money out to an international bank. https://securityintelligence.com/the-most-common-schemes-for...
Comment linking /the-most-common-schemes-for-targeting-the-unknowing-money-mule/
on “Hackers Breached Virginia Bank Twice in Eight Months, Stole $2.4M”Submitted ChatGPT Confirms Data Breach, Raising Security Concerns as a story · 3 points
HN discussionSource, without all the TechCrunch "OMG Hackers" stuff: https://securityintelligence.com/posts/package-delivery-cybe... Do everyone a favor, mister mod.
Comment linking /posts/package-delivery-cybercriminals-at-your-doorstep/
on “Hackers ship their exploits directly to their target’s mailroom”Submitted IBM Insights on the CPU Vulnerability as a story · 3 points
HN discussionMaybe the CSRB should look at their own agency, CISA, and get things fixed, since CISA has more power over CISA than it has over Microsoft. https://securityintelligence.com/news/cisa-hackers-key-syste...
Comment linking /news/cisa-hackers-key-systems-offline/
on “Microsoft is a national security threat: ex-White House cyber policy director”Submitted Deep Packet Inspection Is Critical for Intrusion Prevention as a story · 3 points
HN discussion> but their recent failures have been pretty amateurish > See also the CISA report about last years breach The same CISA who just recently got hacked in an even more amateurish way? https://news.ycombinator.com/item?id=40107675 https://securityintelligence.com/news/cisa-hackers-key-syste...
Comment linking /news/cisa-hackers-key-systems-offline/
on “Microsoft is a national security threat: ex-White House cyber policy director”Submitted 10% of Android Banking Apps Vulnerable as a story · 3 points
HN discussionThe US govt can also do a lot better. The very agency they formed to counter cyber threats and alert against(CISA) itself got hacked because they failed to patch or remediate, and led to a serious leak of sensitive chemical industry information among others. Because they failed to follow their own security advisory. And they won't even put out a report detailing the hack like MS did. > According to an early report o…
Comment linking /news/cisa-hackers-key-systems-offline/
on “Microsoft is a national security threat: ex-White House cyber policy director”Submitted Racing round and round: The little bug that could as a story · 2 points
HN discussion>The part that makes no sense to me is that swatting is even possible, there are enough indicators that the call is not originating from the location indicated by the caller. Google search SS7. https://securityintelligence.com/ss7-vulnerability-isnt-a-fl... https://www.wired.com/2017/05/fix-ss7-two-factor-authenticat... https://www.theregister.co.uk/2017/05/03/hackers_fire_up_ss7... TLDR; the SS7 protocol (which cel…
Comment linking /ss7-vulnerability-isnt-a-flaw-it-was-designed-that-way/
on “Three Charged in Fatal Kansas ‘Swatting’ Attack”Submitted Racing round and round: The little bug that could as a story · 2 points
HN discussionhttps://news.ycombinator.com/item?id=11826431 https://securityintelligence.com/compromised-before-my-very-... https://www.reddit.com/r/teamviewer/comments/4m7j4a/i_covere...
Comment linking /compromised-before-my-very-eyes-how-i-almost-got-hacked/
on “TeamViewer users are being hacked in bulk, and we still don’t know how”Submitted Racing round and round: The little bug that could as a story · 2 points
HN discussionNorth Korean state-sponsored criminal fraud activities: https://www.zdnet.com/article/north-korea-s-apt38-hacking-gr... https://www.cnn.com/2019/03/01/politics/north-korea-cyberatt... Connections between specific Russian financial crime organizations and the Russian government are much harder to pin down as people who try to investigate ties between the Russian mob and the Russian government often wind up dead. Howe…
Comment linking /carbanak-how-would-you-have-stopped-a-1-billion-apt-attack/
on “Humans Are Bad at URLs and Fonts Don’t Matter”Submitted White House mandates stricter cybersecurity for R&D institutions as a story · 2 points
HN discussionMost enterprise security tools could pick this up the night it became a CVE, or IBM QRadar could.... http://securityintelligence.com/heartbleed-vulnerability-sec...
Comment linking /heartbleed-vulnerability-security-intelligence-tool/
on “900 social insurance numbers stolen from Revenue Canada via Heartbleed”Submitted Version 2 of US's National Cybersecurity Strategy and Implementation Plan as a story · 2 points
HN discussionI think the BBC reporter likely got confused. However it seems http://securityintelligence.com/ibm-x-force-researcher-finds... is a blog post about a 19 year old remotely exploitable bug being fixed recently, so it seems like if anything the link should go there.
Comment linking /ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows/
on “Microsoft fixes '19-year-old' bug with emergency patch”Submitted ChatGPT Confirms Data Breach, Raising Security Concerns as a story · 2 points
HN discussion> Specifically, it related to Microsoft Secure Channel, known as Schannel, Microsoft's software for implementing secure transfer of data. I'm confused... The article says this research relates to the SChannel vulnerability being patched this month and cites IBM Researchers[1] finding it, but the link to the blog post showing the work is towards OLE and not SChannel. Also, Microsoft has mentioned that they found[2] t…
Comment linking /ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows/
on “Microsoft fixes '19-year-old' bug with emergency patch”Submitted IBM Uncovers Global Phishing Campaign Targeting the Covid-19 Vaccine Cold Chain as a story · 2 points
HN discussion
