The Insecurity Brief

New exploit found that targets sys admin admins programmers and others that routinely copy and paste commands Copy & Paste Exploit Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/copy-paste-exploit/ Youtube: https://youtu.be/aAwa53GEbSw Rumble: https://rumble.com/vrylkt-copy-and-paste-exploit.html iTunes: ituneslink Spotify: spotifylink Trip’s books https://www.tripelix.com/merch   Do not copy-paste commands from webpages Developers, sysadmin, security researchers, and hobbyists who copy-paste commands from webpages into a console or terminal are warned that their system may be compromised. https://en.secnews.gr/379042/min-kanete-copy-paste-commands-webpages/

Trip talks about virus detection and how to see if you are infected How To Tell If Your Device Has A Virus Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/how-to-tell-if-your-device-has-a-virus/ Youtube: https://youtu.be/AirdMI8C5mg Rumble: https://rumble.com/vru60p-how-to-tell-if-your-device-has-a-virus.html iTunes: ituneslink Spotify: spotifylink Trip’s books https://www.tripelix.com/merch   Hashtags go here Security Onion 2 Peel back the layers of your enterprise with our newest and most powerful release yet. https://download.securityonion.net/file/securityonion/securityonion-2.3.91.iso https://securityonionsolutions.com/

An alert was made by many that Chinese bots are promoting its own form of democracy Chinese Propaganda Targets Redefining Democracy Uses Bots To Spread Message Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/chinese-propaganda-targets-redefining-democracy-uses-bots-to-spread-message/ Youtube: https://youtu.be/qttAxXMKacw Rumble: https://rumble.com/vr79j1-chinese-propaganda-targets-redefining-democracy-uses-bots-to-spread-message.html iTunes: ituneslink Spotify: spotifylink Trip’s books https://www.tripelix.com/merch   #china #democracy Report: Beijing unleashed a massive propaganda campaign to redefine democracy Report: Beijing unleashed a massive propaganda campaign to redefine democracy China has unleashed a massive propaganda campaign aimed at recreating democracy in its own image, according to a new report published Tuesday. https://therecord.media/report-beijing-unleashed-a-massive-propaganda-campaign-to-redefine-democracy/ China’s Narrative War on Democracy China’s entire propaganda system is working at full force in the largest Chinese state-sponsored overt influence campaign to date observed by Recorded Future. The narrative warfare operation, which aims to reshape global definitions of democracy, criticize American democracy, and position China as a democracy itself, has been amplified by nearly every Chinese state-affiliated media https://www.recordedfuture.com/chinas-narrative-war-democracy/   How Beijing Influences the Influencers Millions have watched Lee and Oli Barrett’s YouTube dispatches from China. The father and son duo visit hotels in exotic locales, tour out-of-the-way villages, sample delicacies in bustling markets and undergo traditional ear cleanings. Warning visiting the times exposes your device to being tracked by media.net a Chinese tracking company https://www.nytimes.com/interactive/2021/12/13/technology/china-propaganda-youtube-influencers.html

Friday schools across the nation cancel classes over a viral threat of mass shooting on Ticktock the system found no credibility Tiktok School Shooting Viral Threat Cancels Classes For Millions Of Children Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/tiktok-school-shooting-viral-threat-cancels-classes-for-millions-of-children/ Youtube: https://youtu.be/pKKluUhmDjY Rumble: https://rumble.com/vr7788-tiktok-school-shooting-viral-threat-cancels-classes-for-millions-of-childre.html iTunes: https://podcasts.apple.com/us/podcast/tiktok-school-shooting-viral-threat-cancels-classes/id1583788677?i=1000545748027 Spotify: https://open.spotify.com/episode/2oxFmEJwh4KcNAbwu9c6UC Trip’s books https://www.tripelix.com/merch   #tiktock Vague and viral TikTok warning of school violence is not credible but has schools and law enforcement on high alert A vague and viral TikTok trend warning of nationwide school violence on Friday — which authorities have dismissed as not credible — has nevertheless prompted widespread school closures, stretched law enforcement resources and put families on edge ahead of a critical holiday travel season. https://www.cnn.com/2021/12/17/tech/tiktok-school-threat-december-17/index.html TikTok school shooting threat unfounded but Chicago area districts take precautions PARK RIDGE, Ill. (WLS) — An unfounded threat of school violence spreading on the social media app TikTok prompted several Chicago area school districts to respond Friday. https://abc7chicago.com/tiktok-school-threat-december-17-shooting-bomb-social-media-to-schools/11351290/

Meta makes headlines blocking 5 paramilitary groups from its Facebook and Instagram platforms citing hypocrisy in its actions. Paramilitary Groups Plant Malware It Makes The News But Spying On Us Doesn’t Matter Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/paramilitary-groups-plant-malware-it-makes-the-news-but-spying-on-us-doesnt-matter/ Youtube: https://youtu.be/NW45f4rpH6s Rumble: https://rumble.com/vqxhuq-paramilitary-groups-plant-malware-it-makes-the-news-but-spying-on-us-doesnt.html iTunes: https://podcasts.apple.com/us/podcast/paramilitary-groups-plant-malware-it-makes-the-news/id1583788677?i=1000545252619 Spotify: https://open.spotify.com/episode/072hzR7hR52Id53GB4yxNZ Trip’s books https://www.tripelix.com/merch   #predator #hack #nso A new spyware-for-hire, Predator, caught hacking phones of politicians and journalists While NSO Group was taking flak for hacking into the phones of journalists, activists and human rights defenders, an entire class of spyware makers and surveillance-for-hire outfits were operating as normal, largely unnoticed.   A new spyware-for-hire, Predator, caught hacking phones of politicians and journalists   Pegasus vs. Predator Dissident’s Doubly-Infected iPhone Reveals Cytrox Mercenary Spyware We confirmed the hacking of the devices of two individuals with Cytrox’s Predator spyware: Ayman Nour, a member of the Egyptian political opposition living in exile in Turkey, and an Egyptian exiled journalist who hosts a popular news program and wishes to remain anonymous. https://citizenlab.ca/2021/12/pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware/

From print to live television nearly every show has had some mention of this exploit but very few suggest what to do about it. Log4j Exploit Its Been On The News But Does It Really Matter? Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/log4j-exploit-its-been-on-the-news-but-does-it-really-matter/ Youtube: https://youtu.be/JTJssC8BJdE Rumble: https://rumble.com/vqv8f3-log4j-exploit-its-been-on-the-news-but-does-it-really-matter.html iTunes: https://podcasts.apple.com/us/podcast/log4j-exploit-its-been-on-the-news-but-does-it-really-matter/id1583788677?i=1000545128756 Spotify: https://open.spotify.com/episode/4H2agmV9fxCkXDxJk6iOpP Trip’s books https://www.tripelix.com/merch     Apache Log4j Vulnerability Guidance CISA and its partners, through the Joint Cyber Defense Collaborative, are responding to active, widespread exploitation of a critical remote code execution (RCE) vulnerability (CVE-2021-44228) in Apache’s Log4j software library, versions 2.0-beta9 to 2.14.1, known as “Log4Shell” and “Logjam.” Log4j is very broadly used in a variety of consumer and enterprise services, websites, and applications—as well as in operational technology products—to log security and performance information. An unauthenticated remote actor could exploit this vulnerability to take control of an affected system. https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance

Websites are under constant attack what you should do if you have a site upate as soon as possiable WordPress Under Attack Over 16,000 Ip Addresses Used To Target Over 1.6 Million Sites Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/wordpress-under-attack-over-16000-ip-addresses-used-to-target-over-1-6-million-sites/ Youtube: https://youtu.be/Tk8TW5PFia0 Rumble: https://rumble.com/vqmdhy-wordpress-under-attack-over-16000-ip-addresses-used-to-target-over-1.6-mill.html iTunes: https://podcasts.apple.com/us/podcast/wordpress-under-attack-over-16-000-ip-addresses-used/id1583788677?i=1000545022394 Spotify: https://open.spotify.com/episode/33gXTgy0D3KdPNGkZVlMuv Trip’s books https://www.tripelix.com/merch   Vulnerable Plugins Activello (<=1.4.1) Affluent (<1.1.0) Allegiant (<=1.2.5) Antreas (<=1.0.6) Bonkers (<=1.0.5) Brilliance (<=1.2.9) Illdy (<=2.1.6) MedZone Lite (<=1.2.5) NatureMag Lite (no known patch available) NewsMag (<=2.4.1) Newspaper X (<=1.3.1) Pixova Lite (<=2.0.6) Regina Lite (<=2.0.5) Shapely (<=1.2.8) Transcend (<=1.1.9) 1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes. https://thehackernews.com/2021/12/16-million-wordpress-sites-under.html 1.6 Million WordPress Sites Hit With 13.7 Million Attacks In 36 Hours From 16,000 IPs Today, on December 9, 2021, our Threat Intelligence team noticed a drastic uptick in attacks targeting vulnerabilities that make it possible for attackers to update arbitrary options on vulnerable sites. This led us into an investigation which uncovered an active attack targeting over a million WordPress sites. Over the past 36 hours, the Wordfence network has blocked over 13.7 million attacks targeting four different plugins and several Epsilon Framework theme

Both Facebook and Twitter released new programs to protect one sided speech treating to deplatform those who don’t comply Social Media Censorship Programs Developed To Shield Elites And Protect Unlawfulness Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/social-media-censorship-programs-developed-to-shield-elites-and-protect-unlawfulness/ Youtube: https://youtu.be/DyUJFwI2rPc Rumble: https://rumble.com/vqmcf3-social-media-censorship-programs-developed-to-shield-elites-and-protect-unl.html iTunes: https://podcasts.apple.com/us/podcast/social-media-censorship-programs-developed-to-shield/id1583788677?i=1000544905684 Spotify: https://open.spotify.com/episode/7w8r9rI0K1fOHrSBKL2Ynw Trip’s books https://www.tripelix.com/merch   Hashtags go here Twitter Bans Users From Posting ‘Private Media’ Without a Person’s Consent Twitter on Tuesday announced an expansion to its private information policy to include private media, effectively prohibiting the sharing of photos and videos without express permission from the individuals depicted in them with an aim to curb doxxing and harassment. https://thehackernews.com/2021/11/twitter-bans-users-from-posting-private.html Meta Expands Facebook Protect Program to Activists, Journalists, Government Officials   Meta, the company formerly known as Facebook, on Thursday announced an expansion of its Facebook Protect security program to include human rights defenders, activists, journalists, and government officials who are more likely to be targeted by bad actors across its social media platforms. https://thehackernews.com/2021/12/meta-expands-facebook-protect-program.html <img alt="" src="https://www.tripelix.com/insecurity/social-media-censorship-programs-developed-to-shield-elites-and-protect-unlawfulness/image/jpeg;

New exploit for DDE explained that bypasses antivirus with .ics links New Windows Exploit Phishing Appointment Links Bypass Anti Virus Checks Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/new-windows-exploit-phishing-appointment-links-bypass-anti-virus-checks/ Youtube: https://youtu.be/dbxiL_ptNcY Rumble: https://rumble.com/vqm7aw-new-windows-exploit-phishing-appointment-links-bypass-anti-virus-checks.html iTunes: https://podcasts.apple.com/us/podcast/new-windows-exploit-phishing-appointment-links-bypass/id1583788677?i=1000544780894 Spotify: https://open.spotify.com/episode/6yFE2zXNZm0V8vlD9jK7Ri Trip’s books https://www.tripelix.com/merch   Hashtags go here Attackers Disguise Malware as Calendar Invite Attachment Meeting invites are one of the most common types of emails sent today, so it should come as no surprise that attackers have found a way to manipulate them. Multiple organizations that utilize Abnormal Security recently received emails which contained a .ics attachment—an invitation file commonly used to populate online calendar applications with meeting and event information. https://abnormalsecurity.com/blog/calendar-invite-malware-attack

“Facebook is like a robot programmed with a singular mission: to grow. And the undeniable reality is that Facebook’s growth, fueled by hate, division, and misinformation, has left hundreds of thousands of devastated Rohingya lives in its wake,” from the complaint Meta Aka Facebook Sued For 150 Billion Claiming Algorithm Promoted Genocide Every day Big Tech and Mass Media make it hard to find out what is going on with the internet. The suppression of information is a danger to all of us.  Social media attempts to shape news and information by over-amplification of disinformation.    Join our community!! Subscribe to the Insecurity Brief podcast now on every platform we can find Follow me on Twitter @trip_elix   Links Our Website: https://www.tripelix.com/insecurity/meta-aka-facebook-sued-for-150-billion-claiming-algorithm-promoted-genocide/ Youtube: https://youtu.be/x0aa3at6lWs Rumble: https://rumble.com/vqiaje-meta-aka-facebook-sued-for-150-billion-claiming-algorithm-promoted-genocide.html iTunes: https://podcasts.apple.com/us/podcast/meta-aka-facebook-sued-for-150-billion-claiming-algorithm/id1583788677?i=1000544543140 Spotify: https://open.spotify.com/episode/3pS1NoCgRDRrxTUD7BEVVj Trip’s books https://www.tripelix.com/merch   Hashtags go here Rohingya refugees sue Facebook for $150 billion, alleging it helped perpetuate genocide in Myanmar Facebook failed to quickly stop the spread of hate speech and misinformation against the Rohingya people, in turn contributing to the persecution and alleged genocide of the minority community in Myanmar, according to a lawsuit filed Monday in a California court that asks for more than $150 billion in compensation. https://www.washingtonpost.com/world/2021/12/07/facebook-rohingya-genocide-refugees-lawsuit/ How Facebook neglected the rest of the world, fueling hate speech and violence in India In February 2019, not long before India’s general election, a pair of Facebook employees set up a dummy account to better understand the experience of a new user in the company’s largest market. They made a profile of a 21-year-old woman, a resident of North India, and began to track what Facebook showed her. https://www.washingtonpost.com/technology/2021/10/24/india-facebook-misinformation-hate-speech/ <img alt="" src="https://www.washingtonpost.com/w