John Z Black
Brunswick, ME • (207) 245-1010 • contact@johnzblack.com
Mostly security stuff...
Make sure you check out my main blog at https://gnerdsec.com/blog
Your Antivirus Is Harvesting Passwords Now: BlueHammer Hits CISA KEV
The BlueHammer flaw has moved from a research curiosity to an active threat. This Windows Defender zero-day turns your security software into a password harvester by exploiting a race condition to steal credentials. CISA says patch now.
Read More
The Devices China Already Owns: Pre-Positioning for Future Conflict
China's state actors aren't just hacking networks; they're acquiring real estate. A massive joint advisory reveals how covert device networks are being pre-positioned inside everyday hardware like routers and NAS devices, waiting for the right moment to be activated.
Read More
The Billion-Dollar Bill: Why the Cost of a Breach Never Ends
A major breach cycle only lasts a week in the news but can last five years on the balance sheet. UnitedHealth spent $3.1 billion before the SEC fine even landed.
Read More
Management Planes: The Internet's Industrialized Front Door
Hackers have stopped chasing individual servers. They are after the tools that manage thousands of them at once. BeyondTrust, Palo Alto, and Cisco are the current bulls-eye.
Read More
The Ephemeral Illusion: Why the Cloud Sandbox is not a Safe Zone
We have been told that serverless environments are secure because they are temporary. New research on Azure and AWS Lambda proves that attackers are learning how to live in the layer underneath.
Read More
The End of Optional Security: Snowflake and the Global ID Fallout
Snowflake is making MFA mandatory for all new users this May. It is a massive policy shift that marks the end of the choice to be insecure in a high-risk world.
Read More