- InfoSecSam's Newsletter
- Posts
- Azure DDoS, Cyber Warfare, FREE container security training and MORE!
Azure DDoS, Cyber Warfare, FREE container security training and MORE!
InfoSec Sam
August 04, 2024
This week's newsletter
Recent News
Poor Azure
Microsoft revealed that a recent Azure outage was triggered by its response to a large-scale Distributed Denial-of-Service (DDoS) attack. The mitigation measures inadvertently caused its own DoS by disrupting services for several customers.
The outage, which lasted roughly 10 hours, impacted water utilities, courts, banks, and other types of organisations. This is a great example of why its important to not only assess external threats, but also the impact that can be caused by the very mitigations put in to defend against them.
Patching Problems
The importance of patching known vulnerabilities cannot be understated. A lack of effective patch management led to attackers exploiting known vulnerabilities resulting in the theft of 40 million UK voter records!
The Electoral Commission didn’t discover the compromise of its systems until after a year in October 2022 and took until August 2023 to publicly disclose the year-long data breach.
Patch those weaknesses!
Cyber Warfare
Israeli hacktivists have targeted Iranian government websites, claiming responsibility for several cyberattacks. These attacks are part of ongoing cyber warfare between the two nations, often involving tit-for-tat retaliation.
The hacktivist group cited political motives behind their actions, aiming to disrupt Iranian government operations and draw attention to regional tensions.
Other News
EU AI Regs - The European Union's AI regulations are now in effect, which aim to ensure the safe and ethical development and use of AI.
Meta Mega Bill - Meta will pay $1.4 billion to settle a lawsuit for illegally capturing the biometric data of millions of Texans.
Secret Laser - A $500 open source tool lets anyone hack computer chips with lasers by reverse engineering chips and exposing their secrets.
FIRE THE LASER!
Career Development
FREE Container and Kubernetes Security Training
This week I have a free video series from cloud security company Datadog breaking down container and kubernetes security fundamentals.
Knowing how to securely operate and manage a container based environment is a valuable skill set for any cybersecurity professional in the modern day.
Below you will find a link to video series as well as other free resources shared on my TikTok channel: