Naked Security Posting

News in brief: PCs’ PCs still running XP; bug-hunters cashing in; airport security stepped up

Your daily round-up of some of the other stories in the news

Hacking nuclear submarines – how likely is the nightmare scenario?

Nuclear submarines run on Windows XP - but is that the ships' weakest point?

‘Risk’ shines uncompromising spotlight on Julian Assange

A new film about Wikileaks should please those who believe in its importance - but doesn't please the activist group's founder

CIA contractors fired for stealing from hacked IoT snack machines

Some things really, really shouldn't be turned into IoT devices - including vending machines

Naked Security Postings

Deconstructing Petya: how it spreads and how to fight back

It's been 24 hours since the outbreak first hit: here's what we know now about how Petya behaves

Anthem to pay record $115m to settle lawsuits over massive breach

Attackers grabbed data including names, birthdates, taxpayer IDs and more from Anthem patients - a toolkit for identity theft

New Petya ransomware: everything you wanted to know (but were afraid to ask)

Your questions about the new Petya ransomware answered - and your chance to ask us more.

From floppy disks to deep freeze: what’s the best way to store data?

Still got a Zip drive? What about a CD? Are you sure you'll be able to access the data stored on those? We take a look at what's being done to keep information safe for future generations

News in brief: Wimbledon adds AI; four arrested over support scams; Russia threatens to block Telegram

Your daily round-up of some of the other stories in the news

Beer + bitter former field engineer = hacked smart water meters

The story of Adam Flanagan, who's been jailed for hacking, is a reminder to companies to revoke access to networks when they sack a disgruntled employee

Mount Pleasant PA Public Library Wiring Project

The people over at the Mount Pleasant PA Public Library posted a series of pictures showing the crew from PAconnect rewiring the library to upgrade the network infrastructure through a grant from the E-Rate. The

Westmoreland County Federated Library System obtained a grant from the Federal E-Rate Program to upgrade all of the library’s wiring infrastructure in Westmoreland County. We have been working our way through the Library System to complete this project for them. Thank you to everyone in the Mt. Pleasant Library who have recognized the hard work our crew is doing for them.

 

Good News if you are using Sophos Endpoint Protection and/or Intercept X Security Products

Sophos Stops Petya Ransomware

As with the recent WannaCry Ransomware attack, organizations around the world have again been affected by a new ransomware variant known as the Petya cyber-attack. We wanted to contact you to offer our advice and support.
Customers using Sophos Endpoint Protection are protected against all known variants of this ransomware. We first issued protection on June 27th at 13:50 UTC and have provided several updates since then to provide further protection against possible future variants.
In addition, customers using Sophos Intercept X were proactively protected with no data encrypted from the moment this new ransomware variant appeared.
Find out more about Intercept X and how it can protect your customers from ransomware like Petya and Wanna:

Further Information

Sophos KB: New variant of Petya ransomware
NakedSecurity:  Deconstructing Petya: how it spreads and how to fight back

Breaking news: here’s what we know about what could be the latest ‘Petya’ ransomware outbreak

Naked Security just posted a breaking news item on their site that they will be updating as they hear back from Sophos Labs.

A significant ransomware attack is spreading across Europe, Russia, Ukraine and elsewhere. Sophos is investigating the attack and will continue to provide updates here throughout the day.

https://nakedsecurity.sophos.com/2017/06/27/breaking-news-what-we-know-about-the-global-ransomware-outbreak/

TechSmith Partner Renewal

I have always enjoyed TechSmith’s products and we have made another commitment to bringing their products to you. Be sure to let us know your interest in any of these products. We can help get you set up with trial versions and to work up pricing for your organization. Contact us at: sales@paconnect.com

More Info on Camtasia

More Info on Snagit

TechSmith Summer Sale can save you 20%

You can take advantage of TechSmith’s Summer Sale when purchasing their outstanding graphics and video products.

Camtasia is a video editing program that allows you to easily create professional looking videos for training and marketing. I use this program to provide a visual show and tell to both our customers and for our internal training needs. It is both powerful and easy to use.

Just $199 during this sale.

Snagit is a simple to use graphics capture and editing tool.

• Image capture. Make sure to capture exactly what you need. Click and drag anywhere on your screen to select a region with pixel perfect accuracy.

• Video capture. Sometimes it's easier to talk things through. Record, narrate, and trim quick videos of your screen for demos, feedback, reviews, and more.

• Mobile capture. Capture beyond your desktop. Get TechSmith Fuse for your Android or iOS phone. Send photos and videos from your mobile device straight to the Snagit editor.

Just $49.95 during this Summer Sale.

Fall Updates coming to Microsoft OneDrive

One of the issues I have with my Microsoft Surface Book is that after I had a Surface Pro with 64GB storage on it I figured that I would be fine with the Surface Book with 256GB of storage as long as I am very careful with what I store on it. It didn’t take me long to add a USB flash memory to give me a little more headroom on the my device.

If you are using OneDrive for off-device storage, you either have to have the sync working, meaning you have the files on your devices and in the cloud, or just in the cloud. The Fall release of OneDrive with the Windows 10 Creators Update is going to provide the ability to control this a little better. With this update you will be able to set on-demand access to your cloud files so that you are really using the Cloud storage as just that, Cloud Storage. This way, you only need to bring down the document you are currently working on and then you can set the on-demand designation for it to be off-loaded from your local drive and put back into the cloud.

Of course you can’t do this yet, but you have the alternative now to pick and choose the folders that you want synced on you local drive currently. But taking this to the file level and having it automatically being returned to the cloud for you when you are through viewing or editing the document is going to be a nice feature.

Here’s a quick overview video showing this feature and how it works from Windows Central:

Overview of the Camtasia Version 9

While this version of Camtasia has been out for a while, I was only just given access to this Version this week. I have really enjoyed the new additions and the workflow seems much easier as well. Take a quick look at the video below to get a good look at these new features.

Stunning video effects
Apply Behaviors that are perfectly designed to animate your text, images, or icons. Get a crisp, polished look without being a professional video editor.
Drag-and-drop editing
What you see is what you get. Every effect and element in your video can be dropped and edited directly in the preview window. And you can edit at resolutions up to beautiful 4K, for clear video at any size.
Exceptional performance
Camtasia takes full advantage of your computer’s processor with 64-bit performance. You’ll get fast rendering times and enhanced stability—even on your most complex projects.
Animated backgrounds
You’ll have access to a variety of backgrounds that grab attention right from the start.
Music tracks
Use music to set the mood of your video. All tracks are royalty free and safe to use on YouTube and Vimeo.
Icons
Choose from hundreds of icons, or bring in your own straight from your computer.
Motion graphics
Get lower thirds, intro slides, and more so you can start quickly and look great.

Naked Security

News in brief: drone chiefs urge regulation; Microsoft drops SMB1; Virgin router warning

Your daily round-up of some of the other stories in the new

Russia ‘targeted 21 states’ during US election campaign, says official

Homeland Security official declines to reveal more to Senate hearing as details emerge of hacking attempts in Illinois and Arizona

Dating app boss sees ‘no problem’ on face-matching without consent

'When you have a bunch of single guys in the office, it goes in that direction', says Dating.AI founder as he dismisses concerns about scraping other dating apps for faces for users to match

Ransomware revisited – is it really the worst sort of malware? [Security SOS Week]

Join us for the last webinar in our Security SOS Week - we take a look at ransomware... and all the other malware nasties that roam the net.