Infosec quotes - password managers

@mattblaze says “... Remember: even the worst password manager will make you more secure in practice than using the same password on multiple sites...”

https://twitter.com/mattblaze/status/960640467611324417 

Infosec quotes - System.Management.Automation.dll

Amanda R says “...To use PowerShell, a user can either use the command line interface provided by PowerShell.exe or reference the cached global assembly in C# source code. The GAC assembly name used in both cases is called System.Management.Automation.dll...”

https://arxiv.org/pdf/1709.07508.pdf 

Infosec quotes - uninstall flash

@fouroctets says he found the patch to the latest flash 0day

Just uninstall it!!!

https://twitter.com/fouroctets/status/959787059325034496

Infosec quotes - adobe creative cloud miner

@noarfromspace says “... MacUpdate trojan/miner is downloading a miner from Adobe Creative Cloud servers...”

https://twitter.com/noarfromspace/status/959392650083254272 

Infosec quotes - flash 0day

Nick Carr says “Details on the latest Flash zero-day”

"Due to the publication of the vulnerability prior to patch availability, it is likely that additional criminal and nation state groups will attempt to exploit the vulnerability"

https://www.fireeye.com/blog/threat-research/2018/02/attacks-leveraging-adobe-zero-day.html 

Infosec quotes - as block gpo

@swiftonsecurity says “... you can enable adblocking for IE, Firefox, and Chrome with simple Group Policy...”

https://decentsecurity.com/enterprise/ 

Infosec quotes - Linux bitcoin miner

Linux bitcoin miner injection script (see here)

https://urlscan.io/result/94fab9ed-0ad3-4265-88de-b86ae5d6fe45/content/

hxxp://f4e8j36h8572a[.]com/robots.txt
md5 af8338f5e737d40139eece286cde9a76

https://www.virustotal.com/#/file/0de9cc886692cd7c7029de5334ae0bef1f0f32b141668eab0eb5db0a446d36a1/details


-kills other miners
-wget/curls files
-creates cron job
-enables hugepages

probably linked to weblogic vuln