The IronBox Team Blog

You’ve probably heard about the trouble Facebook is in these days regarding the Cambridge Analytica user data “breach of trust”, and now there’s a story about Facebook (for Android users using Messenger) recording your call logs: https://www.nbcnews.com/tech/social-media/facebook-confirms-it-records-call-history-stoking-privacy-furor-n860006 If you want to

This is very cool, I didn’t know that GitHub did this. Every time a vulnerability is disclosed in the public related to some open source library, GitHub scans its repositories for applications that depend on those libraries, and in this

Here’s some of the notable 2017 security hiccups from ZDNet: http://www.zdnet.com/article/2017-in-security-privacy-a-total-dumpster-fire Happy holidays and enjoy, –Kevin  

Here’s a link to the United States National Security Strategy released today: https://www.whitehouse.gov/wp-content/uploads/2017/12/NSS-Final-12-18-2017-0905.pdf (cyberspace security strategy starts on page 31). No plan is perfect, but I’d like to point out a bright a really good (and surprising) focus of the strategy,

Was just using Google and noticed this under the search bar: https://privacy.google.com/your-security.html?utm_source=google&utm_medium=hpp-desktop-auth&utm_campaign=security-tips&categories_activeEl=sign-in#your-security-action Great short little tips from Google (especially since the Equifax hack is still fresh in everyone’s minds) that you can use to help protect your accounts. –Kevin

A security researcher (and by the way ex-NSA guy) named Patrick Wardle released an exploit that enables attackers to exfiltrate passwords from macOS reportedly hours before Apple released their new operating system macOS High Sierra. http://www.zdnet.com/article/apple-macos-high-sierra-password-vulnerable-to-password-stealing-hack There’s no point in

Here’s a story about how hackers are using hotel wi-fi networks to attack users, corporate espionage and for political targets: http://www.zdnet.com/article/hackers-are-using-hotel-wi-fi-to-spy-on-guests-steal-data Attacks come in various flavors (social engineering, network based and malware). For social engineering that’s on the user to be