NetSec

2.13.2023

To whomever it was that called and claimed to be from Publishers' Clearing House, that was the most unprofessional call I've ever received, even from other scam artists. What made your call even less believable is that I've not bought a magazine from PCH in over 30 years and the UPSO stopped forwarding mail from there 3 or 4 relocations ago. This puts you in the same category as the wife of the dead Nigerian Prince who wants to give me money.
The one thing that I regret: I don't have your number. If I did, I'd call you back, so that I could hang up on you again. Meh.

posted by joat Monday, February 13, 2023

2.07.2023

Hackers Target Thousands of Computers Days After Ion Attack from Blaine

Hackers are mass infecting servers worldwide by exploiting a two year old patched hole in VMware's ESXi OS

This had me scratching my head because normally ESXi hosts areand are kept on an isolated management network. It turns out the "abuse case" is people running unlicensed ESXi hosts (people who also happen to not know what the *&^% they are doing) and therefore not being eligible for routine updates. If you know anyone running unlicensed ESXi servers, tell them to disable SLP.

posted by GeeWhiz Tuesday, February 07, 2023