Kaos PC Tech

A global sensation since its initial release at the end of last year, ChatGPT's popularity among consumers and IT professionals alike has stirred up cybersecurity nightmares about how it can be used to exploit system vulnerabilities

ChatGPT creates mutating malware that evades detection by EDR Mutating, or polymorphic, malware can be built using the ChatGPT API at runtime to effect advanced attacks that can evade endpoint detections and response (EDR) applications.

Many will want to build limits and guidelines into their security plans that specify what is allowed to be entered into platforms and websites that may store or share the information online.

Artificial intelligence is coming to Windows: Are your security policy settings ready? AI seems to be getting embedded in everything these days, and it’s coming to Microsoft Windows. It’s time now to ensure your policies are sufficient to handle the change and — risks — it will bring.

ChromeLoader is a browser hijacker that force-installs browser extensions that redirect search results to promote unwanted software, fake giveaways, surveys, adult games, dating sites, and other irrelevant results.

New ‘Shampoo’ Chromeloader malware pushed via fake warez sites A new ChromeLoader campaign is underway, infecting visitors of warez and pirated movie sites with a new variant of the search hijacker and adware browser extension named Shampoo.

Email security is a concept that protects email accounts, servers, and communications from unauthorized access, data loss, or compromise. Email security consists of the policies, tools, and services deployed to protect against threats specific to email such as spam, phishing attacks, malware-infested attachments, impersonation, and email interception.

How to Improve Email Security for Enterprises & Businesses | eSecurityPlanet Learn various techniques, tools, and services to secure email against cybersecurity attacks such as phishing and ransomware.

The findings come less than a week after Microsoft detailed a similar combination of an Adversary-in-the-Middle (AitM) phishing and a Business Email Compromise (BEC) attack aimed at banking and financial services organizations

Adversary-in-the-Middle Attack Campaign Hits Dozens of Global Organizations Hackers are bypassing Office365 authentication and gaining persistent access to compromised accounts.

June’s Patch Tuesday features updates to plug at least 70 security holes, and while none of these are reported by Microsoft as exploited in-the-wild yet, several in particular as “more likely to be exploited.”

Microsoft Patch Tuesday, June 2023 Edition – Krebs on Security June 13, 2023 1 Comment Microsoft Corp. today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. This month’s relatively light patch load has another added bonus for system administrators everywhere: It appears to be the first P...

Unencrypted data transmission from Qualcomm chips

Qualcomm chips found to collect and transmit user information - Gizmochina German security firm Nitrokey has discovered an unrecorded feature in Qualcomm Snapdragon chips that collect and transmit user information without encryption.

The development, which was reported by the MalwareHunterTeam over the weekend, appears to be the first time a big-game ransomware crew has created a macOS-based payload.

LockBit Ransomware Now Targeting Apple macOS Devices A new LockBit ransomware operation has surfaced and this time, it's targeting macOS devices.

On Thursday March 30th 2023 enterprise communications software maker 3CX confirmed that multiple versions of its desktop app for Windows and macOS are affected by a supply chain attack.

Automatic Updates Deliver Malicious 3CX 'Upgrades' to Enterprises In a SolarWinds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor's update mechanism.

This attack is possible using custom tools which can test WiFi networks for client isolation bypasses and intercept traffic destined for other clients at the MAC layer.

WiFi protocol flaw allows attackers to hijack network traffic Cybersecurity researchers have discovered a fundamental security flaw in the design of the IEEE 802.11 WiFi protocol standard, allowing attackers to trick access points into leaking network frames in plaintext form.

A friendly reminder to:
1. CHANGE ALL YOUR PASSWORDS EVERY 3 MONTHS
2. NEVER USE THE SAME PASSWORD TWICE
3. ONCE YOU USED A PASSWORD NEVER USE IT AGAIN

FOLLOW US ELSEWHERE ON
---------------------------------------------------
YouTube: https://www.youtube.com/
Twitch: https://www.twitch.tv/kaospctech
Twitter: https://twitter.com/KaosPCtech
Instagram: https://www.instagram.com/kaospctech/

Join our Discord server:
https://discord.gg/G75MwFVrqG

What is a WAMP stack and what's it used for?

WAMP (Windows, Apache, MySQL, and PHP, Perl, or Python) is a variation of LAMP for Windows systems and is often installed as a software bundle and often used for web development and internal testing, but may also be used to serve live websites.

FOLLOW US ELSEWHERE ON
---------------------------------------------------
YouTube: https://www.youtube.com/
Twitch: https://www.twitch.tv/kaospctech
Twitter: https://twitter.com/KaosPCtech
Instagram: https://www.instagram.com/kaospctech/

Join our Discord server:
https://discord.gg/G75MwFVrqG

What is a MEVN stack and what's it used for?

MEAN (MongoDB, Express.js, Vue.js, and Node.js) is the open-source JavaScript software stack that has emerged as a new and evolving way to build powerful and dynamic web applications. Its software components can be used to effectively design frontend and backend development and improve the functionality of your website or app.

FOLLOW US ELSEWHERE ON
---------------------------------------------------
YouTube: https://www.youtube.com/
Twitch: https://www.twitch.tv/kaospctech
Twitter: https://twitter.com/KaosPCtech
Instagram: https://www.instagram.com/kaospctech/
Join our Discord server:
https://discord.gg/G75MwFVrqG

What is a MEAN stack and what's it used for?

MEAN (MongoDB, Express.js, AngularJS (or Angular), and Node.js) is a free and open-source JavaScript software stack for building dynamic web sites and web applications.

FOLLOW US ELSEWHERE ON
---------------------------------------------------
YouTube: https://www.youtube.com/
Twitch: https://www.twitch.tv/kaospctech
Twitter: https://twitter.com/KaosPCtech
Instagram: https://www.instagram.com/kaospctech/

Join our Discord server:
https://discord.gg/G75MwFVrqG

What is a LAMP stack and what's it used for?

LAMP is an acronym denoting one of the most common software stacks for many of the web's most popular applications and a LAMP stack is used for backend or server-side development.

FOLLOW US ELSEWHERE ON
---------------------------------------------------
YouTube: https://www.youtube.com/
Twitch: https://www.twitch.tv/kaospctech
Twitter: https://twitter.com/KaosPCtech
Instagram: https://www.instagram.com/kaospctech/

Join our Discord server:
https://discord.gg/G75MwFVrqG

This is just a fun little video showing TempleOS's test suite tour.

https://www.youtube.com/watch?v=V3aYOzhA6aE

The audio clip is Terry A. Davis mixed from one of his clips, 2014-08-27T00:02:00+00:00 - TempleOS - Elephants --) (P6Q0KaAgLEU).mkv, and another audio clip of Terry Davis singing Paranoid by Black Sabbath.

Enjoy!

TempleOS download: https://templeos.org/
Terry A. Davis archival clips: https://archive.org/download/TerryADa...
ActualizeKufner YouTube video of Terry singing: https://www.youtube.com/watch?v=S_A2y...

FOLLOW US ELSEWHERE ON
---------------------------------------------------
Twitch: https://www.twitch.tv/kaospctech
Twitter: https://twitter.com/KaosPCtech
Facebook: https://www.facebook.com/KaosPCtech
Instagram: https://www.instagram.com/kaospctech/

Join our Discord server:
https://discord.gg/G75MwFVrqG

Temple OS - Test Suite Tour This is just a fun little video showing TempleOS's test suite tour.The audio clip is Terry A. Davis mixed from one of his clips, 2014-08-27T00:02:00+00:00 - ...

Installing a type 2 hypervisor, VirtualBox, in Windows 10.

This video is fairly easy to follow for new users that want to just test out a virtual machine for the first time. It's also a good way to test out any operating systems without having to install it directly to an SSD/HDD or potentially deleting any data on drive with data.

https://www.youtube.com/watch?v=vQT71lqkbxs&t=4s

Link to download VirtualBox & Linux Mint:
https://www.virtualbox.org/wiki/Downloads
https://www.linuxmint.com/download.php

FOLLOW US ELSEWHERE ON
---------------------------------------------------
YouTube: https://www.youtube.com/
Twitch: https://www.twitch.tv/kaospctech
Twitter: https://twitter.com/KaosPCtech
Instagram: https://www.instagram.com/kaospctech/

Join our Discord server:
https://discord.gg/G75MwFVrqG

How to Install VirtualBox and run Linux on Windows 10 in 2023 Installing a type 2 hypervisor, VirtualBox, in Windows 10.This video is fairly easy to follow for new users that want to just test out a virtual machine for ...

LastPass, a major password manager, says it has suffered its second breach in three months by the same unauthorized party.

Major password manager LastPass suffered a breach — again LastPass said an unauthorized party used information gained in an August breach to access customer information. But the company said customers' passwords remain safely encrypted.

Brave Search is an independent search engine that claims not to track its users and provides a safe and secure search experience.

Privacy-Preserving Ads Make a Debut on Brave Search Brave Search is testing privacy-preserving ads. But, the Brave browser does not seem to block them by default.

China is finding it increasingly difficult to source and use the most advanced chips in the world due to US export sanctions

Following US Sanctions, China Decides Its Future Lies With RISC Chips With access to x86 and ARM chips becoming increasingly difficult, Chinese companies turn their focus on to the open source RISC-V architecture.

AMD plans to announce its Zen 4 3D V-Cache processors at CES 2023.

AMD Ryzen 9 7950X3D Coming in Jan 2023: 30% Faster than the Intel Core i9-13900K, Courtesy of ~200MB Cache [Rumor] | Hardware Times The Ryzen 9 7900X3D will feature 16 cores with two 64MB cache dies or a single denser cache die with 128MB of SRAM.

The attacks involve taking advantage of a critical security vulnerability in the open source, in-memory, key-value store that was disclosed earlier this year to deploy Redigo, according to cloud security firm Aqua.

Hackers Exploiting Redis Vulnerability to Deploy New Redigo Malware on Servers Hackers are exploiting a vulnerability in the Redis database application to deploy a new Go-based malware, dubbed "Redigo."

The company will cut less than 800 employees globally by the end of December. The job cuts will mainly involve non-manufacturing roles.

GlobalFoundries to Lay off Nearly 6% of Staff by End of 2022 If you are profitable, you want to stay profitable.

Include initial gesture support with double-tap to wake for selected devices, improvements to fingerprint unlock by allowing more backoff time between read retries, as well as support for media buttons on headsets for most Ubuntu Phone devices.

Ubuntu Touch OTA-24 Released for Ubuntu Phone Users, Here's What's New - 9to5Linux Ubuntu Touch OTA-24 software update is now available for Ubuntu Phone users with various improvements and updated components.

The memory market saw profits decrease by 27% as compared to the previous quarter due to customers’ inventory adjustments and a decrease in demand for chips from data centres, PCs, and mobile devices.

samsung: How Samsung plans to combat global semiconductor decline Samsung's move to establish a separate in-house research division comes as the world is experiencing a shortage of semiconductors due to supply chain disruptions triggered by Covid-19 crisis. "A growing distrust of external market research institutions also played a role," a report has claimed. The....

China has been challenging the US in the field of space exploration for years now. The country is building its own space station and has sent probes to the moon—it was the first to land a rover on the far side of the moon in 2019.

https://www.techspot.com/news/96771-china-us-have-plans-nuclear-powered-moon-bases.html

TechSpot News Archive

According to a report from Sysdig, the images contained nefarious assets such as cryptominers, backdoors, and DNS hijackers.

https://www.techradar.com/news/over-a-thousand-docker-container-images-found-hiding-malicious-content?fbclid=IwAR1tLM9DOzXYDi7R56v4Ubiy3utzKlVavmnKpafe4afd77vcchxbqu2L-vw

Over a thousand Docker container images found hiding malicious content Linux images on Docker hide malicious content, mainly cryptominers

Nokia is much older than most people know, but it was during the last few decades that the company became known for iconic mobile devices with bold design and technology.

Nokia: The Story of the Once-Legendary Phone Maker Most people who hear the word "Nokia" associate it with mobile phones, but there's a convoluted history to tell since the company's humble beginnings over 150 years...

Over 50 websites impersonating the official MSI Afterburner site have appeared online in the past three months, pushing XMR (Monero) miners along with information-stealing malware.

Fake MSI Afterburner targets Windows gamers with miners, info-stealers Windows gamers and power users are being targeted by fake MSI Afterburner download portals to infect users with cryptocurrency miners and the RedLine information-stealing malware.

Ubuntu Touch OTA-24 is here, while it’s still based on the Ubuntu 16.04 (Xenial Xerus) upstream repositories, it introduces further improvements to increase the overall stability and reliability of the mobile OS.

Ubuntu Touch OTA-24 Released for Ubuntu Phone Users, Here's What's New - 9to5Linux Ubuntu Touch OTA-24 software update is now available for Ubuntu Phone users with various improvements and updated components.