Hwei Oh

Featured in: Favicon

dzone.com

Articles

Microsoft Patch Tuesday: What's all this about C:INETPUB?

2 weeks ago | solcyber.com | Paul Ducklin |Hwei Oh |John London

News wires abuzzNews wires are abuzz with stories that after you install this Tuesday’s Microsoft updates (the April 2025 Patch Tuesday security fixes), you end up with a weird directory (or folder, if you prefer), at the top level of the C: drive, called C:\INETPUB. If you’ve ever used Microsoft’s old-school web server IIS, short for Internet Information Services, you’ll recognize that directory name as the starting point for the web server’s files.
News in Brief: Patches from Apple fix privacy, code execution, lock screen bugs

4 weeks ago | solcyber.com | Paul Ducklin |Charles P. Ho |Hwei Oh

Updates in brief Apple’s latest round of updates are out, covering almost all supported products and operating system versions, including: macOS 13, 14 and 15 (respectively known as Ventura, Sonoma, and Sequoia) iPadOS 15, 16, 17 and 18 iOS 15, 16 and 18 The good news, in contrast to the recent emergency updates for macOS 15 and iOS 18 that came out three weeks ago, is that none of the listed bugs are tagged as zero-days, the name given to security holes that are found and exploited by...
News in Brief: 23andMe files for bankruptcy

1 month ago | solcyber.com | Paul Ducklin |Hwei Oh

Buyers wantedControversial DNA analytics company 23andMe, which gets its name from the fact that most people have 23 pairs of DNA-carrying chromosomes in their cells, is going bust. At its peak valuation just over four years ago, the company’s shares traded at about $320, but it’s been largely downhill from there, with shares listed today for less than a dollar each.
Credit card scams in the age of mobile phones (Part 2 of 2)

1 month ago | solcyber.com | Paul Ducklin |Hwei Oh

In the beginningIn 🔗 Part 1, we dug into the history of payment card fraud, right back to when credit card payments were done by hand in one of those zip-zap machines that actually imprinted the card’s data onto two carbon-paper payment slips, one for the customer and the other for the merchant.
How it works, and why it breaks

2 months ago | solcyber.com | Paul Ducklin |Charles P. Ho |Hwei Oh

Encryption at restEncryption has been an important part of our digital lives for many years now. All Apple iPhones, for instance, and most Android devices, are shipped with what’s known in the trade as FDE, short for full-disk encryption, already activated. The idea is simple and useful: anything, or more precisely almost anything, that you write to your device gets automatically encrypted on the way from the operating system to storage, and decrypted when it’s read back in.
What's in a name? How attacks and attackers get their tags.

2 months ago | solcyber.com | Paul Ducklin |Hwei Oh

A rose by any other nameThreat naming has been a troublesome issue since the very early days of hackers and malware. Not, perhaps, so troublesome that it has caused any sort of long-term crisis in threat research and threat response, but tricky enough that it has sometimes got in our way. And anything that buys cybercriminals even the tiniest bit of extra time, or amplifies their attacks even modestly, is worth thinking about.
Is it 'Pig Butchering' or 'Romance Baiting'?

Jan 22, 2025 | solcyber.com | Paul Ducklin |Hwei Oh |Charles P. Ho

What’s in a name? The digital cyber-vandals who churned out the first computer viruses liked to tag them with counter-cultural names that they could use for bragging rights. Sometimes, those names took hold because they were memorable, or because they were unavoidably woven into the visual fabric of the malware.
IoT security: How much will the US Cyber Trust Mark help?

Jan 15, 2025 | solcyber.com | Paul Ducklin |Hwei Oh

Things that scare usComputing equipment is not only many thousands of times faster than it was 50 years ago, but also has millions of times more storage crammed into less than one millionth of the space, at a tiny fraction of the cost. As a result, consumer devices including video cameras, baby monitors, home thermostats, doorbells, voice assistants and even wirelessly programmable color-changing light bulbs have become cheap, internet-connectable computers in their own right.
SolCyber the Modern Managed Security Program

Dec 11, 2024 | solcyber.com | Paul Ducklin |Hwei Oh

Organizations are becoming more aware of the need for MDR (managed detection and response) services to achieve real cyber resiliency. The increase in the quantity and sophistication of cyberattacks means that other, siloed solutions, fall short of fully protecting your organization. Whereas no one can guarantee that you won’t fall victim to a cyberattack, the use of MDR significantly decreases that risk and its overall impact.
The scourge of fake accounts: Why so many, what to do?

Dec 3, 2024 | solcyber.com | Paul Ducklin |Charles P. Ho |Hwei Oh

Every account mattersIn a recent article with the headline “Gone in 24 hours,” we wrote about how and why a single day is more that enough time for cybercriminals to set up and pull off an attack, even if it involves buying a fake online domain, setting up a bogus website at that domain, and spamming out thousands or even millions of users to lure them in.