Original release date: March 18, 2015
Apple has released security updates for Safari to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow a remote attacker to execute arbitrary code or prevent users from discerning a phishing attack on an affected system.
Updates include:
• Safari 8.0.4 for OS X Mountain Lion v10.8.5
• Safari 7.1.4 for OS X Mavericks v10.9.5
• Safari 6.2.4 for OS X Yosemite v10.10.2
US-CERT encourages users and administrators to review Apple security update HT204560 and apply the necessary updates.
Exploitation of these vulnerabilities may allow a remote attacker to execute arbitrary code or prevent users from discerning a phishing attack on an affected system.
Updates include:
Safari 8.0.4 for OS X Mountain Lion v10.8.5
Safari 7.1.4 for OS X Mavericks v10.9.5
Safari 6.2.4 for OS X Yosemite v10.10.2
US-CERT encourages users and administrators to review Apple security update HT204560 and apply the necessary updates.
A recap of season 1 episode 1 of CSI: Cyber TV show.
The episode starts off in Baltimore Maryland at 1:37 am when a couple is awakened from voices coming out of a baby-cam monitor that was apparently hacked and the infant (Caleb Reynolds) kidnapped. It was later discovered the foreign voices were from individuals bidding on the baby in an illegal auction.
This has actually occurred to a Houston Nanny taking care of an infant. The nanny changing a diaper heard an unfamiliar voice come out of the family baby monitor. “That’s a really poopy diaper,”, apparently watching Ashley Stanley, the nanny, and little Samantha.
The scene quickly shifts to Washington, DC where special agent Avery Ryan played by Patricia Arquette is surfing the web and receives an instant message about the Baltimore kidnapping. She meets with her boss Simon Sifter played by Peter MacNicol asking that the case be assigned to her group; Sifter states that the case has already been assigned to major crimes. Avery responds by saying:
Ryan: “Any crime involving electronic devices is by definition, cyber”
At this point Sifter gives in and states he would transfer the case to the cyber team.
In the next scene Agent Elijah Mundo played by James Van Der Beek is introduced while playing a first person shooter video game called “Assassins” which he cleverly use later in the show to make a vital connection with a teenage boy to obtain critical information about the kidnapping. While playing the game Mundo receives a call from Ryan.
Ryan: ”Wake up solider boy, duty calls.”
This also provides some background into Agent Mundo’s character assuming that he is former military personnel. The next scene provides additional information pertaining to Agent Mundo’s character traits as he provides Ryan with updates about to the case as they are walking to join the rest of the team in the Cyber Threat Operation Center (CTOC).
Mundo: “I put Caleb Reynolds’ photo out on the wire, notified TSA, contacted Baltimore PD, it took me a bit, finally got detective Cho on the wire. CSI has already process the parameter, he’s going to hold the rest of the crime scene for us…. So he says. State police highway patrol already mobilized check points already and amber alerts have been issued as well.”
The CTOC is the nerve center equipped with a lot of hi-tech devices; this is where the rest of the team is introduced (Daniel Krumitz played by Charley Koontz and Raven Ramirez played by Hayley Kiyoko) including Brody Nelson a black hat hacker that is working with the team played by Shad Moss aka Bow Wow.
Det. Cho of the Baltimore PD updates the team, when Ryan asked about the status of the baby-cam, Det. Cho stated, “it was unplugged and secured”. Here is where we get a taste of Krumitz personality as he stated
Krumitz: “Unplugged? That’s the quickest way to lost all the data.”
After hearing about the baby-cam being unplugged Ryan states:
Ryan: ”Please treat all hardware including the baby-cam like a dead body. Don’t touch it, don’t move it until we get there.”
Then the team heads to Baltimore
Once in Baltimore Ryan ask Krumitz to team up with Nelson
Krumitz: “What…? You’re sticking me with newbie Nelson?” The guy I busted?
Nelson: “Hey Chubby, keep my name out of your mouth, I’m not your braces”
Ryan: “Enough… Nelson, zip it! Krumitz, game face!”
This scene explained many things about the show and the team dynamics
How Nelson ended up working on to the team
Ryan’s role as she will try to keep things on track
Nelson’s wittiness
Krumitz being referred to as the best white hat hacker in the world
And that Nelson would be doing jail time if Ryan didn’t ask the judge to have him work with her.
Ryan: “One mistake federal pen five years…”
In the house Krumitz and Nelson have a small exchange
Nelson: Hey man what’s you problem?
Krumitz: You are my problem man. It is bad enough that Avery heads up the “It takes a hacker to catch a hacker program.” I only support it because she is my boss and I love my job, doesn’t mean I believe in it.
Nelson: Okay, look I don’t want to get in any more trouble than I already am because of you.
Krumitz: Then learn the job, ask questions, listen to intelligent answers.
From here the show takes us through numerous events such as the kidnappers being tracked down, they did not find baby Caleb, but they did find a lot of money in the trunk of the car they were driving. Before the team could interrogate the kidnappers, they were shot by a sniper, which Agent Mundo eventual killed. They were lucky enough to find evidence that led to additional information on locating the whereabouts of baby Caleb.
The show took us thought provoking interviews, holographic autopsy and a few additional shootouts. Every member of the team was able to solve various pieces of the puzzle to help advance the case until they were able to solve the crime at the end and rescue baby Caleb from a submerged car in the lake.
At the end, Nelson asked Ryan why is she helping him. Ryan responded by stating she wanted to help hackers become better people as she had been hacked before when she was a behavioral psychologist. The hacker released all her patient’s files which led to one of them getting killed. Ryan then revealed that after every case she goes to a place where thinks about how she will catch that hacker that stole her files. That place ended up being the Lincoln Memorial and that is how the show ended.
Overall, I think the first episode did a great job in introducing the various characters. I look forward to additional character development and learning more about how each member got to where they are and what they do on their spare time. I do have a bit of a problem with Patricia Arquette’s role; she seems very emotionless and bland. I am hoping that will change over time.
I also think this show can bring many information security, privacy and Internet safety issues we face in real life to the forefront and assist with overall user awareness.
We give this week’s episode a 3 1/2 Orb out of 5.
CSI: Cyber comes every Wednesday night at 10:00 p.m. eastern time on CBS. Follow @SecurityOrb on twitter for live tweets during the show.
Did you see CSI: Cyber, what did you think about it? Please share with us, leave a comment.
I am a father of two teenage boys. I love my boys. They are one of the main reasons for me to advance making sure they have a safe and secure home. They are also Xbox-heads.
They love that console. I have come to see it as not just a gaming console but as an extension of their social lives. They not only play games with their friends and others but they use it as a communication hub to connect with their friends from school even though they are not engaged in a game. I have watched as one of my sons watched a video on YouTube on his phone while talking with one of his friends about the video over Xbox Live. No game being played just talking.
Now walking away from his room started me thinking about what is going thru that console. My wife and I have learned to give them the throwaway credit stores you buy at the grocery store rather than use our cards. Thanks you Sony. Still the amount of information that is collected such as birthdates and full names for some games is disturbing.
I know that those collecting the information have privacy policies that are supposed to put us at ease. We know that protecting our information overrides any financial incentives that they may have. Plus if there is a breach and the data gets out they will give us free support for a whole year.
Still we are talking about humans under the age of 18 providing information that could hurt them in the future. In addition I feel that our younger children are being targeted to provide detailed information or at the very least being trained to provide the information.
Why do I believe this? Well one recent example is the new Barbie doll that is coming to stores or that may already be on the shelves. It is the ‘Internet Connected Barbie’. It has voice recognition and you or your child can have conversations with it.
I am not going to go into the types of hacks that could be done on this toy. Not even the possibility to turn it into a spy device for the paranoid divorced parent that wants to spy on the estranged spouse. Let’s just not go down that road.
I just have to assume that this doll if using voice recognition is tied into some server in a cloud farm. I think that they are storing some of this information.
You might say that want can a pre-teen or younger say to a doll that would have any consequences. I don’t know what they could say. I do know that children have been known to repeat things that they hear at the most inopportune ties. Remember I have two boys and they had an uncanny ability to embarrass my wife and I. We had to watch what we said even if we did not think they could hear.
Now take a small child with an Internet connected toy with voice recognition and you have potential for leakage of information. If I was to be paranoid how long before this Internet connected doll gains the Xbox Kinetic-like ability to do visual recognition of the people and objects in the room.
Will law enforcement now send subpoenas for the audio and video recordings from Barbie? Will Mattel be subjected to National Security Letters?
Thoughts?
00Kellep CharlesKellep Charles2015-03-04 16:16:212015-03-04 16:16:21The Internet of Toys and Games by @mhbjr for My Security Thoughts
CSI: Cyber is the latest CSI spin-off that will premiere today Wednesday, March 4 at 10/9c. The show follows FBI Special Agent Avery Ryan (Patricia Arquette) and her team of investigators, who solve crimes for the Cyber Crime Division in Quantico, Virginia. In addition to Arquette, she is accompanied by James Van Der Beek, Peter MacNicol and Shad Moss aka Bow Wow to name a few of the cast members.
The pilot for CSI: Cyber was first aired on April, 30 2014 in a CSI: Crime Scene Investigation episode titled “Kitty” where they investigated a cyber-related murder of a prominent casino owner’s wife and received help from the FBI’s Cyber Crime Division with Patricia Arquette as a guest star.
Tonight’s first episode of CSI:Cyber is titled “Kidnapping 2.0”, where the FBI's Cyber Crime Division investigate illegal activities on the Internet. In the opener, the team investigate a case of hacked baby monitors.
Full recap will be available at securityorb.com/ after the show…
CSI:Cyber Full Cast
STARRING:
Patricia Arquette (Special Agent Avery Ryan)
James Van Der Beek (Agent Elijah Mundo)
Peter MacNicol (Simon Sifter)
Charley Koontz (Daniel Krumitz)
Shad Moss (Brody Nelson)
Hayley Kiyoko (Raven Ramirez)
00Kellep CharlesKellep Charles2015-03-04 15:01:192015-03-04 15:01:19CSI: Cyber – A New TV Series about CyberSecurity