Tag Archive for: Posts

Port Chester School Board Removes President Corbia for Racist Facebook Posts and for Lying About Being Hacked


Former Port Chester School Board President Tom Corbia

Will He Now Be Removed from County Job?

By Dan Murphy

The Port Chester School Board, after months of pressure from the community at large, voted 3-1 at a special meeting on April 14 to remove President Tom Corbia from his position of leadership and power. Corbia, who has served for 10 years on the PC School Board, had defied the Superintendent, Mayor of Port Chester, and other officials and leaders in Village by not explaining racist, bigoted and insensitive Facebook posts attributed to his account, nor complying with his own vow to prove that his social media account had been hacked.

The post in question, on September 16, 2020, appeared on Facebook. “I’m selling my white privilege card. It’s just over 77 years old and it hasn’t done a damn thing for me. No inheritance, no free college, no free food, no free housing, etc. I may even be willing to do an even trade for a race card. Those seem way more useful and more widely accepted. Interested? Contact me on my non-obama (sic) cell phone that I have to pay for every month. Serious inquiries only.”

Underneath this post came a response from the Facebook account of Tom Corbia which read, “You are the f******* best and whoever doesn’t like that post, well they know what they can do.”

The special meeting to remove Corbia took less than 10 minutes, with BOE Trustees Chrissie Onofrio, Luigi Russo and Christopher Wolff voted yes to remove, while BOE Vice President  Anne Capeci voted no.

Capeci briefly commented, explaining her vote by saying, “I don’t disagree with everything in the findings, but it certainly doesn’t warrant removal from this board. When you compare Mr. Corbia’s past record in the district as a teacher, as coach, as a community activist and member working with children,  I cannot vote for this resolution”

There was no other comment by Board members regarding Corbia’s removal, only a statement from the Board attorneys.  “This was a difficult process for the Board of Education and the Port Chester community. The board appreciates your patience. We understand that not everyone in the community will…

Source…

Ransomware group posts stolen North Carolina county health data online 


Ransomware group DoppelPaymer has published online two batches of protected health and personally identifiable information belonging to residents of Chatham County, N.C., according to a Feb. 9 Chatham News + Record report. 

DoppelPaymer stole the sensitive data files during an Oct. 28 cyberattack on the county’s government systems. The hackers posted at least two batches of Chatham County’s data on both the dark web and light web, which makes the information accessible via key search criteria, according to the report. 

The first data upload was made Nov. 4 and contained “mostly innocuous” files, Chatham County Manager Dan LaMontagne told the publication. A second data upload in late January, however, contained more sensitive data, which has been viewed more than 30,000 times, according to the ransomware site. 

The county plans to release a summary report of the incident at its board of commissioners meeting next week as well as to the public and is working to address the issue of the public posting of the files. 

“Chatham County staff has been engaged with staff from the N.C. Department of Health & Human Services and the N.C. Attorney General’s Office to ensure we meet the reporting requirements as it relates to protected health information and/or personally identifiable information data,” Mr. LaMontagne said. “We will continue to engage in these conversations with our cyber insurance attorney(s), DHHS, and the AG to ensure we respond in the most appropriate manner possible as it relates to the data accessed from our network during the event.”  

Data files exposed by the incident include medical evaluations of children from neglect cases, personnel records of some employees and documents related to ongoing investigations with the Chatham County Sheriff’s office. 

More articles on cybersecurity: 
Hacker tries to poison Florida city’s water system: 5 details 
Hackers hit Nebraska Medical Center, U of Nebraska with malware, steal patient and employee records
Security breach may have exposed 36,000 UPMC patients’ info


© Copyright ASC COMMUNICATIONS 2021. Interested in LINKING to or…

Source…

Hacker posts exploits for over 49,000 vulnerable Fortinet VPNs


A hacker has posted a list of one-line exploits to steal VPN credentials from almost 50,000 Fortinet VPN devices.

Present on the list of vulnerable targets are domains belonging to high street banks and government organizations from around the world.

Researchers find thousands of targets

The vulnerability being referred to here is CVE-2018-13379, a path traversal flaw impacting a large number of unpatched Fortinet FortiOS SSL VPN devices.

By exploiting this vulnerability, unauthenticated remote attackers can access system files via specially crafted HTTP requests.

The exploit posted by the hacker lets attackers access the sslvpn_websession files from Fortinet VPNs to steal login credentials. These stolen credentials could then be used to compromise a network and deploy ransomware.

Although the 2018 bug was publicly disclosed over a year ago, researchers have spotted around 50,000 targets that can still be targeted by attackers.

This week, threat intelligence analyst Bank_Security found a hacker forum thread where a threat actor shared a large 49,577 device list of such exploitable targets

Bank_Security spots domains
Researcher comes across a thread with vulnerable hosts
Source: Twitter

After analyzing the list, it was found that the vulnerable targets included government domains from around the world, and those belonging to well-known banks and finance companies.

Banks, finance, and govt organizations vulnerable

As observed by BleepingComputer, out of the 50,000 domains, over four dozen belonged to reputable banking, finance, and governmental organizations.

Gov domains and leading bank websites remain vulnerable to CVE-2018-13379
Govt domains and leading bank websites remain vulnerable to CVE-2018-13379
Source: BleepingComputer​​​​

Bank Security told BleepingComputer after he saw the forum post, he started analyzing the list of IPs to identify what all organizations were impacted.

“To better find out which companies were impacted, I launched an nslookup on all the IPs on the list and for many of them, I found the associated domain.”

The analyst then refined the obtained results to identify domain names associated with organizations of interest and notable banks.

The analyst further told BleepingComputer, although this is an old bug that is trivial…

Source…

Nick Sandmann’s Wacky QAnon Supporting Lawyer Threatens Reporters For ‘Speculating’ On Washington Post’s Settlement With Sandmann

On Friday, we wrote about the bad reporting concerning Nick Sandmann’s settlement with the Washington Post, that nearly every knowledgeable lawyer figures was likely for “nuisance value” to get rid of the lawsuit. We noted that the NY Post’s coverage of it misleadingly suggested that the kid got many millions of dollars, when there’s no evidence to support that conclusion, and plenty to suggest he got very little. If you want a thorough debunking of “the kid got paid” narrative, this thread by @RespectableLawyer lays out the details. As we had noted in our post, the court had already rejected nearly all of the claims in the case, and only allowed it to be reinstated to allow for very narrow discovery on very narrow issues which Sandmann almost certainly would not have won on. There was basically no chance Sandmann would win the case. So, a nuisance fee settlement makes it worthwhile to everyone. The paper gets out of the case for less than the cost of going through discovery and the whole summary judgment process, and Sandmann gets to say he got paid, without ever saying how little.

However, on Monday, Sandmann’s lawyer, L. Lin Wood (who you may recall from his ability to lose one of the rare defamation cases that I thought actually had a chance to succeed, against Elon Musk) completely lost his shit on Twitter because enough people were calling out the fact that Sandmann most likely got peanuts, which destroyed the narrative Wood has been trying to sell. Wood, who apparently is now a supporter of the QAnon conspiracy theory based on his willingness to include the #WWG1WGA tag in his Twitter profile (if you’re not familiar, it stands for the silly QAnon phrase: “where we go one, we go all”), has apparently decided that merely speculating on the settlement amounts violates agreements people were not a party to.

Either way, Wood started threatening people and CNN. In separate tweets he accused both Brian Stelter (an on-air CNN personality) and Asha Rangappa (a lawyer and law professor who sometimes appears on CNN) for “speculating” on the settlement between Sandmann and the Washington Post. He even said that if Stelter isn’t fired, he’ll sue CNN.



Wood is arguing that CNN on air talent is violating a confidentiality agreement that was part of the settlement in a different case (CNN settled a similar case with Sandmann, likely on similar terms, back in January, at which point we wrote about similarly misleading reporting regarding the settlement). With Stelter, he’s arguing that merely retweeting a lawyer suggesting that the most likely outcome of the Washington Post case was a nuisance fee settlement is a violation of that confidentiality agreement. With Rangappa, it’s her own speculation.

First off, neither Stelter nor Rangappa are even remotely connected to the Washington Post settlement, so they’re not parties to the case and clearly are not restricted by any confidentiality agreement and are free to speculate (or in Stelter’s case, to retweet someone else’s speculation) of the Washington Post settlement. The only way there might be a tiny (extremely weak) argument is if they were employed by the Washington Post. But even then they would have no actual insight into the actual settlement terms or amounts, and speculating is not violating a confidentiality settlement when they have no awareness of the terms. But to say that CNN employees are somehow violating the confidentiality agreement in a separate case for speculating on a different case is… just wacky nonsense.

Of course, many lawyers who understand this stuff pointed out that Wood freaking out that it violates confidentiality agreements to say that he settled the Sandmann cases for nuisance value… certainly seems to suggest that Wood is effectively confirming that it’s true. Of course, after a bunch of people started to say that, he started insisting that his problem is with “false speculation” violating confidentiality agreements, but that makes no sense. That’s like when the White House tries to argue that a leak of classified information is false. If it’s false, it’s not classified info. Claiming it’s a leak confirms it’s accurate.

Here, if anyone is violating a confidentiality agreement (which, again, they are not) it would be in revealing information to that is covered by the agreement. Speculating — and even more bizarrely — speculating falsely, is unlikely to be much of a violation. At best, Wood might be able to argue that there’s some sort of total gag order that came with the settlements saying that CNN/WaPo and staff won’t ever discuss anything having to do with Nick Sandmann and his sketchy lawsuits. I’d be surprised if either company agreed to such things, but it’s not crazy, and the insurance companies backing CNN might have even been willing to agree to such nonsense terms.

But that’s still not going to do very much here. There’s no way on-air talent was privy to any of the details, and it’s hard to see how a gag order would extend to them.

Also, it kind of makes you wonder why Wood would be so insistent on this here. If he really pressured CNN into agreeing to such a total gag order, why would he do that unless it’s to hide a terribly tiny settlement for his client? If he actually won big money for Sandmann, he’d be excited about it, not negotiating for CNN to keep the details quiet. And why would he be so angry about anyone talking about the details of the settlement unless he didn’t want people speculating on how little he was actually able to secure?

The whole Twitter freak out did his own client a huge disservice, and filing any followup lawsuits will likely only serve to harm his client even more.

Techdirt.