Week 08: Malware

Let’s continue to discuss malware during CyberSecurity Awareness Month, and we’ll refer to the video series we looked at previously at https://staysafeonline.org/resource/security-awareness-episodes/ , specifically the following Episode 5: Removable Media, if you’ve not watched it already.

Research, and describe, a news articles describing a publicly-disclosed breach that can be tied to the use of removable media as the entry.

Also, for “bonus points”, what other security errors do you see in this episode? (https://staysafeonline.org/blog/security-best-practices-for-removable-media-and-devices/)

 

During this week we discussed the risks of malware that obtains the ability to operate within the kernel, and a Linux vulnerability  reported regarding SUDO when the SUDOers file is set up to allow all users except root to run certain programs as “SuperUserDO”, e.g. vi, the text editor.

https://thehackernews.com/2019/10/linux-sudo-run-as-root-flaw.html

With this week’s topic about malware, what does this vulnerability mean in regards to the likelihood and/or impact of the damage posted by malware?