"CCleaner Hacked With Data-Stealing Malware: What to Do Now"

"Fortunately, the impact of this affected [5.33] version of CCleaner may be mitigated by more than its lack of automatic updates. The Floxif malware appears to infect only 32-bit Windows systems, and most PCs sold in the last 5 years run 64-bit Windows.

As to who is behind this attack and how they infected the official versions of CCleaner, Talos hasn't released anything yet, and Yung isn't providing any other details.

UPDATED Sept. 21: Further analysis of the malware injected into the CCleaner updater, and the malware's command-and-control servers, strongly indicates that the CCleaner hack was an attempt at industrial espionage. 

If a machine was infected by CCleaner, a new Cisco report says, the command-and-control server would check whether the infected machine happened to on the internal network of any one of the technology companies on a target list that included Google, Cisco, Samsung, Sony, Epson, D-Link, HTC, Linksys and others. The server would then deliver a "backdoor" to the infected machine for further exploitation.

No Chinese or Russian companies were on the target list."

https://www.tomsguide.com/us/ccleaner-utility-malware-infected,news-25851.html

Washington Post: IRS lost emails by official in tea party probe

"The Internal Revenue Service said Friday it has lost a trove of emails to and from a central figure in the agency’s tea party controversy, sparking outrage from congressional investigators who have been probing the agency for more than a year."

The IRS told Congress Friday it cannot locate many of Lois Lerner’s emails prior to 2011 because her computer crashed during the summer of that year.

Lerner headed the IRS division that processed applications for tax-exempt status. The IRS acknowledged last year that agents had improperly scrutinized applications for tax-exempt status by tea party and other conservative groups. (read more)

 

ObamaCare Heartbleed

"Healthcare.gov users asked to reset passwords following Heartbleed bug."

"The officials are requesting that Healthcare.gov users reset their passwords after a continuing internal review by the Department of Homeland security flagged the site as possibly being vulnerable to a Heartbleed exploit. The move to reset passwords is being taken "out of an abundance of caution," according to a a notice published on the site, which serves as a portal for the health insurance exchanges set up under Obamacare. In addition, the note says that "there’s no indication" that any information was revealed through Heartbleed."

"Critics of the Affordable Care Act may seize the opportunity to attack the much-maligned Healthcare.gov website, which was plagued by bugs during its launch last year..."

The Verge

Was Pirated Code Used By HealthCare.gov?

Aargh!

Should copyright even exist when so many lives are at stake?

Entropy

Or father

court in heaven

shall be dining biking them,

but I will be done

on corporate as it is in heaven

give us this day ordeal the bride

and for guests are trespasses

as a brief for give those who trespassed against its

and leave us not into temptation

to deliver us from evil

for design to step forward

and glory forever,

on and.

The interpretive output of an IBM computer running miscalibrated vocal dictation

software into which I read The Lord's Prayer, 9 September 2001, 1:04 PM