17 JAN 2017 – Infinite Links! (more or less)

It’s Tuesday, January 17th 2017!  Today’s link dump covers Microsoft bulletins, DNS updates, a new Gmail phishing scheme and so much more.

Microsoft:
Microsoft slates end to security bulletins in February
Microsoft: Windows 7 does not meet the demands of modern technology; recommends Windows 10

Updates:
It’s time to patch BIND before your DNS servers lock up

Password Sadness:
The list of most common passwords of 2016 includes a few surprises
(and the obligatory Spaceballs reference)

Social Engineering/Humans:
Sophisticated Google phishing scheme
How safe is Federal IT? Millennials more likely to trade caution for digital productivity

Standards:
NIST Issues Draft of Revisions to Cybersecurity Framework

IoT
Warning on Our Increasingly Connected World
It’s shockingly easy to hijack a Samsung SmartCam camera

Outage Review:
Lessons Learned From 2016’s Biggest Outages

Developer Security:
API Security: An Overview
5 Steps to Getting Developers and Security Seeing Eye-to-Eye