Plaintext: What Are Kids Up To?

Welcome to Dark Reading?in?Plaintext. In this issue, we look at stories we've previously published about kids and information security. Kids are curious. What happens when you let the kids indulge in things they are curious about and explore their interests? Sometimes, the unexpected.

A "Fun" Project

An Italian kid recently uploaded multiple Python packages containing ransomware scripts to the Python Package Index (PyPI) as part of an experiment. The packages had names that were similar to a widely used HTTP Python library. Anyone who downloaded and ran the packages wound up with their files encrypted. Instructions directed them to contact the author of the package on Discord for the decryption key. No ransom payment was necessary for a decryption key, according to Sonatype, who came across the packages.

"First, be cautious when typing out the names of popular libraries, as typosquatting is one of the most common attack methods for malware," -- Ankita Lamba, Sonatype

Developers should always be cautious about what they’re downloading and what packages they’re incorporating into their software builds. "Open source is both critical fuel for digital innovation and a ripe target for software supply chain attacks," Lamba says. [Read more School Kid Uploads Ransomware Scripts to PyPI Repository as 'Fun' Research Project]

Kids have more opportunities to explore cybersecurity. Take, for example, the Girls Scouts. The organization has been encouraging girls between the grades 6 to 12 to explore cybersecurity topics such as cryptography, forensics, social engineering, and ethics. [Read more Can the Girl Scouts Save the Moon from Cyberattack]

Or the fact that DEF CON has opportunities for kids. DEF CON Voting Village and AI Village teamed up with r00tz Asylum back in 2019 to let kids explore simulated campaign financial disclosure portals and disinformation campaigns. [Read more DEF CON Invites Kids to Crack Campaign Finance Portals]

The Kids Are All Right. Just for fun: Faculty and students at the William E. Doar School for the Performing Arts in Washington, D.C. created "Cyberspace," a rap song about online safety back in 2012.

Headlines on Tap?

• A dangerous VMware authentication-bypass bug could give threat actors administrative access over virtual machines.
• The CVE-2022-27535 local privilege-escalation security vulnerability in the security software threatens remote and work-from-home users.
• Ping Identity to Go Private After $2.8B Acquisition

Enjoy reading Dark Reading? Subscribe to receive?Dark Reading Daily?every morning!

On That Note

Between BSides Las Vegas, Black Hat, Diana Initiative, and DEF CON, there's a lot happening next week. Tune into our next LinkedIn Live event of Seen and Heard as we discuss what we expect to see next week. Join us Monday 8/8 and let us know what we should talk about and what we shouldn't miss!?

Source: Toni Cuenca via Unsplash.