Hello, welcome to the Thursday, April 30th, 2020 edition of the Santernet Storm Center's Stormcast.

My name is Johannes Ulrich, and I'm recording from Jacksonville, Florida.

Last week, I already mentioned some of the privacy concerns and how some of these COVID-19 tracing applications are addressing them.

I summarized some of this in a post today with links to all of the different standards,

proposed standards to be used for COVID-19 tracing.

So if you're interested in some of a deep dive on it,

you can refer to the documentation for these individual standards.

Also, Apple today made available a new beta of its iOS operating system. They call it now 13.5,

and this beta does include an early implementation of the COVID-19 tracing API.

Again, the iOS and the Android, they'll only include an API to facilitate the tracing.

The actual application that takes advantage of the API will then be provided by various health authorities around the world.

And Google released a security patch for Google Chrome fixes to use after free vulnerabilities

that, of course, could potentially be used for code execution.

However, the notes that Google has published so far are very sparse, so no real rating of it in the notes, other than that at least the first one of the flaws received a $10,000 buck bounty.

This, of course, now also affects Microsoft Edge, which is based on Chrome. Microsoft released a corresponding

patch earlier today. And Microsoft released updates to several SIS internal tools, in particular

Sysmon. Sysmon is now version 11, and one interesting new feature

they added is something they're calling delete monitoring, a file delete monitoring. Now, what this

does is it not only logs if a file is being deleted, it also may automatically save a copy of that file. The idea behind this is that attackers

often will delete the tools they're using to attack a system after they're done using a particular

tool and using this feature, it may be possible to capture some of these attack tools that the attacker intended to delete.

And yes, you may say that it may be possible to recover deleted files, but, well, there's a may

...