Search results for #SBBlogwatch
Are you a #FANFSA fan? The #WhiteHouse isn’t. It says the bill “threatens national security.” It’s a privacy win, some say, but the #Biden administration is set against the bill. In #SBBlogwatch, we’re of two minds. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/fourth…
Not OK: #SMS #2FA — Widespread spam targets carrier employees, as scrotes try harder to evade 2FA. Here’s the soft underbelly of the insider threat model. In #SBBlogwatch, we balk at the three-Benjamin bribes. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/sim-sw…
A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure #AWS bucket. Sources say #Sisense stopped storing secrets securely. In #SBBlogwatch, we facepalm hard. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/sisens… #CISA
4×CVE=RCE or Merely CE? Update your LG TV now, or let hackers root it. But is #Bitdefender overhyping the issue? Is it really possible to hack #LG TVs remotely? In #SBBlogwatch, we update anyway. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/lg-sma…
Enter the lobbyists: A draft federal #privacy act has DC buzzing. But it’s just a bill—and it’s a long, long journey to be a law. Let’s face it, we’ve been here before. In #SBBlogwatch, we hope against hope. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/apra-u… #APRA
Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulns. We’ve known about the problems since the mid-1990s. In #SBBlogwatch, we ask, “Why now?” At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/fcc-ss…
#Storm0558 forecast: Last year’s hack of federal agencies’ email “should never have occurred.” Microsoft’s email system was hacked, but Redmond still doesn’t know how. In #SBBlogwatch, we aggregate fruity reactions. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/csrb-m…
Short term gain for long term pain? Class action asked for $5,000 per user, but got nothing—except assurances #Google will delete data it no longer needs. In #SBBlogwatch, we wonder if Google’s opened the floodgates. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/04/chrome…
Emergency stop button: #Python Package Index was drowning in malicious code again, so they had to shut down registration. Yes, it’s happened yet again. In #SBBlogwatch, we ask if it’s time for a #CodeReuse rethink. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/pypi-s…
Rethink different: First, fatigue frightened users with multiple modal nighttime notif’s. Next, call and pretend to be #Apple support. The idea is to wear down your defenses. In #SBBlogwatch, forewarned is forearmed. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/mfa-bo…
#Meta #MITM #IAAP #SSLbump: Zuck ordered “Project #Ghostbusters”—with criminal consequences, says class action lawsuit. NOW will you stop using that “free” #VPN? In #SBBlogwatch, we are the product. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/ghostb…
Scary #SMS shenanigans: Avoid #Telegram’s new “Peer-To-Peer Login” program if you value your privacy or your cellular service. And you can help people in those places! In #SBBlogwatch, we think we might not want to. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/telegr…
#UNC5174 ❤ #UNC302: CVSS 10 and 9.8 vulnerabilities exploited by Chinese threat actor for People’s Republic. And now the Brits are ratcheting up #sanctions. In #SBBlogwatch, we duck and cover. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/china-…
GoFAIL: Researchers worm their way into broken #cache-filling microcode in most Macs and iPads. It’s yet another #prediction faux pas. In #SBBlogwatch, we cache in on the #GoFetch story. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/apple-…
#Iran and #China fingered: #Biden admin. chides governors: #Water infra. lacks “even basic #cybersecurity precautions.” “We appreciate your attention to this important issue.” In #SBBlogwatch, we avoid the K-word. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/water-…
7521 momentum builds: Shou Zi Chew plays for time, while #EFF says #TikTok-kill bill is DOA. EFF: Useful idiots? Or concerned guardians of freedom? In #SBBlogwatch, we see the irony. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/tiktok…
La grande #cybermalveillance: #French government’s employment agency loses control of citizens’ data after biggest breach in Gallic history. In #SBBlogwatch, we are vain and we are blind. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/france… #FranceTravail
Wanna be a #VRP VIP? Last year, $GOOG paid $10 million to #EthicalHackers for finding #vulnerabilities. But was it worth it? In #SBBlogwatch, we visualize 100,000 Benjamins. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/google…
Free rides and traffic jams: #Cybersecurity Agency penetrated in February, via vuln in #Ivanti. Agency director Jen Easterly (pictured) is a bit red faced. In #SBBlogwatch, we shelter from the rain on your wedding day. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/cisa-i…
Hilltop BillTok: #ByteDance mobilizing addicted user base, as U.S. #TikTok ban steamrolls through Capitol Hill after unanimous committee vote. Is ByteDance playing dirty? In #SBBlogwatch, we cheer on democracy. At @TechstrongGroup’s @securityblvd: securityboulevard.com/2024/03/tiktok…