Don’t get complacent: These mitigating kernel patches and microcode won't save you.
Richi Jennings
Feb 21, 2019
Google: 'Spectre can't be fixed.' Panic now?
Security Blogwatch
Don’t buy in to the myth that containers give you isolation. Check your privilege.
Richi Jennings
Feb 14, 2019
Hackers love Docker: Container catastrophe in 3, 2, 1...
Security Blogwatch
When you make a mistake, either apologize or not. Don’t sit on the fence. And don’t be so selective with your bug bounties.
Richi Jennings
Feb 7, 2019
FaceTime FauxPas: Sorry-not-sorry about the bug bounty boo-boo
Security Blogwatch
The moral of the story: Ensure you act on security reports from civilians. How hard can it be?
Richi Jennings
Jan 31, 2019
Apple FacePalm: This story gets worse
Security Blogwatch
Takeaways: Audit your open ports—including RDP. And make sure your backups are secure (not to mention recoverable).
Richi Jennings
Jan 24, 2019
Phobos ransomware spreads fear due to your terrible infosec
Security Blogwatch
Could your data center be described as "aging" and "sprawling"? And if you use a hosting company, enable 2FA and don't stay logged in.
Richi Jennings
Jan 17, 2019
7 million domains vulnerable to 'easy' takeover
Security Blogwatch
This is horrific on so many levels. Privacy violation on this scale wouldn’t be remotely acceptable in any other civilized society.
Richi Jennings
Jan 10, 2019
Little brother is watching: Your real-time location for sale
Security Blogwatch
In this week’s Security Blogwatch, we look back on each month of 2018's foolishness. Keep reading in 2019 for more get-to-the-point news and comment.
Richi Jennings
Jan 3, 2019
Infosec in 2018: A year of fail
Security Blogwatch
Beware: Playing fast and loose with your users’ privacy will catch up with you, sooner or later.
Richi Jennings
Dec 20, 2018
Yet another privacy fail boosts #DeleteFacebook momentum
Security Blogwatch
Deadend sign
The moral of the story: Find your own vulnerabilities before someone else does.
Richi Jennings
Dec 13, 2018
Google panics as huge new bug found in Google+
Security Blogwatch
Always be ready to patch—at a moment’s notice. And make sure that your infrastructure is still using supported versions of Kubernetes.
Richi Jennings
Dec 6, 2018
Kubernetes user? Drop everything and patch NOW
Security Blogwatch
Make sure you’re not still giving old-skool advice, like “look for the lock.”
Richi Jennings
Nov 29, 2018
Phraudsters put the lock on phishing. Is it Google's fault?
Security Blogwatch
It’s child’s play to find “hidden” public buckets. So use the tools to secure them already.
Richi Jennings
Nov 21, 2018
AWS finally adds default privacy setting to S3 buckets
Security Blogwatch
If a Nigerian prince announced a bogus route for your network, how soon would you find out?
Richi Jennings
Nov 15, 2018
Google traffic redirected to China (via Nigeria) 'in error'
Security Blogwatch
Lesson learned: Consider forbidding browser extensions on enterprise desktops, except for whitelisted code.
Richi Jennings
Nov 8, 2018
Data from 120M hacked Facebook accounts for sale in Russia
Security Blogwatch
And you think your threat model shows there's a lot at stake?
Richi Jennings
Nov 1, 2018
Your brain: The next hacking frontier
Security Blogwatch
There's clearly something going on, but what that is remains unclear.
Richi Jennings
Oct 25, 2018
Bloomberg spy chip: The story that will not die
Security Blogwatch
The moral of the story? Publish a DMARC record on each of your domains—even the ones that don’t send email.
Richi Jennings
Oct 18, 2018
A quarter of US gov domains FAIL on email security
Security Blogwatch
Quis custodiet ipsos custodes: Third-party audit of security is essential—especially with military tech.
Richi Jennings
Oct 11, 2018
U.S. weapons are full of security vulnerabilities. Time to panic?
Security Blogwatch
The letter of the law is one thing, but keep an eye on how it's being interpreted in the courts.
Richi Jennings
Oct 4, 2018
Secure IoT: Not just a good idea—it's the law (in California)
Security Blogwatch
Lesson: Don't be tempted to hide huge privacy changes behind vapid PR spin.
Richi Jennings
Sep 27, 2018
Users furious as Google secretly forces login in Chrome
Security Blogwatch
Think twice before paying extra for a green bar that no longer appears.
Richi Jennings
Sep 20, 2018
EV certs are dead, opines infamous Aussie infosec MVP
Security Blogwatch
Audit the apps on your BYOD Macs. And never assume a “curated” App Store will protect you from malware.
Richi Jennings
Sep 13, 2018
Trend Micro apps labeled spyware, banned from Mac app store
Security Blogwatch
Show More