How exposed are you to fake firmware? Is your hardware vendor taking this seriously? Are you?
Richi Jennings
Feb 20, 2020
Perilous peripherals: Fake firmware warning after 5 years of inaction
Security Blogwatch
What are your users’ installed apps doing with your company’s data? It’s a Wild West of apps out there, so what’s your MDM strategy?
Richi Jennings
Feb 13, 2020
Revealed: Email apps steal and sell user data. Outrage!
Security Blogwatch
If you’re storing anonymized data, consider red-teaming; it’s probably not as anonymous as you think.
Richi Jennings
Feb 6, 2020
Anonymized data: You’re doing it wrong
Security Blogwatch
You trust your analytics partners, but should you? And why would your customers trust them?
Richi Jennings
Jan 30, 2020
Amazon's Ring: One spyware app to rule them all, says EFF
Security Blogwatch
iCloud backups might be vulnerable to corporate or nation-state espionage. Should you consider alternative arrangements for your users?
Richi Jennings
Jan 23, 2020
FBI calls, Apple obeys demand over iCloud data
Security Blogwatch
Stop using SMS, robocalls, or CallerID for authentication or identification: It’s not secure—and it never has been.
Richi Jennings
Jan 16, 2020
SIM swapping: Still stupidly simple (so shun SMS)
Security Blogwatch
It’s time to consider phasing out Android phones that aren’t getting monthly security updates.
Richi Jennings
Jan 9, 2020
Ancient Android bug returns to bite you in the apps
Security Blogwatch
You’re probably subject to CCPA, so what are you waiting for?
Richi Jennings
Jan 2, 2020
CCPA, California’s GDPR, confuses and confounds
Security Blogwatch
Security in depth is a constant process. You need multiple layers of prevention, protection, alerting and user-education.
Richi Jennings
Dec 19, 2019
Ransomware takes horrific pivot to data leakage
Security Blogwatch
hero
Defense in depth: Protect your session cookies, and do what you can to validate their use.
Richi Jennings
Dec 12, 2019
HackerOne hacked, pays bounty on its own white-hat platform
Security Blogwatch
Rust has great potential for writing secure code—and refactoring old code to be more secure.
Richi Jennings
Dec 5, 2019
Rust steals C's crown with Microsoft secure code project
Security Blogwatch
Tracking prevention might affect your business, or even break your web-based apps. Make your software privacy-first now (or pay later).
Richi Jennings
Nov 27, 2019
Microsoft Edge browser gobbles up Google's privacy-fail cookies
Security Blogwatch
For IT: Use your MDM to find flawed phones in your fleet. For app developers: Trust, but verify.
Richi Jennings
Nov 21, 2019
Android camera app bug could affect 'hundreds of millions of phones'
Security Blogwatch
Be on your guard, especially if your workloads share a physical server with other tenants' code.
Richi Jennings
Nov 14, 2019
ZombieLoad is back: Intel kept new bug secret for 6 months
Security Blogwatch
If you build voice-triggered apps, harden them against “novel” threat vectors such as this. Ask yourself: Is implied proximity enough?
Richi Jennings
Nov 7, 2019
Alexa! Don’t listen to that silent laser
Security Blogwatch
Keep an eye on this story, to see how the courts interpret the CFAA and other laws.
Richi Jennings
Oct 31, 2019
WhatsApp to spyware hawkers NSO: Be afraid—be very afraid
Security Blogwatch Frightfest
Stay vigilant for this type of targeted spyware infecting your kit—no matter what the motivation of the perpetrator.
Richi Jennings
Oct 24, 2019
FTC bans Retina-X from selling creepy stalkerware
Security Blogwatch
Your Apple users in China are either leaking browser history, or are more vulnerable to malicious sites. Choose wisely.
Richi Jennings
Oct 17, 2019
Apple leaks Safari history fingerprints to China
Security Blogwatch
Search for signs of compromise. Then nuke your VPN from orbit (it’s the only way to be sure).
Richi Jennings
Oct 10, 2019
This just got real: US, UK agencies issue joint VPN security alert
Security Blogwatch
Consider protecting your high-value users by upgrading their devices.
Richi Jennings
Oct 3, 2019
Checkm8 iPhone jailbreak: “Sky not falling,” vs. “Pivotal shift”—FIGHT!
Security Blogwatch
Good news for non-EU services—and not just search engines. The ruling makes it clear you only need follow GDPR for users inside the EU/EEA/EFTA.
Richi Jennings
Sep 26, 2019
EU right to be forgotten: France fails, Google gains on privacy pullback
Security Blogwatch
Password managers are desperately imperfect, but they’re the least-worst option. Beware of babies hiding in bathwater.
Richi Jennings
Sep 19, 2019
LastPass reveals last passwords—but dubs it ‘minor bug’
Security Blogwatch
Whether you're in dev or IT, consider reminding your users not to share private data—even "in private."
Richi Jennings
Sep 12, 2019
No, Facebook and Instagram aren't sharing your private images
Security Blogwatch
Show More