The moral of the story: Actually, “Never lie to a reporter. They’ll know,” pretty much covers it.
Richi Jennings
Apr 18, 2019
Wipro customers hacked, says Krebs. Nothing to see here, says Wipro.
Security Blogwatch
The morale of the story: User-controlled endpoints are not secure! Design for an adversarial world; pen-test and and red-team the result.
Richi Jennings
Apr 11, 2019
Fintech fiddles as home burns: 97% of apps lack basic security
Security Blogwatch
No platform promises perfect protection. Security is an end-user responsibility too.
Richi Jennings
Apr 4, 2019
Exodus spyware exposes 'sorry' state of Android security
Security Blogwatch
Does your software have an auto-update mechanism? How trustworthy is it? How trustworthy do your users think it is?
Richi Jennings
Mar 28, 2019
ASUS ShadowHammer backdoor: Was China to blame?
Security Blogwatch
And you think you have problems with spaghetti code?
Richi Jennings
Mar 21, 2019
The diagnosis for US electronic health records: Fatally flawed
Security Blogwatch
How far we’ve come in 30 years. The web is a wild place, but beware of unnecessary appeals to authority.
Richi Jennings
Mar 14, 2019
30 years into the web, Sir Tim vents on scams, hacks and hate
Security Blogwatch
Your sense of duty and goodness, like an eternal beacon, helps others find their way through the darkness. Or something.
Richi Jennings
Mar 7, 2019
RSAC 2019: Better, wetter—and weirder
Security Blogwatch
If you use bare-metal servers, prove your provider’s proper procedures, previous to provisioning, please.
Richi Jennings
Feb 28, 2019
Public cloud bare-metal: barely secure?
Security Blogwatch
Don’t get complacent: These mitigating kernel patches and microcode won't save you.
Richi Jennings
Feb 21, 2019
Google: 'Spectre can't be fixed.' Panic now?
Security Blogwatch
Don’t buy in to the myth that containers give you isolation. Check your privilege.
Richi Jennings
Feb 14, 2019
Hackers love Docker: Container catastrophe in 3, 2, 1...
Security Blogwatch
When you make a mistake, either apologize or not. Don’t sit on the fence. And don’t be so selective with your bug bounties.
Richi Jennings
Feb 7, 2019
FaceTime FauxPas: Sorry-not-sorry about the bug bounty boo-boo
Security Blogwatch
The moral of the story: Ensure you act on security reports from civilians. How hard can it be?
Richi Jennings
Jan 31, 2019
Apple FacePalm: This story gets worse
Security Blogwatch
Takeaways: Audit your open ports—including RDP. And make sure your backups are secure (not to mention recoverable).
Richi Jennings
Jan 24, 2019
Phobos ransomware spreads fear due to your terrible infosec
Security Blogwatch
Could your data center be described as "aging" and "sprawling"? And if you use a hosting company, enable 2FA and don't stay logged in.
Richi Jennings
Jan 17, 2019
7 million domains vulnerable to 'easy' takeover
Security Blogwatch
This is horrific on so many levels. Privacy violation on this scale wouldn’t be remotely acceptable in any other civilized society.
Richi Jennings
Jan 10, 2019
Little brother is watching: Your real-time location for sale
Security Blogwatch
In this week’s Security Blogwatch, we look back on each month of 2018's foolishness. Keep reading in 2019 for more get-to-the-point news and comment.
Richi Jennings
Jan 3, 2019
Infosec in 2018: A year of fail
Security Blogwatch
Beware: Playing fast and loose with your users’ privacy will catch up with you, sooner or later.
Richi Jennings
Dec 20, 2018
Yet another privacy fail boosts #DeleteFacebook momentum
Security Blogwatch
Deadend sign
The moral of the story: Find your own vulnerabilities before someone else does.
Richi Jennings
Dec 13, 2018
Google panics as huge new bug found in Google+
Security Blogwatch
Always be ready to patch—at a moment’s notice. And make sure that your infrastructure is still using supported versions of Kubernetes.
Richi Jennings
Dec 6, 2018
Kubernetes user? Drop everything and patch NOW
Security Blogwatch
Make sure you’re not still giving old-skool advice, like “look for the lock.”
Richi Jennings
Nov 29, 2018
Phraudsters put the lock on phishing. Is it Google's fault?
Security Blogwatch
It’s child’s play to find “hidden” public buckets. So use the tools to secure them already.
Richi Jennings
Nov 21, 2018
AWS finally adds default privacy setting to S3 buckets
Security Blogwatch
If a Nigerian prince announced a bogus route for your network, how soon would you find out?
Richi Jennings
Nov 15, 2018
Google traffic redirected to China (via Nigeria) 'in error'
Security Blogwatch
Lesson learned: Consider forbidding browser extensions on enterprise desktops, except for whitelisted code.
Richi Jennings
Nov 8, 2018
Data from 120M hacked Facebook accounts for sale in Russia
Security Blogwatch
Show More