Your users are picking up spare cables in conference rooms, or buying generic cables on Amazon. Think about that for a moment—now panic.
Richi Jennings
Aug 15, 2019
O.MG USB cable will pwn your Mac or PC, PDQ
Security Blogwatch
Insider threats come in many forms. How bribable are your employees?
Richi Jennings
Aug 8, 2019
AT&T employees took $1M in bribes from phone-unlock gang
Security Blogwatch
Security Blogwatch wallet image
Never mind your wallet—what’s in your WAF ruleset?
Richi Jennings
Aug 1, 2019
Capital One ‘deeply sorry’ to leak 106M personal records
Security Blogwatch
The moral of the story: Try to avoid being inept and negligent, OK?
Richi Jennings
Jul 25, 2019
Fury as Equifax gets $4.76-per-victim slap on wrist
Security Blogwatch
The moral of the story: Audit and red-team your partners too—not just your own architecture.
Richi Jennings
Jul 18, 2019
Android value-chain FAIL: Samsung leaks Sprint customer data
Security Blogwatch
The moral of the story? Red-team your apps—before someone else does.
Richi Jennings
Jul 11, 2019
7-Eleven's 7pay app hacked in a day due to 'appalling security lapse'
Security Blogwatch
Even if you have the basics of policy, are you sure the actual implementation is on track?
Richi Jennings
Jun 27, 2019
12 lessons from NASA hacks: What SecOps can learn from JPL
Security Blogwatch
Locked iphone
Nothing is secure from physical access: Where there’s a will, there’s an exploit
Richi Jennings
Jun 20, 2019
Your iPhone is not secure: Cellebrite UFED Premium is here
Security Blogwatch
If it's in RAM, it's vulnerable—virtualization won't save you. Got enclave?
Richi Jennings
Jun 13, 2019
Son of Rowhammer: None of us are safe from RAMBleed
Security Blogwatch
App devs: Don't be tempted to follow suit, and make sure third-parties are not using these sort of obnoxious practices. IT: Got MDM yet?
Richi Jennings
Jun 6, 2019
238 Android apps infested with BeiTaPlugin adware: MDM anyone?
Security Blogwatch
European regulators are only warming up. Year Two of GDPR promises to be "interesting."
Richi Jennings
May 30, 2019
Happy birthday, GDPR. You're awful; you're great
Security Blogwatch
Time to get serious about security-focused code reviews. And mandate 2FA.
Richi Jennings
May 23, 2019
Google admits to storing plaintext passwords
Security Blogwatch
Layered security only works if the layers are, y'know, secure.
Richi Jennings
May 16, 2019
Cisco clueless about security, apparently: Meet Thrangrycat
Security Blogwatch
Hobbs, Kerckhoffs and Shannon were right: Security by obscurity is no security at all.
Richi Jennings
May 9, 2019
China eats NSA's lunch, uses its zero-days for a year
Security Blogwatch
Shadow IT could be a far bigger problem than you first thought.
Richi Jennings
May 2, 2019
Microsoft cloud leaks big—65% of US households at risk
Security Blogwatch
When collecting and storing private data, be clear why. And guard against mission creep, lest you lose your users' trust.
Richi Jennings
Apr 25, 2019
EU merges giant biometrics database. What could possibly go wrong?
Security Blogwatch
The moral of the story: Actually, “Never lie to a reporter. They’ll know,” pretty much covers it.
Richi Jennings
Apr 18, 2019
Wipro customers hacked, says Krebs. Nothing to see here, says Wipro.
Security Blogwatch
The morale of the story: User-controlled endpoints are not secure! Design for an adversarial world; pen-test and and red-team the result.
Richi Jennings
Apr 11, 2019
Fintech fiddles as home burns: 97% of apps lack basic security
Security Blogwatch
No platform promises perfect protection. Security is an end-user responsibility too.
Richi Jennings
Apr 4, 2019
Exodus spyware exposes 'sorry' state of Android security
Security Blogwatch
Does your software have an auto-update mechanism? How trustworthy is it? How trustworthy do your users think it is?
Richi Jennings
Mar 28, 2019
ASUS ShadowHammer backdoor: Was China to blame?
Security Blogwatch
And you think you have problems with spaghetti code?
Richi Jennings
Mar 21, 2019
The diagnosis for US electronic health records: Fatally flawed
Security Blogwatch
How far we’ve come in 30 years. The web is a wild place, but beware of unnecessary appeals to authority.
Richi Jennings
Mar 14, 2019
30 years into the web, Sir Tim vents on scams, hacks and hate
Security Blogwatch
Your sense of duty and goodness, like an eternal beacon, helps others find their way through the darkness. Or something.
Richi Jennings
Mar 7, 2019
RSAC 2019: Better, wetter—and weirder
Security Blogwatch
Show More