The Dangers of Default Cloud Configurations
January 16 2023Default settings can leave blind spots but avoiding this issue can be done.
Read moreJava, .NET Developers Prone to More Frequent Vulnerabilities
January 16 2023About three-quarters of Java and .NET applications have vulnerabilities from the OWASP Top 10 list, while only 55% of JavaScript codebases have such flaws, according to testing data.
Read moreHacked Cellebrite and MSAB Software Released
January 16 2023Cellebrite is an cyberweapons arms manufacturer that sells smartphone forensic software to governments around the world. MSAB is a Swedish company that does the same thing. Someone has released...
Read moreUpcoming Speaking Engagements
January 15 2023This is a current list of where and when I am scheduled to speak: I’m speaking at Capricon, a four-day science fiction convention in Chicago. My talk is on “The...
Read moreBooklist Review of A Hacker’s Mind
January 15 2023Booklist reviews A Hacker’s Mind:
Author and public-interest security technologist Schneier (Data and Goliath, 2015) defines a “hack” as an activity allowed by a system “that subverts the rules...
Read more
Why Mean Time to Repair Is Not Always A Useful Security Metric
January 14 2023Analyzing and learning from incidents is the ideal path to finding more insightful data and metrics, according to the VOID report.
Read moreFriday Squid Blogging: How to Buy Fresh or Frozen Squid
January 14 2023Good advice on buying squid. I like to buy whole fresh squid and clean it myself. As usual, you can also use this squid post to talk about the security...
Read moreNorton LifeLock Warns on Password Manager Account Compromises
January 14 2023Password manager accounts may have, ironically, been compromised via simple credential stuffing, thanks to password reuse.
Read moreMalware Comes Standard With This Android TV Box on Amazon
January 14 2023The bargain T95 Android TV device was delivered with preinstalled malware, adding to a trend of Droid devices coming out-of-the-box tainted.
Read moreRhadamanthys spreads through Google Ads that redirect to bogus download sites for popular workforce software — as well as through more typical malicious emails.
Read more
Recent Comments