Most Read This Week

Meta’s Secret Spyware: ‘Local Mess’ Hack Tracks You Across the Web
Richi Jennings | | android, android spyware, Browser Privacy, cookies, DeleteFacebook, facebook, Facebook Spyware, Incognito, Incognito Mode, Instagram, Meta, Meta Pixel, Meta Platforms, Privacy, SB Blogwatch, social media, social network, social networking, social networking security, Social networks, spyware, tracking, tracking cookies, Tracking Pixel, WebRTC leaks, Yandex
Farcebok: Zuckerberg’s privacy pledge revealed as ineffectual ...
Security Boulevard

Microsoft Opens Windows Update to 3rd-Party Apps
Richi Jennings | | application delivery orchestration, APPX, Background Intelligent Transfer Service (BITS), BITS, Microsoft, Microsoft cybersecurity fixes, Microsoft Store, Microsoft Windows, MSIX App Installer, orchestration, Package Managers, SB Blogwatch, security orchestration, Win32, Windows, Windows Update, Windows Update orchestration platform, Windows updates, WinGet
A breath of fresh air: Security fixes and other updates will be “orchestrated” by Redmond’s own update tool ...
Security Boulevard

RSA and Bitcoin at BIG Risk from Quantum Compute
Richi Jennings | | Craig Gidney, cryptanalytically relevant quantum computer, ECDSA, Elliptic Curve Cryptography, imaginary money, NIST-standardized PQC encryption algorithms, post quantum, post-quantum cryptograph, Post-Quantum Cryptography, Post-quantum cryptography (PQC), Post-Quantum Cryptography (PQC) algorithms, Post-Quantum Cryptography Migration, Post-Quantum Migration, post-quantum security, PQC, PQC adoption, PQC migration, PQC readiness, PQC transition, quantum, rsa, SB Blogwatch
PQC PDQ: Researchers find we’ll need 20 times fewer qubits to break conventional encryption than previously believed ...
Security Boulevard

Signal Gives Microsoft a Clear Signal: Do NOT Recall This
Richi Jennings | | AI, AI (Artificial Intelligence), AI training, Artificial Intelligence, Artificial Intelligence (AI), Artificial Intelligence (AI)/Machine Learning (ML), artificial intellignece, artificialintelligence, breach of privacy, Copilot, cybersecurity risks of generative ai, Data Privacy, Digital Privacy, generative AI, Generative AI risks, Health Insurance Portability and Accountability Act (HIPAA), HIPAA, HIPAA and IT Security, HIPAA Compliance, hipaa laws, HIPPA, Large Language Model, large language models, Large Language Models (LLM), Large language models (LLMs), LLM, LLMs, machine learning, Microsoft, ML, Privacy, Recall, SB Blogwatch, signal, Signal app, Windows
Black screen of DRM: Privacy-first messenger blocks Microsoft Recall ...
Security Boulevard

Warning to US Retail: ‘Scattered Spider’ Targets YOU (with DragonForce Ransomware)
Richi Jennings | | 0ktapus, attacks on online retailers, Co-op, Dembe Zuma, DragonForce, google, Harrods, internet retailers, John Hultquist, Mandiant, Marks & Spencer, Muddled Libra, online retailer, Online Retailers, online retailers cyber threats, Ransomware, Raymond Reddington, retail, Retail & Commerce, Retail & Consumer Goods, Retail & e-commerce, Retail and E-Commerce, Retail Cybersecurity, Retail Industry, SB Blogwatch, Scatter Swine, scattered spider, Starfraud, the Com, the Community, UNC3944
Arachnid alarm: Three major British retailers recently attacked, resulting in huge damage. Now we see the self-same scum spotlighting stores in the States ...
Security Boulevard

As US CVE Database Fumbles, EU ‘Replacement’ Goes Live
Richi Jennings | | CERT-EU, cisa, CISA Research, common vulnerabilities and exposures, CVE, CVE (Common Vulnerabilities and Exposures), CVE database, CVE Program, Cybersecurity and Infrastructure Security Agency, cybersecurity funding, Department of Homeland Security, DHS, ENISA, eu, EU Agency for Cybersecurity, European Union, European Union (EU), EUVD, Funding & Grants, Juhan Lepassaar, MITRE, MITRE Framework, National Institute of Standards and Technology, National Institute of Standards and Technology (NIST), NIS2, NIS2 Directive, NIST, SB Blogwatch, U.S. Department of Homeland Security, vulnerability database
Diesen Kuß der ganzen Welt! European Union Vulnerability Database (EUVD) launches this week. And not a moment too soon ...
Security Boulevard

200,000 Workers’ PII at Risk in WorkComposer S3 SNAFU
Richi Jennings | | Amazon S3, Amazon S3 bucket, Amazon Web Services, Amazon Web Services (AWS), amazon web services compliance, AWS bucket, AWS GDPR Compliance Shared Responsibility, AWS S3 BUCKET, aws s3 storage, breach of privacy, bucket policy, buckets, California Consumer Privacy Act (CCPA), CCPA, CCPA Compliance, cybersecurity challenges in remote working, EU GDPR, GDPR, GDPR (General Data Protection Regulation), GDPR compliance, gdpr eu, online surveillance, Privacy, remote work, remote work cyber security, Remote Work Cybersecurity, remote work enviornment, remote work productivity, Remote Work Security, remote worker management, remote workers, remote workforce, Remote Workforce Security, remote working, remote working risks, S3, S3 bucket, S3 buckets, SB Blogwatch, spyware, storage bucket, WorkComposer
Don’t say ‘spyware’—21 million screenshots in one open bucket ...
Security Boulevard

Asian Scam Farms: ‘Industrial Scale,’ Warns UN Report
Richi Jennings | | #CryptoScam, #InvestmentScam, #PigButchering, Amazon Phishing Scams, AppleCare Warranty Scam, bank scam, bitcoin ATM scam, bitcoin scam, bitcoin transfer scams, gift card, gift card fraud, Gift Card Gang, gift card scams, gift cards, GiftCardScams, online romance scam, pig butchering, Pig Butchering Scams, romance, romance fraud, romance scam, romance scammers, romance scams, SB Blogwatch, social media intelligence, United Nations, UNODC
Bacon Redux: Pig butchering and other serious scams still thriving, despite crackdowns in Dubai and Myanmar ...
Security Boulevard

MITRE Crisis: CVE Cash Ends TODAY — CISA says ‘No Lapse’
Richi Jennings | | cisa, CISA Research, common vulnerabilities and exposures, CVE, CVE (Common Vulnerabilities and Exposures), CVE database, CVE Program, Cybersecurity and Infrastructure Security Agency, cybersecurity funding, Department of Homeland Security, DHS, Funding & Grants, MITRE, MITRE Framework, National Institute of Standards and Technology, National Institute of Standards and Technology (NIST), NIST, SB Blogwatch, U.S. Department of Homeland Security
These are “interesting” times: U.S. government funding for the Common Vulnerabilities and Exposures program expires April 16 ...
Security Boulevard

Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’
Richi Jennings | | CVE-2021-35587, Larry Ellison, OCI, Oracle, Oracle Access Manager, Oracle Classic, Oracle cloud, Oracle Cloud Classic, Oracle Cloud infrastructure, Oracle Fusion Cloud, rose87168, SB Blogwatch
Classic “wordplay:” Larry’s PR angels desperately dance on the head of a pin ...
Security Boulevard