Robert Grupe's AppSecNewsBits 2025-07-12

This week's Lame List & Highlights: CitrixBleed 2, Cisco, ServiceNow, Wing FTP, McDonalds, AI Therapist, Gronk xAI, Catwatchful, GenAI vulnerabilities, and more ...

Robert Grupe's AppSecNewsBits 2025-06-28

What’s Weak This Weak plus security guidance updates.

Robert Grupe's AppSecNewsBits 2025-06-22

This week's Lame List & Highlights: False largest data breach story, Hard coded passwords, weak admin accounts, unencrypted sensitive data exposures. Plus US Executive revised cyber security executive directive, and more ...

Robert Grupe's AppSecNewsBits 2025-05-31

This week's Lame List & Highlights: LexusNexus, MathLabs, Apple Messenger, DRM, OneDrive File Picker, Browser In The Middle Attacks, AI hijinks, and more ...

Robert Grupe's AppSecNewsBits 2025-05-24

Robert Grupe's AppSecNewsBits 2025-05-17

This week's Lame List & Highlights: Nucor steel; Marks & Sparks; Dior; AI fails, abuses, and expert supervision required; Coinbase $20m bounty on ransomware attackers; NVD/EUVD, and more ...

Robert Grupe's AppSecNewsBits 2025-05-10

This week's Lame List & Highlights: Pearson’s Git Token, Ransomware extortions, Supply Chain attacks, AI lures, and more ...

Robert Grupe's AppSecNewsBits 2025-05-03

Highlights:"You can't lick a badger twice", xAI secrets exposure, MFA fails & protections, Microsoft allows sign ins with revoked passwords, Oracle causes days outage, Juice-Hajacking device charging, AI generated code vulnerabilities, Air-Play vulnerabilities, and much more ...

Robert Grupe's AppSecNewsBits 2025-04-25

This Week’s Highlights: Pedestrian crosswalk hacking craze, WorkComper and health care data breaches, SSL.com certificates, M&S, Microsoft & SAP fumbles, vulnerability exploits within hours with AI, AI exploits, DOGE data exfiltration methods, and more ...

Robert Grupe's AppSecNewsBits 2025-04-19

Oracle, 4chan, Hertz, Landmark Admin, NTLM, ActiveX EOL, AI SupportBot inventing policies blocking customers, Security incident disclosures and stronger regulatory compliance requirements, and more ...

Robert Grupe's AppSecNewsBits 2025-04-12

Lame List & Highlights: VibeScamming, Slopsquatting, Signalgate personal contacts fumble, AI deepfakes, supply chain attacks, Microsoft Update Outages, Oracle denials, OCC undetected hack for over a year, and more ...

Robert Grupe's AppSecNewsBits 2025-04-04

Highlights This Week: Oracle, Europcar, Samsung, Coinbase, AU Pension Funds attacks, Fast Flux, AI passes Turing Test?, and more ...