Mar 29, 2025
•
24 min read
Highlights This Week: Microsoft DNS hijacked, Oracle denying recent breaches, JFK files release exposed sensitive PII, Madison Square Gardens customer bans, React Next.js, AI attacks, ...
Mar 22, 2025
28 min read
Highlights This Week: tj-actions, sensitive info in emails, Apache Tomcat, Microsoft, AI attack chains, PCI and HIPAA updates, ...
Mar 15, 2025
30 min read
Highlights This Week: Chromecast, HP Printers, Microsoft, unencrypted sensitive data, AI going everywhere and still failing ...
Mar 8, 2025
22 min read
This week's Lame List: secrets in logs, SSDLC without separation of duties, bad coding, vulnerable legacy applications, unencrypted data, unmanaged devices, AI deep fakes, ... the usual
Mar 1, 2025
Highlights This Week: Tracking Apple phones and laptops by Bluetooth, Mitre insecure app; AI data leaks & malevolence; dumb lawyers – again; robotics horror
Feb 22, 2025
Highlights This Week: New crypto attack record, enterprise network compromised in 48-minutes, Heath Care cyber security fails, data protection fails, new OWASP Top 10 for Non-Human Identities, AI, Lawsuits
Feb 15, 2025
19 min read
This week's Lame List: Auto Infotainment Adverts, PostgreSQL arbitrary code execution, unreliability of LLMs, NPM supply chain attack, device code phishing, bankjacking
Feb 8, 2025
This week's Lame List: More secrets in code, Supply Chain attacks from not using SCA scanning, SSDF/SSDLC fails, etc.
Feb 1, 2025
More AI fails and Healthcare breaches, office phone botnets, US Copyright Office AI guidance, and much more ...
Jan 25, 2025
38 min read
This Week's Highlights: Legal US InfoSec changes. Epic Fails: data breaches - Sage AI financial data leaks, PowerSchool 62m students and teachers, Mastercard DNS typo, HPE, United Healthcare 190m Americans + more
Jan 18, 2025
39 min read
New Year Starts with a Bang: Cyber Security Legal & Regulatory Guidance
Jan 11, 2025
20 min read
Lame List: Gravy Analytics, Marriott, Telfonica, Docker, Microsoft, traffic cams, DNA sequencers. And HIPAA update
