Dec 14, 2024
•
22 min read
UnitedHealth exposed chatbot, misconfigured AWS Bucket, sensitive info in Inbox, supply chain attacks, MS 365 security logging, VS Code, Cloudfare Tunnels, etc.
Dec 7, 2024
27 min read
This week’s news roundup: Epic Fails Stolli Bankruptcy, Romanian elections, vulnerable gateway services, MOVEIT ongoing, NTLM, malicious coded backdoor, etc.
Nov 23, 2024
39 min read
Nov 16, 2024
26 min read
Epic Fails American Associated Pharmacies, MS Power Pages. AI Android AI Scam Detection scambusting chatbot.
Nov 9, 2024
15 min read
Epic Fails: DocuSign BEC, Nokia code and secrets, Schneider Electric Baguettes, Microsoft Update
Nov 3, 2024
28 min read
Epic Fails: secrets in code, encryption implementation, privileged accounts management, CI/CD pipeline control, geolocation tracking, end-of-supported devices, AI
Oct 26, 2024
29 min read
Lame List: UnitedHeathcare, Landmark insurance, LinkedIn, hard coded credentials, verified email addresses, legal actions and penalties, ...
Oct 19, 2024
38 min read
What's Weak This Week: Change Healthcare attack costs now up to $2.87B in 2024 with more in 2025, Solar Winds, Kubernetes Image Builder, Casio, ESET, Cisco, Fortinet, WordPress, ...
Oct 5, 2024
This week’s news roundup newsletter: Apple VoiceOver fail, AI LLM fails, email cc attacks; largest DDoS attack, Linux vulns, certificate management, etc.
Sep 28, 2024
33 min read
Epic Fails: Sonos, Meta, Kia, Linux - tech debt, passwords, authorization, CUPS, certificates, AI, ...
Sep 21, 2024
25 min read
Device Supply Chain Attacks: Exploding Pagers and Radios, GenAI Hallucinations and Lawsuits, Funeral Services Scams, etc.
Sep 15, 2024
13 min read
This Week: Lawsuits, Increased Power Needed for IT and AI, All Employees Password Rests After Breaches
