Jun 15, 2024
•
29 min read
Epic Fails: IDE plug-ins, insecure code repos, stolen credentials, ignored vulnerabilities, inadequate QA/security, ...
Jun 1, 2024
21 min read
Software Development What's Weak This Week: Ticket Masters, FBI, 600k SOHO routers, Google AI, OpenAI, UnitedHealth, Sav-Rx, Christie's, VBS, ...
May 25, 2024
25 min read
Epic Fails: Ascension Health, Cencora, MITRE, GitLab | Now-Next: MS Windows Recall, Global Intel of Wi-Fi Routers, John Deere IT & Dev
May 18, 2024
24 min read
What's Weak This Weak: Ascension Health, US Army, Google, Christie's, Linux SSH, Free Laundry
May 11, 2024
30 min read
Epic Fails: F5, VPNs, Europol, Dell, Microsoft, Ascension Health, US Patent Office, AT&T, ...
May 4, 2024
What's Weak This Week: Change Healthcare intrusion missed MFA, Kaiser Marketing Leakage, GitLab account takeovers, Microsoft reemphasizing SSDLC Fundamentals
Apr 20, 2024
Epic Fails: UnitedHealth ransomware cost raising to $1B, vulnerable smart locks - lack of sensitive data encryption protection. AI atttacks and security guidance.
Apr 13, 2024
28 min read
Epic Fails: Microsoft and Sisense Accounts Exposed, OSS Supply Chain Vulns ignored, TVs and Road Tolls
Apr 6, 2024
Epic Fails: AI PrivEsc and Cross-Tenant Attacks, Ivanti commits to now starting security by design; Fed access tokens in code exploited. OWASP exposes resumes. Reduce Dev and Sec Costs: replace C++ with Rust, Java with Kotlan.
Mar 30, 2024
23 min read
Lame List: Thousands of AI Servers actively attacked for months, SQL Injections vulnerabilities since 2007, Cloud email filtering bypassed 80%, Open Source Malware Injection Attacks
Mar 23, 2024
Mar 17, 2024
4 min read
