Software Supply Chain Security
Don’t Trust the Security of the Software Supply Chain
Now more than ever, organizations are relying on the supply chain for basic business operations. According to Charlie Jones, director of product management with ReversingLabs, there are two reasons for this: The ...
White House Moves to Address Software Supply Chain Security
No one wants a repeat of the SUNBURST cyberattack, but without any action to improve cybersecurity within the software supply chain, another SUNBURST—or worse—attack is inevitable. And we still may see a ...
Scams Lost US $10 BILLION in 2022 — Crypto Fraud Grows Fast
Ben is disappointed: FBI reports huge rise in cryptocurrency investment scams. Why am I not surprised? ...
White House to Regulate Cloud Security: Good Luck With That
Be careful what you wish for: Biden wants new regulations for cloud providers—but we’re not sure it’ll help ...
Voice-Clone AI Scams — it’s NOT ME on the Phone, Grandma
Voice AI tech being misused by scammers: Scrotes fake your voice and call your grandparents. Then “you” beg them for money ...
Microsoft FAIL: ‘BlackLotus’ Bootkit Breaks Secure Boot
The BlackLotus malware targets UEFI Secure Boot. For a mere $5000, you too can own it ...
Supply Chain Dependency: What Your GitHub Connections May Trigger
The writing is on the walls, and it’s hard to avoid after the significant spike in attacks against GitHub repositories. The recent CircleCI breach, in which customers’ secrets and encryption keys were ...
GoDaddy Hosting Hacked — for FOURTH Time in 4 Years
GoDaddy’s web hosting service breached yet again. This time, the perps were redirecting legit websites to malware ...
Anker’s Eufy Admits ‘Lie’ After TWO Months — Still no Apology
Anker said its Eufy cameras never send unencrypted video. But a couple of months ago, researchers discovered they did. Despite the clear evidence, Anker denied, delayed and deflected ...
Another Password Manager Leak Bug: But KeePass Denies CVE
Two researchers report vulnerability in KeePass. But lead developer Dominik Reichl says it’s not a problem—and refuses to fix the flaw ...