Weekly Update 426
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device. I have absolutely no…
Security
Friday Squid Blogging: Female Gonatus Onyx Squid Carrying Her Eggs
Fantastic video of a female Gonatus onyx squid swimming while carrying her egg sack. An earlier related post. Blog moderation…
Good Essay on the History of Bad Password Policies
Stuart Schechter makes some good points on the history of bad password policies: Morris and Thompson’s work brought much-needed data…
ESET APT Activity Report Q2 2024–Q3 2024: Key findings
ESET Chief Security Evangelist Tony Anscombe highlights some of the most intriguing insights revealed in the latest ESET APT Activity…
New iOS Security Feature Makes It Harder for Police to Unlock Seized Phones
Everybody is reporting about a new security iPhone security feature with iOS 18: if the phone hasn’t been used for…
Microsoft’s November 2024 Patch Tuesday Resolves 88 Flaws, Including 4 Zero Days
This month, Microsoft released security updates addressing 88 vulnerabilities, four of which were zero-days and four critical. Two of the…
ESET Research Podcast: Gamaredon
ESET researchers introduce the Gamaredon APT group, detailing its typical modus operandi, unique victim profile, vast collection of tools and…
Your AppSec Journey Demystified: Driving Effective API Security with Wallarm and StackHawk
There is no doubt that attackers have shifted their attention to APIs. Wallarm’s API ThreatStats research identifies that 70% of…
Mapping License Plate Scanners in the US
DeFlock is a crowd-sourced project to map license plate scanners. It only records the fixed scanners, of course. The mobile…
Inside the DemandScience by Pure Incubation Data Breach
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device. Apparently, before a child…