Richi Jennings

Richi Jennings is a foolish independent industry analyst, editor, and content strategist. A former developer and marketer, he’s also written or edited for Computerworld, Microsoft, Cisco, Micro Focus, HashiCorp, Ferris Research, Osterman Research, Orthogonal Thinking, Native Trust, Elgan Media, Petri, Cyren, Agari, Webroot, HP, HPE, NetApp on Forbes and CIO.com. Bizarrely, his ridiculous work has even won awards from the American Society of Business Publication Editors, ABM/Jesse H. Neal, and B2B Magazine.

PAN-PAN-PAN-OS: Palo Alto Firewalls Under Attack (Again)

Richi Jennings | February 20, 2025 | attack chain, Attack Chains, authentication bypass, Authentication bypass flaw, CVE-2024-9474, CVE-2025-0108, CVE-2025-0111, firewall, Firewall Exploit, firewall security, Palo Alto Networks, Palo Alto Networks PAN-OS, PAN-OS, PAN-OS Vulnerability, php, SB Blogwatch

Time to Declare an Emergency? Scrotes chain three flaws to take full control—seems pretty easy ... Read More

Security Boulevard

romance, fraud, scams, Heart of Flowers on a wooden wall

Congress is PISSED at British Backdoor Bid, but Apple Stays Shtum

Just meet me at the ADP: Sen. Ron Wyden and Rep. Andy Biggs got no love for the United Kingdom ... Read More

Security Boulevard

The DeepSeek app icon on an iPhone home screen

Chinese DeepSeek AI App: FULL of Security Holes Say Researchers

Richi Jennings | February 10, 2025 | AI, AI (Artificial Intelligence), AI privacy, application-level encryption, Artificial Intelligence, Artificial Intelligence (AI), Artificial Intelligence (AI)/Machine Learning (ML), Artificial Intelligence Cybersecurity, Artificial Intelligence News, artificial intellignece, Artificial Stupidity, artificialintelligence, breach of privacy, Bytedance, California Consumer Privacy Act, California Consumer Privacy Act (CCPA), china, china espionage, China Mobile, China-nexus cyber espionage, Chinese, Chinese Communists, chinese government, Chinese Internet Security, Chinese keyboard app security, Congress, congressional legislation, cybersecurity artificial intelligence, Darin LaHood, Data encryption, Data encryption standards, Data Stolen By China, DeepSeek, DeepSeek AI, encryption, Josh Gottheimer, Large Language Models (LLM), Large language models (LLMs), LLM, llm security, No DeepSeek on Government Devices Act, Peoples Republic of China, Privacy, SB Blogwatch, TikTok, TikTok Ban, Unencrypted Data, US Congress

Xi knows if you’ve been bad or good: iPhone app sends unencrypted data to China—and Android app appears even worse ... Read More

Security Boulevard

FCC Commissioner Brendan Carr speaking at the 2018 Conservative Political Action Conference (CPAC) in National Harbor, Maryland.

FINALLY! FCC Gets Tough on Robocall Fraud

KYC isn’t a Thing, claims telco: Commissioner Brendan Carr (pictured) wants $4.5 million fine on Telnyx, for enabling “illegal robocall scheme.” ... Read More

Security Boulevard

A close up of a patient monitor screen with a heart beat

CISA/FDA Warn: Chinese Patient Monitors Have BAD Bugs

China crisis? Stop using this healthcare equipment, say Cybersecurity & Infrastructure Security Agency and Food & Drug Administration ... Read More

Security Boulevard

Nosferatu's shadow from the film “Nosferatu”

Ransomware Scum — Out For Blood: NYBCe is Latest Victim

Bloody hell: New York Blood Center Enterprises crippled by ransomware scrotes unknown ... Read More

Security Boulevard

Offer Shlomi a/k/a Vince Offer, the Slap Chop guy

SLAP/FLOP: Apple Silicon’s ‘Son of Spectre’ Critical Flaws

Richi Jennings | January 29, 2025 | Apple, apple bug, Apple Data Security, Apple Silicon, ARM, Arm CPU Attack, arm64, Daniel Genkin, FLOP, iPad, iPhone, Jalen Chuang, Jason Kim, Mac, SB Blogwatch, Side-Channel, side-channel attack, side-channel attacks, SLAP, Spectre, Spectre attack, Spectre variant, speculative execution, Yuval Yarom

Watch this: Want more “speculative execution” bugs? You’re gonna be in a great mood all day ... Read More

Security Boulevard

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On