AppSec
‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE
Tim looks grim: 10 year old vulnerabilities in widely used dev tool include a CVSS 10.0 remote code execution bug ...
‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk
SolarWinds hackers strike again: Remote access service hacked—by APT29, says TeamViewer ...
Temu is Malware — It Sells Your Info, Accuses Ark. AG
Chinese fast-fashion-cum-junk retailer “is a data-theft business.” ...
The Urgency to Uplevel AppSec: Securing Your Organization’s Vulnerable Building Blocks
Let’s examine why so many applications remain vulnerable despite high-severity warnings and how to minimize the threat to your organization ...
WordPress Plugin Supply Chain Attack Gets Worse
30,000 websites at risk: Check yours ASAP! (800 Million Ostriches Can’t Be Wrong.) ...
Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive
Copying users’ files and deleting some? Even a cartoon hound knows this isn’t fine ...
30,000 Dealerships Down — ‘Ransomware’ Outage Outrage no. 2 at CDK Global
Spend more on security! Car and truck dealers fall back on pen and paper as huge SaaS provider gets hacked (again) ...
EU Aims to Ban Math — ‘Chat Control 2.0’ Law is Paused but not Stopped
Ongoing European Union quest to break end-to-end encryption (E2EE) mysteriously disappears ...
Recall ‘Delayed Indefinitely’ — Microsoft Privacy Disaster is Cut from Copilot+ PCs
Copilot Plus? More like Copilot Minus: Redmond realizes Recall requires radical rethink ...
Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk
Location tracking service leaks PII, because—incompetence? Seems almost TOO easy ...
