Securing the Cloud
The Team Sport of Cloud Security: Breaking Down the Rules of the Game
Cloud security in 2024 is akin to playing a team sport – it requires clear communication and collaboration between technology vendors and customers ...
Security Boulevard
‘Blast-RADIUS’ Critical Bug Blows Up IT Vacation Plans
Richi Jennings | | blast radius, collision-based-hashing-algorithm-disclosure, CVE-2024-3596, hash, hash algorithms, hash function, hash functions, Man In The Middle, man in the middle attack, man in the middle attacks, maninthemiddleattacks, md5 hash, men-in-the-middle attack, mitm, MitM Attack, mitm attacks, RADIUS, SB Blogwatch
MD5 MITM Muddle: Ancient, widely used protocol has CVSS 9.0 vulnerability ...
Security Boulevard
Biggest Ever Password Leak — but is ObamaCare’s RockYou2024 Really NEW?
Richi Jennings | | credentials, Cybersecurity, Malware, ObamaCare, Passkeys, passwords, rockyou2021, RockYou2024, SB Blogwatch
Credential crunch: Ten billion plain-text passwords in a file—sky falling or situation normal? ...
Security Boulevard
‘Polyfill’ Supply Chain Threat: 4x Worse Than We Thought
Richi Jennings | | App Sec & Supply Chain Security, AppSec & Supply Chain Security, CloudFlare, Funnull, Javascript, Modern Software Supply Chains, Open Source and Software Supply Chain Risks, open source software supply chain, open source software supply chain security, polyfill, SB Blogwatch, secure software supply chain, software supply chain attack, software supply chain attacks, software supply chain hygiene, software supply chain risk, Software Supply Chain risks, Supply-Chain Insecurity
Spackle attack: Chinese company takes over widely used free web service—almost 400,000 websites at risk ...
Security Boulevard
‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk
Richi Jennings | | 2-factor authentication, 2fa, 2FA/MFA, APT29, Cozy Bear, CozyCar, CozyDuke, Dark Halo, enshittification, MFA, mfa protection, Midnight Blizzard, multi-factor, multi-factor authenication, Multi-Factor Authentication, Multi-Factor Authentication (MFA), multi-factor-auth, NOBELIUM, Nobeliumm, Office Monkeys, Russia, russia hacker, russia-based, russian, SB Blogwatch, SolarWinds, SolarWinds Vulnerability, solarwinds-hack, StellarParticle, SVR, TeamViewer, The Dukes, two-factor, two-factor athentication, Two-Factor Humor, two-factor-authentication.2fa, UNC2452, YTTRIUM
SolarWinds hackers strike again: Remote access service hacked—by APT29, says TeamViewer ...
Security Boulevard
Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive
Richi Jennings | | Microsoft, Microsoft Account Security, Microsoft OneDrive, Microsoft Windows, OneDrive, Privacy, SB Blogwatch, Windows, Windows 11
Copying users’ files and deleting some? Even a cartoon hound knows this isn’t fine ...
Security Boulevard
30,000 Dealerships Down — ‘Ransomware’ Outage Outrage no. 2 at CDK Global
Richi Jennings | | Automotive, Automotive industry, Car Dealer, CDK Global, cloud outage, cloud Saas, Downtime and outages, outage, outages, Private Equity, Ransomware, SaaS, SaaS App Security, SB Blogwatch, Software-as-a-Service, Software-as-a-Service (SaaS)
Spend more on security! Car and truck dealers fall back on pen and paper as huge SaaS provider gets hacked (again) ...
Security Boulevard
EU Aims to Ban Math — ‘Chat Control 2.0’ Law is Paused but not Stopped
Richi Jennings | | Chat Control, Child Abuse, child exploitation, child porn, child pornography, child sexual exploitation, CSAM, CSEM, E2EE, encryption, end-to-end encryption, eu, Europe, European Compliance, european election, European Governments, European legislation, European Union, European Union (EU), SB Blogwatch, signal, WhatsApp, Won’t somebody think of the children?
Ongoing European Union quest to break end-to-end encryption (E2EE) mysteriously disappears ...
Security Boulevard
Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk
Richi Jennings | | access management, ASX:360, Chris Hulls, content scraping, data scraping, enumeration, Enumeration Attacks, Ex-Employee Credentials, geofencing and location tracking, geolocation, Identity & Access Management, identity and access management, Identity and Access Management (IAM), Life360, Location, location data, Location data privacy, location finder app, location history, location intelligence, location privacy, location sharing location tracking, preventing possible attempt to enumerate users, SB Blogwatch, scraper, Scrapers, Scraping, Tile, user enumeration
Location tracking service leaks PII, because—incompetence? Seems almost TOO easy ...
Security Boulevard
Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked
Richi Jennings | | 2 factor auth, 2-factor authentication, 2fa, Advance Auto Parts, Brad Jones, Breach Forums, BreachForums, Buying event tickets online and cybersecurity, Cloud MFA, Data leak, DUAL FACTOR AUTHENTICATION, Event ticketing industry, infostealer, infostealers, LendingTree, Mandiant, Mandiant report, MFA, mult-factor authentication, multi-factor authenication, Multi-Factor Authentication, Multi-Factor Authentication (MFA), Multifactor Authentication, NYSE:SNOW, Privacy, QuoteWizard, Ransomware, SB Blogwatch, ShinyHunters, snowflake, Taylor Swift, threats, Ticketmaster, two factor authentication, UNC5537
Not our fault, says CISO: “UNC5537” breached at least 165 Snowflake instances, including Ticketmaster, LendingTree and, allegedly, Advance Auto Parts ...
Security Boulevard

