SB Blogwatch

Signal Gives Microsoft a Clear Signal: Do NOT Recall This
Richi Jennings | | AI, AI (Artificial Intelligence), AI training, Artificial Intelligence, Artificial Intelligence (AI), Artificial Intelligence (AI)/Machine Learning (ML), artificial intellignece, artificialintelligence, breach of privacy, Copilot, cybersecurity risks of generative ai, Data Privacy, Digital Privacy, generative AI, Generative AI risks, Health Insurance Portability and Accountability Act (HIPAA), HIPAA, HIPAA and IT Security, HIPAA Compliance, hipaa laws, HIPPA, Large Language Model, large language models, Large Language Models (LLM), Large language models (LLMs), LLM, LLMs, machine learning, Microsoft, ML, Privacy, Recall, SB Blogwatch, signal, Signal app, Windows
Black screen of DRM: Privacy-first messenger blocks Microsoft Recall ...
Security Boulevard

Warning to US Retail: ‘Scattered Spider’ Targets YOU (with DragonForce Ransomware)
Richi Jennings | | 0ktapus, attacks on online retailers, Co-op, Dembe Zuma, DragonForce, google, Harrods, internet retailers, John Hultquist, Mandiant, Marks & Spencer, Muddled Libra, online retailer, Online Retailers, online retailers cyber threats, Ransomware, Raymond Reddington, retail, Retail & Commerce, Retail & Consumer Goods, Retail & e-commerce, Retail and E-Commerce, Retail Cybersecurity, Retail Industry, SB Blogwatch, Scatter Swine, scattered spider, Starfraud, the Com, the Community, UNC3944
Arachnid alarm: Three major British retailers recently attacked, resulting in huge damage. Now we see the self-same scum spotlighting stores in the States ...
Security Boulevard

As US CVE Database Fumbles, EU ‘Replacement’ Goes Live
Richi Jennings | | CERT-EU, cisa, CISA Research, common vulnerabilities and exposures, CVE, CVE (Common Vulnerabilities and Exposures), CVE database, CVE Program, Cybersecurity and Infrastructure Security Agency, cybersecurity funding, Department of Homeland Security, DHS, ENISA, eu, EU Agency for Cybersecurity, European Union, European Union (EU), EUVD, Funding & Grants, Juhan Lepassaar, MITRE, MITRE Framework, National Institute of Standards and Technology, National Institute of Standards and Technology (NIST), NIS2, NIS2 Directive, NIST, SB Blogwatch, U.S. Department of Homeland Security, vulnerability database
Diesen Kuß der ganzen Welt! European Union Vulnerability Database (EUVD) launches this week. And not a moment too soon ...
Security Boulevard

200,000 Workers’ PII at Risk in WorkComposer S3 SNAFU
Richi Jennings | | Amazon S3, Amazon S3 bucket, Amazon Web Services, Amazon Web Services (AWS), amazon web services compliance, AWS bucket, AWS GDPR Compliance Shared Responsibility, AWS S3 BUCKET, aws s3 storage, breach of privacy, bucket policy, buckets, California Consumer Privacy Act (CCPA), CCPA, CCPA Compliance, cybersecurity challenges in remote working, EU GDPR, GDPR, GDPR (General Data Protection Regulation), GDPR compliance, gdpr eu, online surveillance, Privacy, remote work, remote work cyber security, Remote Work Cybersecurity, remote work enviornment, remote work productivity, Remote Work Security, remote worker management, remote workers, remote workforce, Remote Workforce Security, remote working, remote working risks, S3, S3 bucket, S3 buckets, SB Blogwatch, spyware, storage bucket, WorkComposer
Don’t say ‘spyware’—21 million screenshots in one open bucket ...
Security Boulevard

Asian Scam Farms: ‘Industrial Scale,’ Warns UN Report
Richi Jennings | | #CryptoScam, #InvestmentScam, #PigButchering, Amazon Phishing Scams, AppleCare Warranty Scam, bank scam, bitcoin ATM scam, bitcoin scam, bitcoin transfer scams, gift card, gift card fraud, Gift Card Gang, gift card scams, gift cards, GiftCardScams, online romance scam, pig butchering, Pig Butchering Scams, romance, romance fraud, romance scam, romance scammers, romance scams, SB Blogwatch, social media intelligence, United Nations, UNODC
Bacon Redux: Pig butchering and other serious scams still thriving, despite crackdowns in Dubai and Myanmar ...
Security Boulevard

MITRE Crisis: CVE Cash Ends TODAY — CISA says ‘No Lapse’
Richi Jennings | | cisa, CISA Research, common vulnerabilities and exposures, CVE, CVE (Common Vulnerabilities and Exposures), CVE database, CVE Program, Cybersecurity and Infrastructure Security Agency, cybersecurity funding, Department of Homeland Security, DHS, Funding & Grants, MITRE, MITRE Framework, National Institute of Standards and Technology, National Institute of Standards and Technology (NIST), NIST, SB Blogwatch, U.S. Department of Homeland Security
These are “interesting” times: U.S. government funding for the Common Vulnerabilities and Exposures program expires April 16 ...
Security Boulevard

Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’
Richi Jennings | | CVE-2021-35587, Larry Ellison, OCI, Oracle, Oracle Access Manager, Oracle Classic, Oracle cloud, Oracle Cloud Classic, Oracle Cloud infrastructure, Oracle Fusion Cloud, rose87168, SB Blogwatch
Classic “wordplay:” Larry’s PR angels desperately dance on the head of a pin ...
Security Boulevard

App Stores OK’ed VPNs Run by China PLA
Richi Jennings | | 360 Security Technology, App Store, App Stores, Apple, CCP, china, china espionage, China-nexus cyber espionage, Chinese, Chinese Communists, Chinese cyber espionage, chinese government, free vpn app, google, Google Play Store, Peoples Republic of China, Privacy, Qihoo 360, SB Blogwatch, Signal Secure VPN, Snap VPN, Tech Transparency Project, Thunder VPN, TikTok, TikTok Ban, Turbo VPN, VPN, VPN Proxy Master
Bad Apple: Chinese firm banned by the U.S. is the shady entity behind a clutch of free VPN apps—with over a million downloads ...
Security Boulevard

Spit Happens: 23andMe is Bankrupt — Secure Your DNA Data NOW Already
Double hell-ix: Personal genomics firm tells customers your data is safe—but few will trust the loss-making biotech pioneer ...
Security Boulevard

Microsoft Won’t Fix This Bad Zero Day (Despite Wide Abuse)
Richi Jennings | | .lnk, APT37, APT43, BitterAPT, china espionage, CWE-451, Cybersecurity zero-day flaw, Earth Anansi, Earth Imp, Earth Kumiho, Earth Manticore, Evil Corp., InkySquid, Iranian hackers, kimsuky, Kimsuky hacking group, Konni, LNK file malware, LNKFiles, malicious LNK files, Microsoft, Microsoft Windows Zero Day, North Korean cyber espionage, russia hacker, SB Blogwatch, ScarCruft, Windows, ZDI-CAN-25373, Zero Day Attacks, zero day exploit attack, Zero Day Initiative, Zero Day Initiative (ZDI), zero-day, zero-day attack, Zero-Day Bug
Satya says NO: Redmond blames Windows users, rather than solve 30-year-old bug—exploited since 2017 ...
Security Boulevard