Hot Topics

API Security

Two old vehicles rust away in a junkyard

This SUCKS: ‘Cars Are a Privacy Nightmare,’ Mozilla Fumes

| | automaker, Car, cars, cellular IoT, cellular IoT security, Connected Cars, Consumer IoT, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things cyber security, iot, Mozilla, Mozilla Foundation, New Cars, Privacy, Privacy4Cars, SB Blogwatch, vehicle, vehicle cybersecurity, vehicle OTAs
IoT cars considered harmful: Own a car? Care about your privacy? Mozilla Foundation has bad news for you ...
Security Boulevard
A lemur stares back at you, with a shocked expression

Sourcegraph’s Shocking Screwup: Private Secrets in Public Repo

| | AI, authentication token, compromised credentials, credential replay attacks, large language models, Large Language Models (LLM), Large language models (LLMs), LLM, pii, PII Leakage, Run-time Secrets Protection, SB Blogwatch, secret, secret key, secret keys, secret management, secrets scanning, Sourcegraph
Credentials create crisis: AI source code navigation LLM leaks PII after DevOps SNAFU ...
Security Boulevard
A phone home screen shows Signal and Telegram app icons

BadBazaar: Chinese Spyware Shams Signal, Telegram Apps

| | android, android spyware, APT15, BadBazaar, Flygram, google, Google Play Incompetence, Google Play Store, GREF, Lukas Stefanko, Nickel, Samsung, SB Blogwatch, signal, Signal Plus Messenger, spyware, Telegram, Vixen Panda
After sneaking into Google and Samsung app stores, “GREF” APT targets Uyghurs and other PRC minorities ...
Security Boulevard
A duck stares at you, straight on

Qakbot Cracked: FBI and Friends Hack the Hackers

| | aresloader, Black Basta Ransomware, botnet, botnets, Department of Justice, Department of Justice (DOJ), DOJ, Duck Hunt, FBI, Federal Bureau of Investigation, justice department, loaders, Pinkslipbot, Qakbot, qakbot malware, Qbot, SB Blogwatch, takedown, takedowns, U.S. Department of Justice, U.S. Justice Department, United States Department of Justice, US Department of Justice, US FBI
Operation Duck Hunt shoots to kill big botnet ...
Security Boulevard
Putin caricature

Did Russia Hack Poland’s Trains? MSM Says Yes, but … Well, You Decide

| | Poland, RADIO-STOP, Rail Cybersecurity, railroad, Railway Security, Russia, SB Blogwatch, trains
Train Phreaking: It depends what you mean by “hack” (and by “Russia”) ...
Security Boulevard
a little teapot, short and stout

Lapsus$ Jury Says Teen Duo Did Do Crimes

| | Arion Kurtaj, Grand Theft Auto, Lapsus$, Ransomware, Rockstar Games, SB Blogwatch, Strawberry Tempest
Arion Kurtaj and anon minor: Part of group that hacked Uber, Nvidia, Microsoft, Rockstar Games and many more ...
Security Boulevard
abandoned house

Ransomware Robs Realtors — Rapattoni MLS-aaS Down: Day 8 and Counting

| | legacy, Legacy Application, legacy applications, legacy apps, legacy IT, legacy Software, legacy system security risk, legacy systems, MLS, Ransomware, Rapattoni, real estate, real estate agents, realtors, SaaS, SB Blogwatch
MLS FAIL: Home listings SaaS dead in the water as real estate agents lose leads ...
Security Boulevard
power plant

‘Sabotage the Factory’ — 16 Big Bugs in Codesys ICS/OT/SCADA Software

| | CoDe16, Codesys, ICS, ICS/SCADA, ICS/SCADA Security, operational technologies, operational technology, operational technology security, OT, SB Blogwatch, SCADA, Vladimir Eliezer Tokarev, Vladimir Tokarev
CoDe16 FAIL: Researchers unveil high-severity vulns in Codesys Control, used in millions of devices ...
Security Boulevard
DHS secretary Alejandro Mayorkas

Teenage Hackers Must be Stopped: US DHS’s CSRB Report

| | 2 factor auth, 2-factor authentication, 2fa, 2FA bypass, 2FA Flaws, 2FA phishing, 2FA policies, 2FA/MFA, cellphone fraud, CSRB, Cyber Safety Review Board, Department of Homeland Security, DHS, DUAL FACTOR AUTHENTICATION, factor auth, homeland security, Homeland Security Presidential Directive, homelandsecurity, Lapsus$, Multi-Factor Authentication, Multi-Factor Authentication (MFA), Multifactor Authentication, SB Blogwatch, SIM swap, sim swap fraud, SIM swap scams, SIM swapping, two factor authentication, U.S. Department of Homeland Security, United States Department of Homeland Security, US Homeland Security
2FA SMS FAIL: Lapsus$ social engineers exploited weak two-factor authentication. Something must be done! (Well, this is something.) ...
Security Boulevard
School bus

Ransomware in Schools: White House Wants Action NOW

| | Alejandro Mayorkas, Biden, Biden administration, Biden cybersecurity summit, Biden National Cybersecurity Strategy, Biden-Harris, Colorado, education, fcc, Federal Communications Commission, High school attacks, Jessica Rosenworcel, Joe Biden, K-12, K-12 Cloud Risks, K-12 Cloud Security, K-12 cybersecurity, K-12 Education, K-12 Schools, Keith Krueger, President Biden, Ransomware, SB Blogwatch, school, Schools, U.S. Federal Communications Commission, White House
Don’t make me tap the sign: Biden administration hosts summit; bangs heads together from government, school districts and industry ...
Security Boulevard
Load more