STOP: Opt out of phone numbers as authentication tokens - TechBeacon

It’s a numbers game: This week brings yet more examples of poor design. Specifically: Two apps trusting phone numbers without properly authenticating the actual user.

Watch out—these things come in threes. In this week’s #SecurityBlogwatch at @TechBeaconCom, we got the 411 (ask your parents): https://t.co/XUcOlw8rer

— @Richi 😷 Jennings (@RiCHi) April 15, 2021

YT$AW: FBI Cleans Up Exchange Servers, NSA Tips Microsoft 4 More Bugs - Security Boulevard

Feds Fix Fails Your tax dollars at work: The FBI and NSA have been helping fix the mess caused by the recent Microsoft Exchange hacking, and trying to prevent a further round of it.

“We’re from the government, and we’re here to help.” In today’s #SBBlogwatch at @SecurityBlvd, we’re careful what we wish for: https://t.co/0Oh8fWXdLe

— @Richi 😷 Jennings (@RiCHi) April 14, 2021

Son of Stuxnet? Iran Nuke Site Hacked ‘by Israel’ (Again) - Security Boulevard

Crystal Ball ain’t so Crystal Clear: Iran’s Nantaz nuclear centrifuge facility went dark yesterday. I can’t stand it—I know you planned it.

But something doesn’t add up. In today’s #SBBlogwatch at @SecurityBlvd, we can’t stand rocking when I’m in here: https://t.co/ZAX79I2d8P

— @Richi 😷 Jennings (@RiCHi) April 12, 2021