STUPID Microsoft U-Turn: Unblocks Malicious Macros in Office - Security Boulevard

VBA FAIL 365: Microsoft stunned security professionals by reversing a change that prevents Office from auto-running macros. So don’t expect the malware problem to improve any time soon.

It’s the age-old tension of security vs. ease of use.

In today’s #SBBlogwatch, we blame lazy customers and lazier product management.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/QfIOo9rvK3

— @Richi 🤓 Jennings (@RiCHi) July 8, 2022

Dev Job Phisher Steals $540M | Patch OpenSSL NOW | Systemd Dev Joins Microsoft - DevOps.com

Be great in act, as you have been in thought:

In this week’s #TheLongView:
1⃣ #SpearPhishing causes $540 million loss,
2⃣ a high severity bug in #OpenSSL might be “worse than Heartbleed,” and
3⃣ Lennart “@pid_eins” Poettering is now working for @Microsoft.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/6iY10dZWu2 #DevOps

— @Richi 🤓 Jennings (@RiCHi) July 7, 2022

Devs: Don’t do DIY cryptography — Police CyberAlarm shows why - ReversingLabs

Wake up—don’t snooze: It’s a truism often repeated: Don’t roll your own cryptography! There are countless traps laying in wait for the unwary—so stick to trusted, tested libraries and beware the unknown unknowns.

When it comes to cryptography, we simply don’t know what we don’t know.

In this week’s #SSBlogwatch, Messrs. Dunning and Kruger would like a word.

For @ReversingLabs’ @SecuredSoftware: https://t.co/Ciga0PTSoq

— @Richi 🤓 Jennings (@RiCHi) July 7, 2022

‘ChinaDan’ Hacks 1 BILLION Police Records from Shanghai: 23TB of PII for Sale - Security Boulevard

CCP LOL—SHGA PII BBQ: “China’s Largest Data Leak” is causing a kerfuffle in Beijing. A hacker calling themself ChinaDan is holding 23 terabytes of personal data for ransom.

Predictably, the #ChineseCommunistParty is censoring news of the leak.

In today’s #SBBlogwatch, we we don’t expect to be read behind The Great Firewall.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/hEQB7ISiLr

— @Richi 🤓 Jennings (@RiCHi) July 5, 2022