COSMICENERGY: ‘Russian’ Threat to Power Grids ICS/OT - Security Boulevard

IEC 60870-5-104 ‘insecure by design’:

New #malware that disrupts #electricity #grid​s. The threat, dubbed #COSMICENERGY, shares DNA with other nasties.

And, yes, it appears to come from #Russia. In today’s #SBBlogwatch, we беспокоимся о будущем. At @TechstrongGroup’s @SecurityBlvd: https://t.co/60TFPSqTH6 #ICS

— @Richi 🤓 Jennings (@RiCHi) May 26, 2023

US DoJ Makes PyPI Give Up User Data ¦ Tape Storage: Not Dead - DevOps.com

The moral of the story: The report of my death has been grossly exaggerated

In this week’s #TheLongView:
1⃣ @PyPI complies with a “string of subpoenas,” and
2⃣ #LTO continues to grow, despite predictions of its demise.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/a9wWCbJgCv #DevOps

— @Richi 🤓 Jennings (@RiCHi) May 25, 2023

‘BrutePrint’ Unlocks Android Phones — Chinese Researchers - Security Boulevard

SPI/TEE MITM FAIL:

A brace of 0-days allow them to unlock @Android phones with a fake #fingerprint. They’ve dubbed it #BrutePrint.

Check your #ThreatModel for broken #biometrics. In today’s #SBBlogwatch, we touch on all the issues.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/iGrXGStaae

— @Richi 🤓 Jennings (@RiCHi) May 24, 2023

PyPI paused as automated attack overwhelms admins - ReversingLabs

Python team needs a rest:

:@PyPI under attack from bots at weekend. Bad actors submitting malicious packages with names similar to established deps.

Yet another scary illustration of fragile #SoftwareSupplyChain​s. In this week’s #SSBlogwatch we look deeper.

For @ReversingLabs: https://t.co/ahUzInOJjM

— @Richi 🤓 Jennings (@RiCHi) May 23, 2023

Facebook Fined $1.3B — Zuckerberg Furious in GDPR Fight - Security Boulevard

GDPR Move for Mark’s Money: No legal way to move Europeans’ data to the US since 2015. Cloud industry better take note.

:@EUintheUS slaps €1.2B fine on @Meta. For @Facebook’s illegal processing of data in US—where there’s no #privacy law.

It’s taken 10 years already. In #SBBlogwatch, we see this rumbling on for another decade.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/cb6h0Zk1aO #GDPR

— @Richi 🤓 Jennings (@RiCHi) May 22, 2023