Teenage Hackers Must be Stopped: US DHS’s CSRB Report - Security Boulevard

TL;DR: 2FA SMS FAIL

:@DHSgov’s report into last year’s #Lapsus$ attacks is finally public. #CSRB came to the oh-so-insightful conclusion that people shouldn’t use #SMS #2FA.

Duh. In today’s #SBBlogwatch, we waited 18 months for this? At @TechstrongGroup’s @SecurityBlvd: https://t.co/J0bVOUIayp

— @Richi 🤓 Jennings (@RiCHi) August 11, 2023

Google’s Shiny New AI Dev Environment — the ‘Experimental’ Project IDX - DevOps.com

The moral of the story: You live once and life is wonderful, so eat the damned red velvet cupcake

In this week’s #TheLongView: @Google’s full-stack, browser based development environment in the cloud. It’s not just a #Copilot clone, but aims to help you “get an app from zero to production.”

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/Cp2d9LIZsA #DevOps #ProjectIDX #AI

— @Richi 🤓 Jennings (@RiCHi) August 10, 2023

Ransomware in Schools: White House Wants Action NOW - Security Boulevard

Don’t make me tap the sign:

#Ransomware scrotes attacking public schools is a huge problem. And it’s getting worse—especially in primary and secondary.

But where’s the money coming from? In today’s #SBBlogwatch, we wonder if localism works. At @TechstrongGroup’s @SecurityBlvd: https://t.co/iJmAmHHJcK

— @Richi 🤓 Jennings (@RiCHi) August 9, 2023

Listen up, devs: AI trained to overhear passwords - ReversingLabs

Sing loudly at login:

Researchers trained #DeepLearning model with keypress sounds from Apple laptops. If it can hear you type, it can predict your credentials — with scary accuracy.

Yes, even over Zoom. In this week’s #SSBlogwatch we turn up the music. For @ReversingLabs: https://t.co/r3TjsbiUWn

— @Richi 🤓 Jennings (@RiCHi) August 8, 2023

How to Get Unlimited Airline Miles: Researchers Find the Cheat Codes - Security Boulevard

Points of Interest:

Ethical hackers found huge bugs in @PointsLoyalty. The ease with which the team found them is kinda worrying.

In today’s #SBBlogwatch, we wonder what else is lurking that lets scrotes steal quasi-currency. At @TechstrongGroup’s @SecurityBlvd: https://t.co/4446lFAmxn

— @Richi 🤓 Jennings (@RiCHi) August 7, 2023