AI Slop is Hurting Security — LLMs are Dumb and People are Dim

Artificial stupidity:

Post by @richi@vmst.io

View on Mastodon

Critical OpenWrt Bug: Update Your Gear!

ASU 48-bit trash hash:

Post by @richi@vmst.io

View on Mastodon

Stoli Vodka: Bankrupt After Ransomware Attack

Absolutely un-fabulous:

Post by @richi@vmst.io

View on Mastodon

China is Still Inside US Networks — It’s Been SIX Months

Hell froze over:

Post by @richi@vmst.io

View on Mastodon

QNAP’s Buggy Security Fix Causes Chaos

RAID FAIL:

Post by @richi@vmst.io

View on Mastodon

Here’s Yet Another D-Link RCE That Won’t be Fixed

D-Licious:

Post by @richi@vmst.io

View on Mastodon

Microsoft Veeps Ignite Fire Under CrowdStrike

BSODs begone!

Post by @richi@vmst.io

View on Mastodon

These 20 D-Link Devices Have Critical RCE Bug — but NO Patch NEVER

‘Bobby’ flaw flagged WONTFIX:

Post by @richi@vmst.io

View on Mastodon

Schneider Electric Confirms Ransom Hack — Hellcat Demands French Bread as ‘Joke’

That’s a lot of pain:

Post by @richi@vmst.io

View on Mastodon

Ô! China Hacks Canada too, Says CCCS

Plus brillants exploits:

Post by @richi@vmst.io

View on Mastodon

TikTok ‘Infinite Money Glitch’ — Idiots Chased by JPMorgan

Dimon’s dollars (not yours):

Post by @richi@vmst.io

View on Mastodon

100 MILLION Americans in UnitedHealth PII Breach

Not cute:

Post by @richi@vmst.io

View on Mastodon

FortiJump: Yet Another Critical Fortinet 0-Day RCE

FortiFAIL:

Post by @richi@vmst.io

View on Mastodon

Apple Enrages IT — 45-Day Cert Expiration Fury

CA/B testing:

Post by @richi@vmst.io

View on Mastodon

(In)Fidelity Admits Data Breach 8 Weeks Ago — 77K PII Lost

FMR FAIL:

Post by @richi@vmst.io

View on Mastodon

Digital Crack for Kids: TikTok Sued Again by 14 AGs

For You Plague:

Post by @richi@vmst.io

View on Mastodon

Biggest Ever DDoS is Threat to OT Critical Infrastructure

Egyptian River Floods:

Post by @richi@vmst.io

View on Mastodon

Kia’s Huge Security Hole: FIXED (Finally)

Connected cars considered crud:

Post by @richi@vmst.io

View on Mastodon

E2EE is MIA in iPhone/Android Chat — GSMA Gonna Fix it

No More Barf-Green Bubbles?

Post by @richi@vmst.io

View on Mastodon

Microsoft Fixes Four 0-Days — One Exploited for SIX YEARS

Week B: Bugs Begone!

Russian ‘WhisperGate’ Hacks: 5 More Indicted

Eaten by a GRU:

Yikes, YubiKey Vulnerable — ‘EUCLEAK’ FIDO FAIL?

USB MFA SCA😱:

China Cyberwar Coming? Versa’s Vice: Volt Typhoon’s Target

Xi whiz:

‘Terrorgram’ Telegram Terrorists Trash Transformers — Grid in Peril

Should’ve listened to Edison:

Pig Butchering at Heart of Bank Failure — CEO Gets 24 Years in Jail

Oink, oink, FAIL—you’re in jail:

Patch Tuesday not Done ’til LINUX Won’t Run?

Redmond reboot redux:

Don’t Mess With Texas Privacy: AG Sues GM for $18 BILLION

KP♡TX PII:

August Patch Pileup: Microsoft’s Zero-Day Doozy Dump

See These CVEs:

WTH? DPRK WFH Ransomware Redux: 3rd Person Charged

친애하는 리더의 풀 리퀘스트

Student Devices Wiped — Mobile Guardian Hacked AGAIN

Hackers ate my homework:

TikTok Abuses Kids, say DoJ and FTC

For You Plague:

Prisoner Swap: Huge Russian Hackers Freed — Seleznev and Klyushin

Pragmatic politics:

CrowdStrike Sued? — Delta Dials David Boies

Is Delta the First of Many?

WTH? Google Auth Bug Lets Hackers Login as You

G Suite Sours:

PKfail: 800+ Major PC Models have Insecure ‘Secure Boot’

Big BIOS bother:

CrowdStrike Admits it Doesn’t ‘Canary’ Test all Updates

Corporate incompetence:

EFF Angry as Google Keeps 3rd-Party Cookies in Chrome

Regulatory capture by stealth?

Worldwide Outages Caused by CrowdStrike Security Tool

BSODs beyond belief:

Disney 1.2 TB Slack Hack: NullBulge Claims Leak is its Own

Steamboat bloat:

Squarespace Hacked — DeFi Wallets Drained (Imaginary Money Stolen)

DeFAIL:

AT&T Says 110M Customers’ Data Leaked — Yep, it’s Snowflake Again

Should’ve used #MFA:

‘Blast-RADIUS’ Critical Bug Blows Up IT Vacation Plans

#MD5 #MITM Muddle:

Biggest Ever Password Leak — but is ObamaCare’s RockYou2024 Really NEW?

Credential crunch:

‘Polyfill’ Supply Chain Threat: 4x Worse Than We Thought

Spackle attack:

‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE

Tim looks grim:

‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk

SolarWinds hackers strike again:

Temu is Malware — It Sells Your Info, Accuses Ark. AG

“Temu can Recompile Itself”

WordPress Plugin Supply Chain Attack Gets Worse

800 Million Ostriches Can’t Be Wrong:

Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive

Microsoft hates you, too:

30,000 Dealerships Down — ‘Ransomware’ Outage Outrage no. 2 at CDK Global

Spend more on security!

EU Aims to Ban Math — ‘Chat Control 2.0’ Law is Paused but not Stopped

E2EE vs. EU: FIGHT!

ASUS Router User? Patch ASAP!

Or junk it if EOL:

Recall ‘Delayed Indefinitely’ — Microsoft Privacy Disaster is Cut from Copilot+ PCs

Copilot Plus? More like Copilot Minus:

Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk

Location tracking service leaks PII, because—incompetence? Seems almost TOO easy.

Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked

Not our fault, says CISO:

LockBit Victim? Ask FBI for Your Ransomware Key

Spy warez:

Microsoft Recall is a Privacy Disaster

Recall Recall?

Was the Ticketmaster Leak Snowflake’s Fault?

Affecting the Streisand Effect:

Google Hates Ad Blockers: Manifest V3 Push Starts Today

Manifest V3 Destiny:

‘Pumpkin Eclipse’ — 600,000+ Rural ISP Routers Bricked Beyond Repair

Daft name, serious risk:

Ticketmaster Hack Ticks Off 560M Customers in 1.3TB Breach

Hidden 5% Fee Added to Ransom

‘Microsoft’ Scammers Steal the Most, says FTC

Pork Talk:

Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

Inglorious Basta(rds):

Apple API Allows Wi-Fi AP Location Tracking

Privacy FAIL:

CFO Deepfake Redux — Arup Lost $26M via Video

Deepfake Zoom of Doom:

North Korea IT Worker Scam Brings Malware and Funds Nukes

WTH? DPRK IT WFH!

Dell Hell Redux — More Personal Info Stolen by ‘Menelik’

Phish Ahoy!

FBI/CISA Warning: ‘Black Basta’ Ransomware Gang vs. Ascension Health

Будет!

TikTok Ban — ByteDance Sues US to Kill Bill

PAFACA SueTok:

Germany Warns Russia: Hacking Will Have Consequences

War of the words:

GitLab ‘Perfect 10’ Bug Gets a CISA Warning: PATCH NOW - Security Boulevard

Password reset FAIL:

Dropbox Hacked: eSignature Service Breached - Security Boulevard

Drop Dropbox?

Brits Ban Default Passwords — and More IoT Stupidity - Security Boulevard

Nice Cup of IoTea?

South Korean iPhone Ban: MDM DMZ PDQ - Security Boulevard

MDM Hindered:

House Passes Privacy-Preserving Bill, but Biden Blasts it - Security Boulevard

Are you a FANFSA fan?

SIM Swappers Try Bribing T-Mobile and Verizon Staff $300 - Security Boulevard

Not OK: #SMS #2FA

Sisense Hacked: CISA Warns Customers at Risk - Security Boulevard

A hard-coded credential catastrophe:

Watch This? Patch This! LG Fixes Smart TV Vulns - Security Boulevard

4×CVE=RCE or Merely CE?

Here Comes the US GDPR: ‘APRA’ — the American Privacy Rights Act - Security Boulevard

Enter the lobbyists:

FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair? - Security Boulevard

Fast enough for government work:

Biden Review Board Gives Microsoft a Big, Fat Raspberry - Security Boulevard

#Storm0558 forecast:

Chrome’s Incognito Mode Isn’t as Private as You Think — but Google’s Not Sorry - Security Boulevard

Short term gain for long term pain?

PyPI Goes Quiet After Huge Malware Attack: 500+ Typosquat Fakes Found - Security Boulevard

Emergency stop button:

Apple OTP FAIL: ‘MFA Bomb’ Warning — Locks Accounts, Wipes iPhones - Security Boulevard

Apple OTP FAIL:

Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data - Security Boulevard

Meta MITM IAAP SSL bump:

Telegram Privacy Nightmare: Don’t Opt In to P2PL - Security Boulevard

Scary SMS shenanigans:

China Steals Defense Secrets ‘on Industrial Scale’ - Security Boulevard

#UNC5174 ❤ #UNC302:

Apple M-Series FAIL: GoFetch Flaw Finds Crypto Keys - Security Boulevard

GoFAIL:

EPA and White House Raise Alarm on Water Cybersecurity - Security Boulevard

#Iran and #China fingered:

TikTok ‘Ban’ — ByteDance CEO and EFF are BFFs - Security Boulevard

7521 momentum builds:

French Gov. Leaks 43 Million People’s Data — ‘France Travail’ Says Sorry - Security Boulevard

La grande #cybermalveillance:

Google Splashes the Cash in Bug Bounty Bonanza: $59 Million to Date - Security Boulevard

Wanna be a #VRP VIP?

Irony of Ironies: CISA Hacked — ‘by China’ - Security Boulevard

Free rides and traffic jams:

TikTok Ban Incoming — but ByteDance Fights Back - Security Boulevard

Hilltop BillTok:

Facebook/Insta FAIL — ‘Anonymous Sudan’ has a Super Tuesday: ‘We Did It.’ - Security Boulevard

Shooper Choosday:

Self-Replicating AI Malware is Here😱 #ComPromptMized

Skrik:

Cheap Video Doorbell Cams: Tools of Stalkers and Thieves - Security Boulevard

EKEN #IoT FAIL:

GitHub Fights Forks — Millions of Them — Huge Software Supply Chain Security FAIL - Security Boulevard

Forking hell:

FBI Warns: Ubiquiti EdgeRouter is STILL Not Secure - Security Boulevard

GRU #APT28 is back again:

US Will Fight Russian Disinformation — Hacks and Leaks and Deepfakes, Oh My! - Security Boulevard

Pay no attention to that man:

PRC State Hacking: ‘Chinese Edward Snowden’ Spills I‑Soon Secrets in Huge Dump of TTPs - Security Boulevard

Underpaid, overworked and angry:

‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞 - Security Boulevard

Mic Check:

LockBit Takedown by Brits — Time for ‘Operation Cronos’ - Security Boulevard

RaaS nicked:

DoD Email Breach: Pentagon Tells Victims 12 Months Late - Security Boulevard

3TB Email FAIL:

ALERT: Thieves❤️Wi-Fi Camera Jammers - Security Boulevard

I❤️POE:

‘Incompetent’ FCC Fiddles With Data Breach Rules - Security Boulevard

FCC FAIL:

Linux Vendors Squawk: PATCH NOW — CVSS 9.8 Bootkit Bug in shim.efi - Security Boulevard

Snow joke:

‘Total Bollocks’ — No, Your Toothbrush isn’t DDoS’ing - Security Boulevard

PR FAIL:

CFO Deepfake Fools Staff — Fakers Steal $26M via Video - Security Boulevard

Bad hoax blood:

Microsoft Ditches C# for Rust: M365 Core Gets Safety and Perf Boosts - Security Boulevard

C# — Rust in peas:

FBI Warning: China Will Hack US Infra. (via Router Botnet) - Security Boulevard

a/k/a BRONZE SILHOUETTE:

Russian Internet Outage: DNSSEC Oops or Ukraine Hack? - Security Boulevard

It was DNS. It’s always #DNS:

‘Extremely serious’ — Mercedes-Benz Leaks Data on GitHub - Security Boulevard

Oh, Lord:

Malicious AdTech Spies on People as NatSec Targets - Security Boulevard

Targeted ads target targets:

‘Mother of all Breaches’ Leaks — 26 BILLION Records from 12TB Open Bucket - Security Boulevard

Less MOAB, more NOW:

Russia Hacked Microsoft Execs — SolarWinds Hackers at it Again - Security Boulevard

AKA #APT29:

Massive ‘New’ Leaked Credentials List: Naz.API Pwns Troy - Security Boulevard

Have I been pwned? Yes, you probably have.

Apple Smashes Ban Hammer on Beeper iMessage Users - Security Boulevard

Empire strikes back:

OpenAI: We’ll Stop GPT Misuse for Election Misinfo - Security Boulevard

Guardrails Prevent Trouble?

Ivanti VPN Zero-Day Combo Chained ‘by China’ - Security Boulevard

I’d normally yell PATCH NOW — but you can’t:

NoaBot Pwns Hundreds of SSH Servers as Crypto Miners - Security Boulevard

‘hi’

China Cracks Apple Private Protocol — AirDrop Pwned - Security Boulevard

AirDrop hashing is weaksauce:

23andMe: It’s YOUR Fault We Lost Your Data - Security Boulevard

Am I my brother's keeper?

Facebook’s New Privacy Nightmare: ‘Link History’ - Security Boulevard

How stupid does he think we are?

Google Whistles While OAuth Burns — ‘MultiLogin’ 0-Day is 70+ Days Old - Security Boulevard

What a Mickey Mouse operation