Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Watering hole attacks targeting Python developers are continuing, with attacks targeting the PyPi package repo getting so bad the site has temporarily suspended new account signups — www.bleepingcomputer.com/… Attackers are continuing to succeed in […]
Continue readingMore TagAuthor: Bart Busschots
Security Bits — 17 March 2024 ☘️
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Ransomeware-related developments: The apparent return of the BlackCat ransomeware gang after their recent law enforcement take-down appears to have been short-lived, with the group collapsing with an apparent exit scam: BlackCat Ransomware Group Implodes […]
Continue readingMore TagSecurity Bits — 3 March 2024
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Another defeat for the NSO group: 🇺🇸 U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsApp — thehackernews.com/… 🇺🇸 Microsoft have finally followed through on their promise to the US […]
Continue readingMore TagSecurity Bits — 18 February 2024
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. It’s not just in Google Search Results that malicious ads are getting through ATM: Facebook ads push new Ov3r_Stealer password-stealing malware — www.bleepingcomputer.com/… (The lure is different though, job ads with malicious PDF downloads, […]
Continue readingMore TagSecurity Bits — 4 February 2024
<li>## Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Apple have released iOS 17.3, which includes the new Stolen Device Protection mode designed to thwart the recent spike in iPhone thefts by thieves who have observed or socially engineered passcodes allowing them […]
Continue readingMore TagSecurity Bits — 21 January 2024
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. We warned about this then-unpatched flaw a few weeks ago, now there’s a fix: Apple patches security flaw that allowed Magic Keyboard Bluetooth connections to be faked — appleinsider.com/… Kaspersky have developed and released […]
Continue readingMore TagSecurity Bits — 3 January 2024 (Bart & Jill from the North Woods)
Deep Dive — Operation Triangulation TL;DR — Kaspersky labs have discovered that they, and Russian government officials, were targeted by very advanced iOS malware that completely took over iOS devices for the last 4 years. Apple have patched all the exploited vulnerabilities, regular users were not targeted, and Kaspersky say there is not enough evidence […]
Continue readingMore TagThe World’s Most Expensive Sour Raisins – a Story of Dark Patterns
We’ve mentioned dark patterns a few times on Security Bits over the years, they are commonly used design techniques engineered to be effective at tricking humans. They are the dark side of one of the areas of computer science enjoyed most when studying for my degree back at the turn of the century — HCI […]
Continue readingMore TagSecurity Bits — 22 December 2023
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Push Notification Law Enforcement Requests: shortly after we recorded the previous instalment Apple updated their process for law enforcement to request push notification metadata from Apple, now lining their process up with Google’s to […]
Continue readingMore TagSecurity Bits — 10 December 2023
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Allison was sceptical that Google really would move to eliminate 3rd-party cookies in 2024, but they put a little wood behind the proverbial arrow this week: Google is phasing out ad personalization for some […]
Continue readingMore Tag