Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Apple have decided to end their case against the NSO Group (authors of the infamous Pegasus spyware) because disclosure could do more harm to users than letting the NSO group off the hook — […]
Continue readingMore TagTag: patch
Security Bits — 17 March 2024 ☘️
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Ransomeware-related developments: The apparent return of the BlackCat ransomeware gang after their recent law enforcement take-down appears to have been short-lived, with the group collapsing with an apparent exit scam: BlackCat Ransomware Group Implodes […]
Continue readingMore TagSecurity Bits — 29 October 2023
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Passkeys continue to roll out: Google Adopts Passkeys as Default Sign-in Method for All Users — thehackernews.com/… Amazon adds passkey support as new passwordless login option — www.bleepingcomputer.com/… Deep Dive 1 — iLeakage TL;DR […]
Continue readingMore TagSecurity Bits — 9 July 2023
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. We now have more details on how iOS 17’s new Check In safety feature will work: www.macobserver.com/… 🇪🇺 Six companies have confirmed to the EU Commission that they will fall under the Digital Markets […]
Continue readingMore TagSecurity Bits — 25 June 2023
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Thanks to the iOS 17 & macOS Sonoma Betas we now know more about how password sharing in iCloud Keychain will work — www.macobserver.com/… (iOS) & appleinsider.com/… (macOS) Everyone needs to have an iCloud […]
Continue readingMore Tag
Security Bits — 23 December 2022 🎄
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇺🇸 Apple have released their opt-in new Advanced Data Protection for iCloud , but only in the US for now — appleinsider.com/… At least initially, enabling ADP could complicate the setup of new devices […]
Continue readingMore TagSecurity Bits with Bart Busschots — 12 June 2022
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇺🇸 An interesting (and slightly depressing) look at the DOJ’s change in official policy around the CFAA from the security researcher’s POV: What Counts as “Good Faith Security Research?” — krebsonsecurity.com/… Social Media Developments […]
Continue readingMore TagSecurity Bits — 23 January 2022
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇺🇸 Un-redactions in an ongoing antitrust case against Google led by the state of Texas have revealed more details on how Google abuse their position of power in the ad world — in effect, […]
Continue readingMore TagSecurity Bits — 12 December 2021
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇺🇸 🇺🇬 Apple informed the US State Department that at least 9 iPhones used by their staff were infected with the NSO Group’s Pegasus malware. It’s not clear which NSO Group customer is responsible, […]
Continue readingMore TagSecurity Bits — 14 November 2021
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Following on from our discussion of 2FA bypasses by tricking people into giving up their one-time-passwords, Vice did a detailed article describing one of the new 2FA-bypass-as-a-service cybercrime offerings: The Booming Underground Market for […]
Continue readingMore Tag