Weekly Update 372

Presently sponsored by: Need centralized and real-time visibility into threat detection and mitigation? We got you! Discover the CrowdSec Console today.

Yes, the Lenovo is Chinese. No, I’m not worried about Superfish. Yes, I’m running windows. No, I don’t want a Framework laptop. Seemed to be a lot of time this week gone on talking all things laptops, and there are clearly some very differing

Continue reading Weekly Update 372

Weekly Update 371

Presently sponsored by: Got Linux? (And Mac and Windows and iOS and Android?) Then Kolide has the device trust solution for you. Click here to watch the demo.

So I wrapped up this week’s live stream then promptly blew hours mucking around with Zigbee on Home Assistant. Is it worth it, as someone asked in the chat? Uh, yeah, kinda, mostly. But seriously, having a highly automated house is awesome and I suggest that most people

Continue reading Weekly Update 371

Weekly Update 370

Presently sponsored by: Got Linux? (And Mac and Windows and iOS and Android?) Then Kolide has the device trust solution for you. Click here to watch the demo.

I did it again – I tweeted about Twitter doing something I thought was useful and the hordes did descend on Twitter to tweet about how terrible Twitter is. Right, gotcha, so 1.3M views of that tweet later… As I say in this week’s video, there’

Continue reading Weekly Update 370

Weekly Update 369

Presently sponsored by: Online fraud is everywhere. Secure your finances and personal info with Aura’s award-winning identity protection. Protect your identity now.

There seemed to be an awful lot of time gone on the 23andMe credential stuffing situation this week, but I think it strikes a lot of important chords. We’re (us as end users) still reusing credentials, still not turning on MFA and still trying to sue when we

Continue reading Weekly Update 369

Weekly Update 368

Presently sponsored by: Online fraud is everywhere. Secure your finances and personal info with Aura’s award-winning identity protection. Protect your identity now.

This must be my first “business as usual” weekly update since August and damn it’s nice to be back to normal! New sponsor, new breaches, new blog post and if you’re in this part of the world, a brand new summer creeping over the

Continue reading Weekly Update 368

Safe, Secure, Anonymous, and Other Misleading Claims

Presently sponsored by: NTT’s Samurai XDR offers affordable enterprise-grade security for businesses of any size. $40 /endpoint/year. Try it free for 30 days!

Imagine you wanted to buy some shit on the internet. Not the metaphorical kind in terms of “I bought some random shit online”, but literal shit. Turds. Faeces. The kind of thing you never would have thought possible to buy online until… Shitexpress came along. Here’s

Continue reading Safe, Secure, Anonymous, and Other Misleading Claims

Weekly Update 363

Presently sponsored by: Fastmail. Check out Masked Email, built with 1Password. One click gets you a unique email address for every online signup. Try it now!

I’m super late pushing out this week’s video, I mean to the point where I now have a couple of days before doing the next one. Travel from the opposite side of the world is the obvious excuse, then frankly, just wanting to hang out with

Continue reading Weekly Update 363

68k Phishing Victims are Now Searchable in Have I Been Pwned, Courtesy of CERT Poland

Presently sponsored by: Fastmail. Check out Masked Email, built with 1Password. One click gets you a unique email address for every online signup. Try it now!

Last week I was contacted by CERT Poland. They’d observed a phishing campaign that had collected 68k credentials from unsuspecting victims and asked if HIBP may be used to help alert these individuals to their exposure. The campaign began with a typical email requesting more information:

In this

Continue reading 68k Phishing Victims are Now Searchable in Have I Been Pwned, Courtesy of CERT Poland

Data From The Qakbot Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI

Presently sponsored by: Fastmail. Check out Masked Email, built with 1Password. One click gets you a unique email address for every online signup. Try it now!

Today, the US Justice Department announced a multinational operation involving actions in the United States, France, Germany, the Netherlands, and the United Kingdom to disrupt the botnet and malware known as Qakbot and take down its infrastructure. Beyond just taking down the backbone of the operation, the FBI began actively

Continue reading Data From The Qakbot Malware is Now Searchable in Have I Been Pwned, Courtesy of the FBI

Weekly Update 362

Presently sponsored by: Unpatched devices keeping you up at night? Kolide can get your entire fleet updated in days. It’s Device Trust for Okta. Watch the demo!

Somehow in this week’s video, I forgot to talk about the single blog post I wrote this week! So here’s the elevator pitch: Cloudflare’s Turnstile is a bot-killing machine I’ve had enormous success with for the “API” (quoted because it&

Continue reading Weekly Update 362