Reddit Hacked — 2FA is no Phishing Phix - Security Boulevard

Snoo Boo Boo: Reddit got hacked with a “sophisticated” spear phishing attack. The individual victim was an employee who clicked the wrong email link.

#FIDO2 / #WebAuthn to the rescue?

In today’s #SBBlogwatch, we open a stopwatch app to time the arms race.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/Kgoqr28BDy #phishing #MFA

— @Richi 🤓 Jennings (@RiCHi) February 10, 2023

Amazing Fast Crypto for IoT — US NIST Fingers ASCON - Security Boulevard

CAESAR Winner Wins Again: Implementing modern cryptography standards on tiny IoT devices is hard. They’re underpowered, need to sip battery charge and something like AES is often overkill.

3/ It’ll be useful on cheap, tiny devices such as #RFID chips (pictured), which cost about 25¢ (also pictured).

In today’s #SBBlogwatch, in #NIST we trust—or do we?

At @TechstrongGroup’s @SecurityBlvd: https://t.co/BJhZlTQFi2

— @Richi 🤓 Jennings (@RiCHi) February 9, 2023

Voice.ai ‘Stole’ Code ¦ AWS Gets Filthier - DevOps.com

The moral of the story: Life is a succession of lessons which, must be lived to be understood

In this week’s #TheLongView:
1⃣ Alleged theft of #GPL code by @getVoiceAI, and
2⃣ @Amazon will run its @AWSCloud #datacenters on gas.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/kr0OeCTPXj #DevOps

— @Richi 🤓 Jennings (@RiCHi) February 8, 2023

C-SCRM: We’re from the government — and we’re here to help with software supply chain security - ReversingLabs

CISA and FASC and NIST — oh my!
A whole alphabet soup of agencies, offices and councils are springing up in D.C. and beyond. They’re trying to help us with the software supply chain security problem.

3/ Sounds terrifying.

In this week’s #SSBlogwatch we remember Ronald Reagan.

For @ReversingLabs’ @SecuredSoftware: https://t.co/ribZWAd9BZ

— @Richi 🤓 Jennings (@RiCHi) February 7, 2023

Dutch Cops Bust ‘Exclu’ Messaging Service, Arrest 42 - Security Boulevard

Exclu Sieve: Crims are Dim
Police in the Netherlands broke open alleged drugs gangs by hacking an encrypted messenger service, Exclu. Lives were saved and alleged perps arrested.

3/ I think we can assume WhatsApp and Signal are still safe.

In today’s #SBBlogwatch, we have nothing to hide.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/FKB5eQdT7G

— @Richi 🤓 Jennings (@RiCHi) February 6, 2023