Log this: iOS and macOS zero-day patches roll; Apple devs under fire - TechBeacon

iFAIL:Apple is patching every current OS it has. WebKit has critical zero-day vulnerabilities, exploitable to execute arbitrary code on Macintosh, iPhone, iPad, and Apple Watch.

“Doesn’t play well with others,” is the damning report card. In this week’s #SecurityBlogwatch, Apple gets a failing grade.

At @TechBeaconCom: https://t.co/A8JTrT3gKr

— @Richi 😷 Jennings (@RiCHi) May 6, 2021

Specter of Spectre is Back, in New Micro-Op Cache Vuln - Security Boulevard

Worry, Worry—Super Scary: It’s been three years, but researchers have disclosed new attacks on speculative execution in Intel and AMD chips. Just be thankful they didn’t give it a catchy name, like Spectre.

There’s a lot to worry about in #BranchPrediction. In today’s #SBBlogwatch, we think happy thoughts. At @SecurityBlvd: https://t.co/kpaL8pTMal

— @Richi 😷 Jennings (@RiCHi) May 3, 2021

With iOS 14.5, Apple shifts peeping apps fight to the OS - TechBeacon

F vs. A—what about the ANG? Pay attention: An important trend is hiding amid the fluff and froth of a fanciful “feud” twixt Tim Cook and Mark Zuckerberg. Ignore the tech soap opera—you need to get ahead of the changes, so read on.

And #iOS 14.5 is part of the reason. In this week’s #SecurityBlogwatch, we finally cut through the fish-eye lens of tear-stained eyes. [You’re fired—Ed.]

At @TechBeaconCom: https://t.co/VOiZz68lK9

— @Richi 😷 Jennings (@RiCHi) April 29, 2021

U.S. DoD has World’s Largest Honeypot: 6% of Internet Space - Security Boulevard

DoD BGP Mystery Solved: 175 million IP addresses owned by the U.S. Defense Department have “appeared” on the public internet. Formerly unroutable, these address ranges are now being advertised by a previously-unknown contractor. But it’s all aboveboard, we’re told.

But he doesn’t look very military. Perhaps he’s in the Navy? In today’s #SBBlogwatch at @SecurityBlvd, we can sail the 0x07000000/8 seas. [You’re fired—Ed.]https://t.co/87KT89G8P1

— @Richi 😷 Jennings (@RiCHi) April 26, 2021

China Silently Hacked Gov’t and Defense for a Year or More - Security Boulevard

These Things Come In Threes:After the Russian SolarWinds hack and the Chinese Exchange débâcle, here’s the third shoe to drop. And again it’s China being fingered by researchers.

Evidence shows the hackers breaking in 10 MONTHS ago, with indications that they’ve been around for some time before that.

In today’s #SBBlogwatch at @SecurityBlvd, we can see where this is going: https://t.co/amquujOF7l

— @Richi 😷 Jennings (@RiCHi) April 23, 2021