Update: Log4Shell RCE Zero-Day—Reactions and Recriminations - Security Boulevard

Java Considered Harmful: Last week’s critical bug in Log4j still reverberates ’round the racks. Disbelief quickly gave way to denial and bargaining.

Next up: Depression and acceptance. In today’s #SBBlogwatch, we wave goodbye to @Java.

At @SecurityBlvd: https://t.co/vKl9vMyGq6

— @Richi 😷 Jennings (@RiCHi) December 13, 2021

Google Nukes Ad-Blockers—Manifest V3 is Coming - Security Boulevard

Manifest Destiny: Firefox? Makers of ad-blocker and anti-tracking browser extensions are spitting blood. Google is planning to change everything, removing features in the Chrome browser APIs that these extensions rely on.

Google calls it #ManifestV3. EFF calls it a “conflict of interest.” In today’s #SBBlogwatch, we call it deeply suspicious.

At @SecurityBlvd: https://t.co/8iRJMo74kL

— @Richi 😷 Jennings (@RiCHi) December 10, 2021

AWS Outage Outrage | Rusty Linux | ARM Latest - DevOps.com

The Moral of the Story: It’s no secret that the both of us are running out of time

In this week’s #TheLongView:
1⃣ Amazon Web Services/@AWSCloud falls on its face,
2⃣ #Linux’s move to #Rust takes the next step, and
3⃣ the @FTC stabs another fatal wound in the horrible @Arm/@Nvidia deal.

At @DevOpsDotCom: https://t.co/q6qyvMhqNJ

— @Richi 😷 Jennings (@RiCHi) December 9, 2021

Microsoft Whac-A-Moles Websites of Chinese Hackers APT15 (‘NICKEL’) - Security Boulevard

Vixen Panda, Royal Dragon: Microsoft issued another of its “look how clever we are” press releases yesterday. It claims to be thwarting Chinese hackers it codenames NICKEL.

It’s not the first time we’ve seen @Microsoft try this tactic. In today’s #SBBlogwatch, we wonder if it actually does any good.

At @SecurityBlvd: https://t.co/BV5CKz4W8u

— @Richi 😷 Jennings (@RiCHi) December 7, 2021

Home Routers are Full of Security Bugs—Patch NOW - Security Boulevard

Cheap, Lazy Vendors: Researchers running automated pentests against nine consumer routers discovered a bucketful of bugs. Vendors such as TP-Link and Linksys came off worst.

So, yes, check for #patches—even if your router isn’t one of the ones tested. In today’s #SBBlogwatch, we don’t trust the auto-update feature.

At @SecurityBlvd: https://t.co/7IR8yuccRd

— @Richi 😷 Jennings (@RiCHi) December 6, 2021