US Gov’t Flip-Flops on NSO Group Sale to L3Harris - Security Boulevard

POTUS vs. CIA and FBI: NSO Group, notorious makers of the notorious Pegasus spyware, has been in acquisition talks with a huge U.S. government defense contractor you’ve never heard of: L3Harris Technologies, Inc. Doesn’t that give you a warm, tingly feeling inside?

But is everything quite as it seems?

In today’s #SBBlogwatch, we pay attention to the man behind the curtain.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/553FmqZ132

— @Richi 🤓 Jennings (@RiCHi) July 11, 2022

STUPID Microsoft U-Turn: Unblocks Malicious Macros in Office - Security Boulevard

VBA FAIL 365: Microsoft stunned security professionals by reversing a change that prevents Office from auto-running macros. So don’t expect the malware problem to improve any time soon.

It’s the age-old tension of security vs. ease of use.

In today’s #SBBlogwatch, we blame lazy customers and lazier product management.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/QfIOo9rvK3

— @Richi 🤓 Jennings (@RiCHi) July 8, 2022

Dev Job Phisher Steals $540M | Patch OpenSSL NOW | Systemd Dev Joins Microsoft - DevOps.com

Be great in act, as you have been in thought:

In this week’s #TheLongView:
1⃣ #SpearPhishing causes $540 million loss,
2⃣ a high severity bug in #OpenSSL might be “worse than Heartbleed,” and
3⃣ Lennart “@pid_eins” Poettering is now working for @Microsoft.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/6iY10dZWu2 #DevOps

— @Richi 🤓 Jennings (@RiCHi) July 7, 2022

Devs: Don’t do DIY cryptography — Police CyberAlarm shows why - ReversingLabs

Wake up—don’t snooze: It’s a truism often repeated: Don’t roll your own cryptography! There are countless traps laying in wait for the unwary—so stick to trusted, tested libraries and beware the unknown unknowns.

When it comes to cryptography, we simply don’t know what we don’t know.

In this week’s #SSBlogwatch, Messrs. Dunning and Kruger would like a word.

For @ReversingLabs’ @SecuredSoftware: https://t.co/Ciga0PTSoq

— @Richi 🤓 Jennings (@RiCHi) July 7, 2022

‘ChinaDan’ Hacks 1 BILLION Police Records from Shanghai: 23TB of PII for Sale - Security Boulevard

CCP LOL—SHGA PII BBQ: “China’s Largest Data Leak” is causing a kerfuffle in Beijing. A hacker calling themself ChinaDan is holding 23 terabytes of personal data for ransom.

Predictably, the #ChineseCommunistParty is censoring news of the leak.

In today’s #SBBlogwatch, we we don’t expect to be read behind The Great Firewall.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/hEQB7ISiLr

— @Richi 🤓 Jennings (@RiCHi) July 5, 2022