Twilio Fails Simple Test — Leaks Private Data via Phishing - Security Boulevard

“Sophisticated” Sophistry: Twilio (NYSE:TWLO) customer data has leaked—after a simple phishing attack on employees. The firm isn’t saying how many end-users are affected, but it could run into the millions.

… Twilio PR is spinning it as a “sophisticated” attack.

In today’s #SBBlogwatch, we just point and laugh.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/nRi20mV3u7

— @Richi 🤓 Jennings (@RiCHi) August 9, 2022

Slack App Leaked Hashed User Passwords for 5 YEARS - Security Boulevard

‘One Way’ Hash — Yeah, Right: Since 2017, if you’ve invited anyone to a Slack workspace, your password has leaked—albeit in the form of a salted hash. People are asking how this could have happened, and how it remained undetected for so long—more than five years.

Egg on someone’s face at @SlackHQ.

In today’s #SBBlogwatch, we double-check our password manager.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/caOOEwyWZ1

— @Richi 🤓 Jennings (@RiCHi) August 8, 2022

US Emergency Alert System Has ‘Huge Flaw’ — Broadcasters Must Patch NOW - Security Boulevard

EAS FAIL: FEMA IPAWS The Emergency Alert System (EAS) run by FEMA and the FCC is vulnerable to hacking. Imagine the vast potential for panic and chaos if a fake alert was widely broadcast.

This is NOT a test.

In today’s #SBBlogwatch, we fear a *real* emergency.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/3mrQ1zDYz4

— @Richi 🤓 Jennings (@RiCHi) August 5, 2022

Recession! DevOps Hiring Freeze | Data Centers Suck (Power) | Intel to ‘be’ Wi-Fi 7 - DevOps.com

The moral of the story: There’s no point in questioning authority if you aren’t going to listen to the answers

In this week’s #TheLongView:
1⃣ Engineer #jobs are being cut, #hiring
2⃣ #cloud infrastructure is using too much #energy, and
3⃣ @Intel’s 802.11be silicon is alive. #WiFi7

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/AOQdR9Z2b4 #DevOps #thanks @ShaeFlorentine

— @Richi 🤓 Jennings (@RiCHi) August 4, 2022

Post-quantum algo ‘SIKE’ dead: Did math geeks find key-encap back door? - ReversingLabs

NIST nixes PQC postulant: Here’s more on NIST’s search for post-quantum cryptography (PQC): This week, is it in trouble? Breathless headlines would have you believe it, because researchers found a way to easily break the SIKE key encapsulation algorithm.

… @CosicBe researchers Wouter Castryck and Thomas Decru are eligible for a chunky #BugBounty.

In this week’s #SSBlogwatch we’re glad to see the system is working, not broken.

For @ReversingLabs’ @SecuredSoftware: https://t.co/lp9Ar4HrHB

— @Richi 🤓 Jennings (@RiCHi) August 4, 2022