0ktapus/‘Scatter Swine’ Hacking Gang Stole 10,000 Corp Logins via Twilio - Security Boulevard

Stop SMS 2FA Already: More on the Twilio débâcle from earlier this month: Researchers reveal the hackers swiped at least 9,931 user credentials from more than 130 organizations.

3/ And what’s with the silly names? #0ktapus? #ScatterSwine?

In today’s #SBBlogwatch, we dream of eight-legged pigs.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/w5GND6SbSx

— @Richi 🤓 Jennings (@RiCHi) August 30, 2022

Force Me Back to the Office? Apple ‘Hasn’t Learned Anything’ - DevOps.com

The Moral of the Story: The tempter or the tempted—who sins most?

In this week’s #TheLongView: New ways of working.

Whether it’s remote work, enforced #HybridWorking or a four-day working week, let’s triage the trends and futz with the future.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/OaeWQHU5mS #DevOps

— @Richi 🤓 Jennings (@RiCHi) August 25, 2022

Hyundai devs used sample code signing keys, making updates vulnerable - ReversingLabs

Hyundai: ‘Leading by example’
Developers of the entertainment unit in the Hyundai Ioniq didn’t seem to follow the sample code they were using. They reused an RSA code-signing key pair from an example, rather than generating their own.

3/: It’s only the entertainment unit, right?

But it’s a #Linux computer with full access to the car’s critical #CANbus.

In this week’s #SSBlogwatch we’re frightened by the implications.

For @ReversingLabs’ @SecuredSoftware: https://t.co/WQK6Z3lPW0

— @Richi 🤓 Jennings (@RiCHi) August 25, 2022

Oracle’s HUGE Ad Data Graph is ‘Illegal Panopticon’ — 5 BILLION People Big - Security Boulevard

Does Redwood City Have Limits?
Oracle “illegally” collects and links data about you, selling it to the highest bidder—all without your consent. Online and offline, your privacy is invaded daily—so says a California class action lawsuit.

3/ Stuff just got real, #AdTech industry.

In today’s #SBBlogwatch, we draw back the #SurveillanceCapitalism curtain.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/7DO00ddXzb

— @Richi 🤓 Jennings (@RiCHi) August 23, 2022

NSO Group Fires CEO — and 100 Staff — in Spyware ‘Streamlining’ - Security Boulevard

NSO CEO Go — NSO now ‘NO’?
NSO, notorious producer of the Pegasus nation-state spyware, is struggling. So it’s dumped its CEO, Shalev Hulio, and around 100 employees.

Is this the end for @NSOGroup?

In today’s #SBBlogwatch, we wave goodbye to the “S” in #NSO.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/t9RkgXIYSi

— @Richi 🤓 Jennings (@RiCHi) August 22, 2022