TikTok Hack: 2B Records Leak — but ByteDance Denies - Security Boulevard

For You Plague: TikTok was hacked, with over two billion records stolen. Or so says notorious leak group BlueHornet (a/k/a AgainstTheWest, AggressiveCurl). But TikTok says not.

3/ What’s really going on?

In today’s #SBBlogwatch, we sort fiction from fact.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/Kh26Rk8RpT

— @Richi 🤓 Jennings (@RiCHi) September 6, 2022

Hackers Hail all Taxis in Moscow — HUGE Gridlock for 3 Hours - Security Boulevard

In Post-Soviet Russia, Taxi Order YOU:
Ukraine supporters hacked Russia’s biggest ride hailing app, Yandex Taxi. They sent every available cab to a single address, all at once.

3/ Yesterday was not a great day if you were trying to drive on the west side of central #Moscow.

In today’s #SBBlogwatch, we get out and walk.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/xjGL1vTFUf

— @Richi 🤓 Jennings (@RiCHi) September 2, 2022

Stable Diffusion Goes Public — and the Internet Freaks Out - DevOps.com

The Moral of the Story: What fools these mortals be

In this week’s #TheLongView: Unless you’ve been living under a rock, you’ll have seen something about @StabilityAI’s #StableDiffusion. It’s the new #OpenSource #MachineLearning model for creating images from text …

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/CR9WZAs3SG

— @Richi 🤓 Jennings (@RiCHi) August 31, 2022

LastPass hacked (again): What devs can learn - ReversingLabs

LastChance for its reputation?
The latest LastPass hack: Bad actors stole source code and other secrets from the huge password-manager firm’s dev environment. But not, it stresses, anyone’s passwords — as far as it can tell.

3/ What a mess. And it’s not the first time.

In this week’s #SSBlogwatch we put all our eggs in one basket.

For @ReversingLabs’ @SecuredSoftware: https://t.co/zTlkT5w8jT

— @Richi 🤓 Jennings (@RiCHi) August 31, 2022

0ktapus/‘Scatter Swine’ Hacking Gang Stole 10,000 Corp Logins via Twilio - Security Boulevard

Stop SMS 2FA Already: More on the Twilio débâcle from earlier this month: Researchers reveal the hackers swiped at least 9,931 user credentials from more than 130 organizations.

3/ And what’s with the silly names? #0ktapus? #ScatterSwine?

In today’s #SBBlogwatch, we dream of eight-legged pigs.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/w5GND6SbSx

— @Richi 🤓 Jennings (@RiCHi) August 30, 2022