FBI/CISA Failed: Biden’s Ransomware Summit Convenes, Impotently

Talking Shop at the Talking Shop: The International Counter Ransomware Summit is on in D.C., with representatives from 36 nations and blocs attending. Not including Russia, natch.

But will it amount to anything of substance?

In today’s #SBBlogwatch, we fear not.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/JQjGnok5eB

— @Richi 🤓 Jennings (@RiCHi) November 1, 2022

Chinese Tech: Banned in DC, but not in the States - Security Boulevard

‘Oh, Bother,’ Said Pooh: There’s a massive loophole in the federal ban on Chinese technology from sus firms such as Huawei and ZTE: It doesn’t stop states from buying it.

3/ It’s almost as if states had some sort of constitutional independence—who’d a thunk it?

In today’s #SBBlogwatch, we go hunting for heffalump.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/0QtEyKps5P

— @Richi 🤓 Jennings (@RiCHi) October 31, 2022

OpenSSL ‘CRITICAL’ Bug — Sky Falling — Patch Hits 11/1 - Security Boulevard

Worse Than Heartbleed?
OpenSSL has a new “critical” bug. But it’s a secret—until next month.

It’s a big, fat, hairy deal. OpenSSL is in just about everything.

In today’s #SBBlogwatch, we make sure our #SBOM​s are up to date.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/CdrJbcSpXq

— @Richi 🤓 Jennings (@RiCHi) October 28, 2022

Meta Income Down by Half | Will Apple Make it Worse? | Linux Secure Boot Fix - DevOps.com

The moral of the story: Your time is limited—so don’t waste it living someone else’s life

In this week’s #TheLongView:
1⃣ @Meta’s latest results are *very* bad,
2⃣ @Apple wants its cut of @Facebook ads, and
3⃣ Lennart “@pid_eins” Poettering proposes a new #SecureBoot for #Linux.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/9FGhbIS8yc #DevOps

— @Richi 🤓 Jennings (@RiCHi) October 27, 2022

Google pairs GUAC with SLSA to take a bite out of software supply chain insecurity - ReversingLabs

Dip into this tasty repo: Google is putting its weight behind a project to offer a comprehensive view of your software. Enter GUAC: Graph for Understanding Artifact Composition.

3/ It’s an #OpenSource project. In this week’s #SSBlogwatch we go to @GitHub and check it out.

For @ReversingLabs’ @SecuredSoftware: https://t.co/wg73kjbuK4

— @Richi 🤓 Jennings (@RiCHi) October 26, 2022