Chrome Fake Reviews: It’s Worse than We Thought - Security Boulevard

“Nooo, I’ve been phished.” The problem of fake reviews in the Google Chrome extensions store is bigger than it seems. New analysis shows a web of malware with access to all your browsing, that can redirect you anywhere when you least expect it.

Come on, Google, get a grip.

In today’s #SBBlogwatch, we lose trust in la $GOOG. At @SecurityBlvd: https://t.co/SoCUBVMcvV

— @Richi 😷 Jennings (@RiCHi) June 4, 2021

Flashcard study apps expose nuclear secrets to all - TechBeacon

Monkey see, monkey do: US military personnel have been uploading nuclear secrets to online learning platforms, where they can be found by anyone. Free flashcard apps such as Chegg, Quizlet, and Cram have hosted the scarily detailed secret data for as long as eight years—possibly longer.

Rote learning is bad enough without suffering fallout from information leakage.

In this week’s #SecurityBlogwatch, we file our cards away securely. At @TechBeaconCom: https://t.co/G8sYXIr93U

— @Richi 😷 Jennings (@RiCHi) June 3, 2021

Dunhammer: NSA Blamed for Danish Spying on Euro Pols - Security Boulevard

“Something is Rotten in the State of Denmark” In a damning leaked report, Danish authorities reveal that the NSA spies on friendly foreign governments. This time, thanks to the help of FE, its opposite number in Denmark.

What should we tell Horatio? In today’s #SBBlogwatch, Marcellus criticizes incestuous relationships. At @SecurityBlvd: https://t.co/wMRcqfCr2A

— @Richi 😷 Jennings (@RiCHi) June 2, 2021

Grandchild of Rowhammer: ‘Half-Double’ Tactic Flips Farther Bits - Security Boulevard

I Want My ECC: Rowhammer—an attack tactic to escape sandboxes by flipping “neighboring” bits—has a new variant. And it’s been made easier by newer designs of RAM chips.

This new variant, which the team dubbed #HalfDouble, presents a “substantial challenge.” In today’s #SBBlogwatch, we double down, with no half measures. At @SecurityBlvd: https://t.co/6WJoLvrN81

— @Richi 😷 Jennings (@RiCHi) May 28, 2021

DevOps failures cast cloudy shadows over countless apps - TechBeacon

MDM of BYOD might be unfashionable, but it could CYA: Mobile apps are still awful—that’s the scary conclusion from researchers. They sampled a range of @Android apps and easily found 23 that leaked the personal data of 100 million users—and worse.

And it’s not just an #Android problem. In this week’s #SecurityBlogwatch, we go back to school.

At @TechBeaconCom: https://t.co/HtIzqDmzRn

— @Richi 😷 Jennings (@RiCHi) May 27, 2021