One Medical: Sorry-not-Sorry for Leaking your Personal Info - Security Boulevard

ONEM HIPAA FAIL: Primary care med-tech firm One Medical made an intern-level error this week. It sent email to countless customers with hundreds of other customer email addresses visible in the To: field.

@OneMedical also said “We apologize if,” which is never a good look.

In today’s #SBBlogwatch, we’re unapologetically scathing. At @SecurityBlvd: https://t.co/FAtmzUSoup $ONEM

— @Richi 😷 Jennings (@RiCHi) July 2, 2021

LinkedIn Leaks 93% of Users’ Data—Refuses Blame for Breach - Security Boulevard

MSFT PR FAIL: LinkedIn is fighting a crescendo of criticism over a huge data breach, which is being sold by criminals. The firm’s PR people claim it’s not, in fact, a breach—nothing to see here, move along.

Instead, countless users get to suffer yet more #spam, #phishing, #IDtheft, #stalking, #doxxing and other nasties. LinkedIn doesn’t care.

In today’s #SBBlogwatch, we’ve had it with this sociopathic company. At @SecurityBlvd: https://t.co/rDmKesNiMt $MSFT

— @Richi 😷 Jennings (@RiCHi) July 1, 2021

SafeDollar Stablecoin not Safe nor Stable: Hack Sends Value to ZERO - Security Boulevard

Hack or Rug-Pull? SafeDollar, a crypto token that’s pegged to the U.S. dollar, crashed this week. The team behind the Polygon-based stablecoin claim it had been hacked.

That caused the #cryptocurrency’s price to drop to $0, while the hacker got away with $250,000.

A naïve bug, or a malicious insider? In today’s #SBBlogwatch, we prefer Bens.

At @SecurityBlvd: https://t.co/RQzUH0VIHG

— @Richi 😷 Jennings (@RiCHi) June 29, 2021

Did your WD My Book NAS get Wiped? Put a Brave Face on It - Security Boulevard

My Book? Not Any More: A 2019 vulnerability is being exploited to remotely wipe countless Western Digital devices. The WD My Book Live NAS product is coming under attack from Eastern European malefactors.

But that’s no help to people who’ve lost their data. It’s like saying, “Shut the stable door,” after the horse has bolted. In today’s #SBBlogwatch, we force a simile. [You’re fired—Ed.]

At @SecurityBlvd: https://t.co/HqkZadRHzc

— @Richi 😷 Jennings (@RiCHi) June 28, 2021

Rust in Linux: Google pays ISRG to pay Miguel Ojeda - TechBeacon

Rustacean invasion: Google is funding the Internet Security Research Group (ISRG) to sponsor the Rust for Linux organization. Money will be funneled from la GOOG’s bottomless coffers to pay Miguel Ojeda as a full-time developer.

Get off my lawn, with your trendy flavor of the month. In this week’s #SecurityBlogwatch, we look to see if we should believe the hype.

At @TechBeaconCom: https://t.co/zLaBbKe72u

— @Richi 😷 Jennings (@RiCHi) June 25, 2021