U.S. Blocks Trade with ‘Legal’ Pegasus Spyware Firm, NSO - Security Boulevard

U.S. Beef with Data Thief: What took you so long? The U.S. Commerce Dept. has finally blocked exports to the notorious NSO Group—makers of sophisticated “zero-click” spyware, Pegasus. This is a serious blow to NSO’s grubby business model.

TIL a new phrase: #TransnationalRepression. In today’s #SBBlogwatch, we work out what it all means.

At @SecurityBlvd: https://t.co/cbQc7JDLs5

— @Richi 😷 Jennings (@RiCHi) November 4, 2021

‘Trojan Source’ Makes Scary Headlines—But it’s Not New - Security Boulevard

Stick to Horses: Trojan Source “threatens the security of all code,” screams a widely shared article. Supposedly, this previously unknown attack on compilers allows open source code to hide malicious backdoors—thwarting all attempts to review it for vulnerabilities.

But it is worth talking about. In today’s #SBBlogwatch, we do exactly that.

At @SecurityBlvd: https://t.co/JOomNoxUDX

— @Richi 😷 Jennings (@RiCHi) November 2, 2021

New Russian Hacks Revealed—but U.S. Says it’s Microsoft’s Fault - Security Boulevard

Cozy Bear with Us: Microsoft has issued another of its “look how clever we are” writeups of detecting hackers breaking into its cloud services. In its report, the Redmondites tut-tut to say its customers really need to take more care with their security.

Shots fired. In today’s #SBBlogwatch, we search for the truth.

At @SecurityBlvd: https://t.co/IhaOKdXEfW

— @Richi 😷 Jennings (@RiCHi) October 26, 2021

FTC: ISPs are Spying on You. ISPs: Deal With It. - Security Boulevard

Ghost of Privacy: Your internet service provider snoops on your browsing habits, records them and sells you—the product—to the highest bidder. So says the Federal Trade Commission (FTC) in a new report.

#Privacy is dead. In today’s #SBBlogwatch, we mourn its passing.

At @SecurityBlvd: https://t.co/H1RKjdYNhp

— @Richi 😷 Jennings (@RiCHi) October 25, 2021

Disable Time Sync NOW—Ugly GPSd Bug Brings Sunday FAILs - Security Boulevard

GPSD PTSD? On Sunday, you might find some equipment thinks it’s 2002. That’s because of a weird bug in gpsd—the code on which a bunch of Network Time Protocol servers rely.

It’s yet another case of critical #OpenSource code being maintained by a single unpaid volunteer.

In today’s #SBBlogwatch, we batten down the hatches. At @SecurityBlvd: https://t.co/J1q3hzbonQ

— @Richi 😷 Jennings (@RiCHi) October 22, 2021