Who is ‘Andrew’—the US Spy who Hacked Booking.com? - Security Boulevard

I Can Tell by Some of the Pixels: Huge hotel reservations site Booking.com was breached.com. And the perp was the NSA, or one of the U.S. intelligence agencies.

Let’s unpick the story. In today’s #SBBlogwatch, we get someone else to make our bed before we lie in it.

At @SecurityBlvd: https://t.co/aA8la0rA4A

— @Richi 😷 Jennings (@RiCHi) November 12, 2021

REvil Perps: Arrests for Some, $10M Bounties on Others - Security Boulevard

DoJ+FBI+State Get Serious: Alleged REvil ransomware hackers have been arrested, with additional suspects charged. A coordinated international effort is tightening the noose around the gang and its many affiliates.

So there’s also a #bounty. In today’s #SBBlogwatch, we wonder if the @StateDept’s latest tactic will bear fruit.

At @SecurityBlvd: https://t.co/w6ptdzUn1B

— @Richi 😷 Jennings (@RiCHi) November 9, 2021

U.S. Blocks Trade with ‘Legal’ Pegasus Spyware Firm, NSO - Security Boulevard

U.S. Beef with Data Thief: What took you so long? The U.S. Commerce Dept. has finally blocked exports to the notorious NSO Group—makers of sophisticated “zero-click” spyware, Pegasus. This is a serious blow to NSO’s grubby business model.

TIL a new phrase: #TransnationalRepression. In today’s #SBBlogwatch, we work out what it all means.

At @SecurityBlvd: https://t.co/cbQc7JDLs5

— @Richi 😷 Jennings (@RiCHi) November 4, 2021

‘Trojan Source’ Makes Scary Headlines—But it’s Not New - Security Boulevard

Stick to Horses: Trojan Source “threatens the security of all code,” screams a widely shared article. Supposedly, this previously unknown attack on compilers allows open source code to hide malicious backdoors—thwarting all attempts to review it for vulnerabilities.

But it is worth talking about. In today’s #SBBlogwatch, we do exactly that.

At @SecurityBlvd: https://t.co/JOomNoxUDX

— @Richi 😷 Jennings (@RiCHi) November 2, 2021

New Russian Hacks Revealed—but U.S. Says it’s Microsoft’s Fault - Security Boulevard

Cozy Bear with Us: Microsoft has issued another of its “look how clever we are” writeups of detecting hackers breaking into its cloud services. In its report, the Redmondites tut-tut to say its customers really need to take more care with their security.

Shots fired. In today’s #SBBlogwatch, we search for the truth.

At @SecurityBlvd: https://t.co/IhaOKdXEfW

— @Richi 😷 Jennings (@RiCHi) October 26, 2021