STUPID Microsoft U-Turn: Unblocks Malicious Macros in Office - Security Boulevard

VBA FAIL 365: Microsoft stunned security professionals by reversing a change that prevents Office from auto-running macros. So don’t expect the malware problem to improve any time soon.

It’s the age-old tension of security vs. ease of use.

In today’s #SBBlogwatch, we blame lazy customers and lazier product management.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/QfIOo9rvK3

— @Richi 🤓 Jennings (@RiCHi) July 8, 2022

Dev Job Phisher Steals $540M | Patch OpenSSL NOW | Systemd Dev Joins Microsoft - DevOps.com

Be great in act, as you have been in thought:

In this week’s #TheLongView:
1⃣ #SpearPhishing causes $540 million loss,
2⃣ a high severity bug in #OpenSSL might be “worse than Heartbleed,” and
3⃣ Lennart “@pid_eins” Poettering is now working for @Microsoft.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/6iY10dZWu2 #DevOps

— @Richi 🤓 Jennings (@RiCHi) July 7, 2022

Devs: Don’t do DIY cryptography — Police CyberAlarm shows why - ReversingLabs

Wake up—don’t snooze: It’s a truism often repeated: Don’t roll your own cryptography! There are countless traps laying in wait for the unwary—so stick to trusted, tested libraries and beware the unknown unknowns.

When it comes to cryptography, we simply don’t know what we don’t know.

In this week’s #SSBlogwatch, Messrs. Dunning and Kruger would like a word.

For @ReversingLabs’ @SecuredSoftware: https://t.co/Ciga0PTSoq

— @Richi 🤓 Jennings (@RiCHi) July 7, 2022

‘ChinaDan’ Hacks 1 BILLION Police Records from Shanghai: 23TB of PII for Sale - Security Boulevard

CCP LOL—SHGA PII BBQ: “China’s Largest Data Leak” is causing a kerfuffle in Beijing. A hacker calling themself ChinaDan is holding 23 terabytes of personal data for ransom.

Predictably, the #ChineseCommunistParty is censoring news of the leak.

In today’s #SBBlogwatch, we we don’t expect to be read behind The Great Firewall.

At @TechstrongGroup’s @SecurityBlvd: https://t.co/hEQB7ISiLr

— @Richi 🤓 Jennings (@RiCHi) July 5, 2022

Rust in Linux 5.20 | Deepfake Hiring Fraud | IBM WFH ‘New Normal’ - DevOps.com

The moral of the story: If we are true to ourselves, we can not be false to anyone

In this week’s #TheLongView:
1⃣ @Linus__Torvalds says next release will support @RustLang,
2⃣ @FBI warns scammers are getting hired in #deepfake interviews, and
3⃣ 80% of @IBM staff stay at home.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/JhTjqF5KgM #DevOps

— @Richi 🤓 Jennings (@RiCHi) June 30, 2022