controlgap.com

Welcome to This Week’s [in]Security. PCI and payments: e-com skimmers. New breaches: Malaysia. Kubernetes, TrustStamp. New Ransomware: Countries, Nikkei. Major outages. Follow-ups & Fall-out. Privacy: You for sale, ID.me. Laws & Regs - Canada: Huawei ban, C-11. US: CFAA abuse, AML settlement. World: cybersecurity reporting, platform liability, Standards: NIST 800-140C/D. Defense - Training & events: Tools: Supply chain framework, Browser password vaults. Vulnerabilities - Advisories: Initial access, CISA Vmware & A/D. Zerodays: what APTs know, Mac, iOS. Patching: partial protection, NVIDIA. Other: Spies in the workforce, e-voting, OAuth, SQL persistence, WordPress, Russian CA? Vulnerability research: Bluetooth relay attack, Tesla. Crypto-research: Post-quantum, Telegram. Cybercrime: MSP attacks. FaceStealer, MSSQL brute force, chatbots, exotic languages. Crime & Enforcement, Nation States & mercenaries. Other Risks: Cyber-insurance, Facebook e-com, CitizenLab on Bing. Health, Safety, & Environment. Disinformation, Economy. Russia v. Ukraine. Innovation and more.

Welcome to This Week’s [in]Security. PCI SSF related errata, SSF & NIST. virtual cards on android. New breaches: US Law enforcement, VPNs, Yik Yak. New Ransomware: Conti & REvil, Oregon, AGRO, pay and pay again. Follow-ups: Capital One, Colonial Pipeline, HIBP updates. Privacy: web-key-loggers, ICE. Laws & Regs - Canada: C-11. US: breach reporting, warrants, cybercrime bill. World: crypto-wars, suing cybercriminals. Defense - Cybergames, software recalls, critical open source, MFA adoption, partnerships. Vulnerabilities - Advisories: F5 Big-IP. Patching: Intel, Firewalls, multiple Windows, printers, Other: NPM hijack, supply chains, Log4ever, medical devices. Vulnerability research: Word & PDF scripts, Intel & AMD, SQL WAF bypass. Crypto-research. Cybercrime - Active: NPM, WordPress, Linux, SMS, Exchanage, Discord; Crime & Enforcement: wanted, disgruntled. Nation States and mercenaries. Other Risks, Health, Safety, Environment, Economy. AI. Russia v. Ukraine. Innovation and more.

Welcome to This Week’s [in]Security. PCI and payments: Skimmers. Payments: New breaches: Anonymous, DeFi, Ikea. New Ransomware, Major outages, Follow-ups & Fall-out. Privacy: Health Canada, Facial recognition. Laws & Regs - Canada: Copyright. US: ISPs, Insurance. World: India. Standards: NIST, definitions. Defense - Training & events: space-cybersecurity. Password day. Kill-switch. Tools: MFA. Vulnerabilities, Advisories: Patching: F5, Cisco. Other: mental health apps, AV bugs, uClibc IoT, DNS poisoning, No MFA? Vulnerability research: Zero-Knowledge. Crypto-research: Quantum crypto. Cybercrime: Trends: Event log malware, Doh! Crime & Enforcement: BEC impact. Nation States and mercenaries. false-flags, sanctions, Spain & Pegasus, China. espionage, Other. Other Risks: General: Airtags, deepfakes, web3. Health, Safety, Environment, Disinformation, Economy. Russia v. Ukraine. NATO. Quantum computing, Innovation and more.