Hot Topics

‘China’ Azure Breach: MUCH Worse Than Microsoft Said

Richi Jennings | July 24, 2023 | Active Directory, Authentication, azure, Azure Active Directory, Azure AD, Entra ID, Exchange, Microsoft, Microsoft Azure, Microsoft Azure Active Directory, Microsoft Azure Security, OpenID, Outlook.com, SB Blogwatch, Storm-0558, Wiz

Storm-0558 Breaks: Satya and Pooh, sitting in a tree, K.I.S.S.I.N.G ...

Security Boulevard

Biden Admin. Adds ‘Mercenary Spyware’ Firms to Ban List

Richi Jennings | July 19, 2023 | android spyware, Biden administration, Commerce Department, Cytrox, Department of Commerce, Entity List, eu, Europe, European Union, European Union (EU), Intellexa, iOS spyware, Malware Spyware, Predator spyware, SB Blogwatch, spyware

European cousins Intellexa and Cytrox essentially banned by Commerce Dept. — Predator/ALIEN not welcome in U.S ...

Security Boulevard

PCI-DSS PayPal Visa AI digital payments Security the Price of Convenience in Supply Chain Payments

PCI-DSS 4.0 is Here. What Does it Mean for Online Retailers?

Rafael Lourenco | July 19, 2023 | Cybersecurity, Fraud, payment card security, PCI DSS, retail

PCI-DSS 4.0 was released in early 2022 with a two-year transition period to allow organizations time to learn about and implement it. Are you ready for the transition? ...

Security Boulevard

OPSEC FAIL: US Military Email Going to Mali — via Typo

Richi Jennings | July 17, 2023 | defense department, Department of Defense, DoD, E-mail, email, Johannes Zuurbier, Mali, military, Military Communications, mxrecords, pentagon, Russia, SB Blogwatch, U.S. Department of Defense, U.S. military, United States Department of Defense, US DOD, US Military

MX Mixup: Russian-allied government can intercept “highly sensitive information”—because there’s no “I” in .ML ...

Security Boulevard

China Breaches Microsoft Cloud — Spied on US Govt. Email

Richi Jennings | July 13, 2023 | Active Directory, Authentication, Azure Active Directory, Azure AD, Exchange, Microsoft, Outlook.com, SB Blogwatch, Storm-0558

Storm-0558 Brewing: Multiple Microsoft failures cause data leaks at State and Commerce depts., plus 23 other orgs ...

Security Boulevard

Solar array, ground mounted in field, under blue sky

Contec SolarView: Critical Bug Unpatched After 14 MONTHS

Richi Jennings | July 7, 2023 | Contec, CVE-2022-29303, CVE-2022-44354, CVE-2023-23333, ICS, ICS/SCADA, iot, Mirai, Mirai botnet, OT, SB Blogwatch, SCADA, SolarView

PV OT: VPN PDQ! 9.8 CVSS known since May 2022—but still exploitable on 400+ net-connected OT/ICS/SCADA systems ...

Security Boulevard

vehicular cybersecurity automotive security

Digital ‘Birth Certificates’ for Vehicular Cybersecurity

Alois Kliner | July 7, 2023 | Automotive, Connected Cars, software-defined vehicles, vehicle

There's a growing likelihood for catastrophic cyberattacks on vehicles that could disable brakes, take over steering and even steal personal information ...

Security Boulevard