Security News Update for July 31, 2022

This week’s security news includes: Jury delivers $7 billion verdict against Charter Cable due to bad security practices Spanish radiation sensor hack was an inside job Microsoft resumes blocking VBA macros Patent trolls beware Uber settles with feds over lying about 2016 breach Digital exhaust opt out guide version 3 T-Mobile will pay $350 million…

Security News Update for July 24, 2022

This week’s security news includes: Did Russian hackers blow up a Texas gas pipeline? Okta may expose passwords unencrypted as part of a device to device sync Sonicwall releases emergency SQL injection patch CISA says patch actively exploited Windows 11 bug Oracle releases 349 patches this week, including 230 RCE bugs Apple ships urgent security…

Security News Update for July 17, 2022

This week’s security news includes: Can your firewall and/or endpoint protection software see into encrypted traffic Windows 8.1 now shows full-screen end of support Honda tries to downplay hacker remote unlock/start on some 2022 cars Google releases emergency Chrome 103 update for actively exploited vulnerability Joshua Schulte: guilty on all charges FCC looks to raise…

Security News Update for July 10, 2022

This week’s security news includes: Microsoft rolls back Office macro block A different type of privacy risk Apple lockdown mode Google releases emergency Chrome 103 update for actively exploited vulnerability TikTok/ByteDance dances around user data privacy FBI educational tri-folds Russian space research institute hacked Unemployment and labor websites down in up to 40 states due…

Security News Update for July 3, 2022

This week’s security news includes: Open SSL Version 3 is possibly a bit too open NIST releases automated secure configuration guidance for macOS Researchers disclose 56 vulnerabilities in industrial control software Feds fine E-Y $100 million for falsifying audits, cheating China puts Walmart in the naughty box because of their security weaknesses If you have…

Security News Update for June 26, 2022

This week’s security news includes: The ghost of Internet Explorer continues to haunt us Researchers disclose 15 bugs in Siemens Industrial Control software CISA releases version 2 of Cloud Security Technical Reference Architecture document Windows 11 is getting an app privacy report feature Multiple backdoored Python libraries caught stealing AWS secrets and keys Jury convicts…

Security News Update for June 5, 2022

This week’s security news includes: Healthcare supply chain cybersecurity risk management guide Google quietly bans deepfake training projects on Colab 1200 public-facing Elastic databases wiped EPA asks for $100 million to improve water system cybersecurity CISA says states need to continue to enhance voting machine security Russia pauses prosecution of Revil hackers – offers them…

Security News for the Week Ending May 29, 2022

This week’s security news includes: DHS/CISA Updates Emergency Directive 22-03 to add two new VMware bugs Broadcom announces plan to buy VMware Microsoft rolling out new security settings to millions of accounts Feds fine Twitter $150 million for privacy violations Spain vows to tighten control over their spy agencies Credit card skimmers are switching techniques…