Micro Focus is now part of OpenText. Learn more >

Can you trust any browser extensions? IT shops might want to consider extension blocking as a policy.
Richi Jennings
Feb 8, 2018
Grammarly bug could have exposed what you typed in the service
Security Blogwatch
The moral of the story? Your tax dollars at work. But what can you learn from spies like thus?
Richi Jennings
Aug 6, 2020
NSA warning on location tracking: ‘Stop using your phone’
Security Blogwatch
Tunnel image
WPA2 Personal considered harmful, but the sky’s not falling (yet)
Richi Jennings
Aug 9, 2018
WPA2 hack allows Wi-Fi password crack much faster
Security Blogwatch
The moral of the story? You’re not a spammer, but you don’t want to share a neighborhood with one.
Richi Jennings
Sep 3, 2020
Sendgrid blames lack of 2FA for mountains of spam
Security Blogwatch
The moral of the story? Run—do not walk—to your AD domain controllers (metaphorically speaking). And start planning for February’s second shoe...
Richi Jennings
Sep 17, 2020
Zerologon bug is a perfect 10. Patch now or crash hard
Security Blogwatch
Never underestimate the echo-chamber’s ability to find hilarious privacy scares—and security woes—in any new tech.
Richi Jennings
Sep 21, 2017
Apple's FaceID falls foul of privacy farce, security pros just say no
Security Blogwatch
North Korean military personnel
Social engineering isn’t only for normies. Whether you’re an IT puke, an Agile Dev(Sec)Ops sprinter, or a 1337 haxor: Question everything.
Richi Jennings
Jan 28, 2021
APT team attacks white hats: Google fingers North Korea
Security Blogwatch
The moral of the story? Automate, automate, automate. And brace yourself for the next contraction of cert validity.
Richi Jennings
Jul 2, 2020
Google, Apple, Mozilla enforce 1-year max certificate expiration
Security Blogwatch
Don’t buy in to the myth that containers give you isolation. Check your privilege.
Richi Jennings
Feb 14, 2019
Hackers love Docker: Container catastrophe in 3, 2, 1...
Security Blogwatch
Tracking prevention might affect your business, or even break your web-based apps. Make your software privacy-first now (or pay later).
Richi Jennings
Nov 27, 2019
Microsoft Edge browser gobbles up Google's privacy-fail cookies
Security Blogwatch
The moral of the story? DevSecOps red-team exercises need to include OSINT from dorking, etc.
Richi Jennings
May 21, 2020
Mercedes software leaks via Git and Google dork
Security Blogwatch
Passwords are lame, so you should come to grips with 2FA, U2F, OAuth, etc.
Richi Jennings
Dec 14, 2017
1.4B leaked passwords in 41GB dump: Stop the madness!
Security Blogwatch
US Capitol with CAUTION tape
The moral of the story? Protect your object references. And throttle attempts to scrape. And strip metadata. And don’t render deleted objects.
Richi Jennings
Jan 14, 2021
Scraped Parler data is truly revealing
Security Blogwatch
Rust has great potential for writing secure code—and refactoring old code to be more secure.
Richi Jennings
Dec 5, 2019
Rust steals C's crown with Microsoft secure code project
Security Blogwatch
old Macintosh computer
The moral of the story? What undebuggable, badly documented legacy is hiding in your platform? How could it be misused?
Richi Jennings
Jan 21, 2021
Old macOS component defeats malware researchers for 5 years
Security Blogwatch
Las Vegas sign
If the FBI and DoJ are now criminalizing every white-hat who creates a PoC, they risk marginalizing the US’s role in infosec.
Richi Jennings
Aug 10, 2017
FBI arrest of Marcus Hutchins (@MalwareTechBlog) has chilling effect
Security Blogwatch
For IT: Use your MDM to find flawed phones in your fleet. For app developers: Trust, but verify.
Richi Jennings
Nov 21, 2019
Android camera app bug could affect 'hundreds of millions of phones'
Security Blogwatch
hero
Defense in depth: Protect your session cookies, and do what you can to validate their use.
Richi Jennings
Dec 12, 2019
HackerOne hacked, pays bounty on its own white-hat platform
Security Blogwatch
Promote proactive security
It's the latest high-profile leak—and it's a shocker (usernames/passwords posted publicly!)—but it won't be the last. Don’t be next.
Richi Jennings
Sep 28, 2017
Deloitte 4+ months late on breach: New poster child for bad security practices?
Security Blogwatch
Are you checking credentials against lists of common passwords and compromised accounts?
Richi Jennings
Apr 16, 2020
Zoom #fails grow: 530,000 passwords leaked, details for sale by hacker
Security Blogwatch
The moral of the story? Change control, peer review, and pair programming: not just good ideas, no matter how experienced you are.
Richi Jennings
Jun 18, 2020
Anonymous tweets ‘DDoS’, everyone freaks out
Security Blogwatch
The moral of the story? Politics aside, what’s running on your users’ work phones or BYO devices? Got MDM?
Richi Jennings
Jul 16, 2020
Clock ticks for TikTok: RNC and DNC nuke app, US mulls ban
Security Blogwatch
End-to-end encrypted communication has come of age. It’s not just for security pros anymore.
Richi Jennings
Feb 27, 2020
EU switches to Signal: One rule for elites, another for plebs
Security Blogwatch
Show More