Category: operational security

Auto Added by WPeMatico

Friday Squid Blogging: Influencer Accidentally Posts Restaurant Table QR Ordering Code

Posted on By infossl
operational security, restaurants, Security technology, squid, Uncategorized

Another rare security + squid story: The woman—who has only been identified by her surname, Wang—was having a meal with friends at a hotpot restaurant in Kunming, a city in southwest China. When everyone’s selections arrived at the table, she posted a photo of the spread on the Chinese social media platform WeChat. What she … Read More “Friday Squid Blogging: Influencer Accidentally Posts Restaurant Table QR Ordering Code” »

Using Hacked LastPass Keys to Steal Cryptocurrency

Posted on By infossl
cryptocurrency, operational security, Password Safe, passwords, Security technology, Uncategorized

Remember last November, when hackers broke into the network for LastPass—a password database—and stole password vaults with both encrypted and plaintext data for over 25 million users? Well, they’re now using that data break into crypto wallets and drain them: $35 million and counting, all going into a single wallet. That’s a really profitable hack. … Read More “Using Hacked LastPass Keys to Steal Cryptocurrency” »

NSA on Supply Chain Security

Posted on By infossl
infrastructure, nsa, operational security, reports, Security technology, supply chain, Uncategorized

The NSA (together with CISA) has published a long report on supply-chain security: “Securing the Software Supply Chain: Recommended Practices Guide for Suppliers.“: Prevention is often seen as the responsibility of the software developer, as they are required to securely develop and deliver code, verify third party components, and harden the build environment. But the … Read More “NSA on Supply Chain Security” »

Security Vulnerabilities in Covert CIA Websites

Posted on By infossl
cia, Citizen Lab, cyberespionage, espionage, operational security, Security technology, Uncategorized

Back in 2018, we learned that covert system of websites that the CIA used for communications was compromised by—at least—China and Iran, and that the blunder caused a bunch of arrests, imprisonments, and executions. We’re now learning that the CIA is still “using an irresponsibly secured system for asset communication.” Citizen Lab did the research: … Read More “Security Vulnerabilities in Covert CIA Websites” »