Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Just like we predicted last time: Scattered Spider hackers shift focus to aviation, transportation firms — www.bleepingcomputer.com/… (They’d just pivoted to Insurance and were finding it fallow ground, so we predicted they’d jump again […]
Continue readingCategory: Security Bits
Security Bits — 22 June 2025
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Greyware spyware from Pegatron continues to be abused: Graphite spyware used in Apple iOS zero-click attacks on journalists — www.bleepingcomputer.com/… (This all happened a few months ago, and the zero-day was patched back in […]
Continue readingSecurity Bits — 8 June 2025 — Including VPN Deep Dive
Deep Dive — Some VPN Nuance On last week’s Chit Chat Across the Pond segment, Allison & Adam had a great discussion on VPNs, and the vast thrust of the conversation was superb. But, there were two threads left dangling a little, and one point I want to quibble with. But nonetheless, the TL;DR is […]
Continue readingSecurity Bits — 25 May 2025
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇪🇺 Following the near-miss with the US-funded critically important CVE database earlier this year (CISA nearly let funding lapse without notice, and even then only temporarily extended the existing funding rather than actually renewing […]
Continue readingSecurity Bits — 11 May 2025
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. A great example of why it’s important to patch – this is one of the things the Apple updates we called out last time patched: Apple ‘AirBorne’ flaws can lead to zero-click AirPlay RCE […]
Continue readingCCATP #813 — Bart Busschots on Quantum Computing & Cryptography
This episode of Chit Chat Across the Pond is going to be a bit different. On the NosillaCast #1042 for April 27th, Bart Busschots and I recorded his usual segment on Security Bits, but the majority of it was a deep dive. The subject was whether cryptography as we know it is doomed because of […]
Continue readingSecurity Bits — 27 April 2025 — Deep Dive into Quantum Computing
Deep Dive — Where are we with Quantum Computing NosillaCastaway @milddemons asked the following in the Podfeet Slack: “I am wondering if you know and can tell us what the security community is up to in regards to quantum computing breaking the encryption that we have now. I just thought about this as Microsoft has a quantum computing […]
Continue readingSecurity Bits — 20 April 2025 (Solo) 🐣
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Rather aptly for this solo show, NosillaCastaway MildDeamons perfectly expressed the reason I much prefer recording with Allison on the NosillaCast Slack when he posted: > “I really enjoy it (and I think most […]
Continue readingSecurity Bits — 16 March 2025 ☘️
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇬🇧 🇺🇸 The UK’s secret campaign to compel Apple to break its iCloud Advanced Data Protection feature is reportedly continuing apace (still without official confirmation), with a hearing having apparently taken place in a […]
Continue readingSecurity Bits — 2 March 2025
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Yet another reminder that developers are in the attacker’s sights: VSCode extensions with 9 million installs pulled over security risks — www.bleepingcomputer.com/… Microsoft’s prompt and very effective response to proactively disabled the plugin in […]
Continue reading