Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Microsoft is continuing to tighten GitHub’s defenses against supply-chain attacks propagating via the platform: GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns — thehackernews.com/… ❗ Action Alerts Calls to action, if any […]
Continue readingTag: microsoft
Security Bits — 21 June 2026
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Some notable anecdotes to illustrate why Bart and Allison are so cautious about agentic AI: Over 20,000 Instagram accounts stolen in Meta AI support hack — www.bleepingcomputer.com/… (An agentic support agent could be easily […]
Continue readingSecurity Bits — 24 May 2026
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. More Mythos developments: From Anthropic: Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software — thehackernews.com/… Aided by Mythos Preview, Researchers Announce macOS Kernel Exploit Circumventing M5 Memory Integrity Enforcement — daringfireball.net/… […]
Continue readingSecurity Bits — 20 July 2025
❗ Action Alerts Calls to action, if any stories in this section are relevant to you, there is some action you should take. Microsoft July 2025 Patch Tuesday fixes one zero-day, 137 flaws — www.bleepingcomputer.com/…, krebsonsecurity.com/… & isc.sans.edu/… Most important patches for typical NosillaCastaways are Office zero-click exploits (triggered by previewing a document) Most important […]
Continue readingSecurity Bits – 21 July 2024
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇺🇸 Kaspersky officially announce they are leaving the US — www.bleepingcomputer.com/… Kaspersky offers free security software for six months in U.S. goodbye — www.bleepingcomputer.com/… Google are not the only company losing the battle against […]
Continue readingSecurity Bits — 2024 May 26
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Attackers are continuing to compromise Google ads, and they’re now targeting apps in the news as well as developer & sysadmin tools: Arc browser’s Windows launch targeted by Google ads malvertising — www.bleepingcomputer.com/… Ransomware […]
Continue readingSecurity Bits — 2 April 2023
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇦🇹 🇧🇪 🇮🇹 🇱🇺 🇳🇱 🇵🇹 Apple expands Emergency SOS via satellite to six more countries — appleinsider.com/… (Austria, Belgium, Italy, Luxembourg, the Netherlands & Portugal) Deep Dive — Two aCropalypses TL;DR — the […]
Continue reading
Stream Deck — Down the Rabbit Hole, Part 2
When we left our hero at the end of Part 1, he… I… had a working set of controls for my NanoLeaf lights. Once I had my buttons working, I decided I wanted to have some nice images to place on them to make the actions clear, and which were nice to look at. The […]
Continue readingI’m Still Using it — Bart Edition
Microsoft Remote Desktop, Core Shell, and Transmit Allison asked me to hijack this format for a special instalment where I share three related apps I’m still using that share a theme — connecting to remote computers. My day job has changed in many ways in recent months as I’ve transitioned from being a vanilla sysadmin […]
Continue readingSecurity Bits — 23 December 2022 🎄
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇺🇸 Apple have released their opt-in new Advanced Data Protection for iCloud , but only in the US for now — appleinsider.com/… At least initially, enabling ADP could complicate the setup of new devices […]
Continue reading