Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. At least one TV maker is (belatedly) cracking down on residential proxies: LG to Ban Residential Proxies from Smart TV Apps — krebsonsecurity.com/… Another notable age-verification development: 🇺🇸 New York Rolls Out Final Rules […]
Continue readingTag: zero day
Security Bits — 5 July 2026
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Microsoft is continuing to tighten GitHub’s defenses against supply-chain attacks propagating via the platform: GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns — thehackernews.com/… ❗ Action Alerts Calls to action, if any […]
Continue reading
Security Bits — 21 June 2026
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. Some notable anecdotes to illustrate why Bart and Allison are so cautious about agentic AI: Over 20,000 Instagram accounts stolen in Meta AI support hack — www.bleepingcomputer.com/… (An agentic support agent could be easily […]
Continue readingSecurity Bits — 31 August 2025
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. 🇺🇸 The leaked data from the Allianz Life breach discussed last time has been added to Have-I-Been-Pwned, so you can now check if you are affected — www.bleepingcomputer.com/… There have been confusing developments in […]
Continue readingSecurity Bits — 20 July 2025
❗ Action Alerts Calls to action, if any stories in this section are relevant to you, there is some action you should take. Microsoft July 2025 Patch Tuesday fixes one zero-day, 137 flaws — www.bleepingcomputer.com/…, krebsonsecurity.com/… & isc.sans.edu/… Most important patches for typical NosillaCastaways are Office zero-click exploits (triggered by previewing a document) Most important […]
Continue readingSecurity Bits — 11 May 2025
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. A great example of why it’s important to patch – this is one of the things the Apple updates we called out last time patched: Apple ‘AirBorne’ flaws can lead to zero-click AirPlay RCE […]
Continue readingSecurity Bits — 16 February 2025
Feedback & Followups Listener and community feedback, developments in recently covered stories, and developments in long-running stories we’re tracking over time. DNS discussion update: as pointed out by Ferrers in the Podfeet Slack, Cloudflare’s free DNS service does offer an equivalent to Quad9’s malware-blocking DNS service — Details on their website 1.1.1.1 — unfiltered DNS […]
Continue reading