New episode of Code and Country is out now! This week, we are joined by Elizabeth Sizeland, former UK Deputy National Security Adviser and Prime Minister’s Adviser on National Resilience and Security. Listen now: https://buff.ly/4azVmBQ

Taking a look at how love took down millions. This quote from the article still rings true: “You can update your operating systems or you can have the best email filters in the world, but you can’t patch the human brain,” said Cluley."

I may need some farming tips...

The key word here is "now"...after it happened. "PayPal now requires multifactor authentication on all U.S. customer accounts, forced password resets on affected accounts, and has implemented CAPTCHA, the consent order said."

365 is so widely used that "tech support impersonation" is a viable method of attack.

Another throwback from the vault - a nice look at Solar Sunrise over 25 years later.

"The proposed settlement order bars GoDaddy from exaggerating its security practices..." I know the answer to this already but....why lie when you could just put good security practices in place? 🥲

Now they're after Candy Crush... "Last week, major location data broker Gravy Analytics disclosed a data breach that may have resulted in the theft of precise location data for millions of people...appears to include data from popular mobile games like Candy Crush and more"

Just in case anyone needed a few more things to chew on before sleep...

Throwback read for the weekend. Taking a look at how they caught the creators of Scan4You.

Really hoping we don't see any catastrophic attacks on critical infrastructure this year but every article like this renews the concern.

Not the best way to start 2025. A quick search shows just how many schools are impacted by this. Cybersecurity *has* to be a priority.

Gotta stay one step ahead of the one step ahead.

I would hope large hospitals find it in their budget to invest more in cybersecurity. Protecting your patients goes far beyond just medically in this day and age.

This is certainly a big loss for the cybersecurity community. Wishing all the best for Amit's family as well as his colleagues at Tenable.

Before Siri and Alexa there was Bonzi Buddy - "the internet's most friendly malware"

All the "roundup" articles for 2025 have me thinking back on some of the biggest events in cyber history. Pulling one from the archives. This deep dive on the NotPetya attack is several years old but still an interesting read.

2025 is already starting off with a bang in the cybersecurity world. I anticipate we'll be seeing a lot more big stories like this in the coming year.

Time to retrain your fingers with the new date: 2024^H^H25

Hello, world.