← Feed

Posts

• View post

  Understand ClickFix attacks, and help your colleagues, friends, and family (and your boss!) to avoid them… I trace the evolution of cybercriminal treachery in malware delivery, from old-school email attachments, through high-pressure “support” calls, to today’s approach of promising you a “fix” you can implement yourself in moments with the same sort of basic clicks and keystrokes you use in everyday life. Learn what to do to stay safe, and why “ClickFix” tricks work. On the ☀️SolCyber blog: h...

• View post

  RE: https://infosec.exchange/@bontchev/117314994533181052 Ah, I forgot you are a Windows user, where installers are a differently interesting risk,given that it’s old-school “click link, download file, run MSI or EXE.” Being zoomed in on Windows does tend to narrow your viewpoint and your experience a lot, given that other OSes are available, and used by a majority of server-style systems and a significant minority of laptop users. (I’m ignoring iOS and Android, which are Mach/BSD and Linux a...

• View post

  RE: https://infosec.exchange/@bontchev/117337322796120995 Hahahaha. So the official download repositories of Julia and Rust are “open source crap,” but somehow the entire supply chain of dependencies that you invite into your world when running pip to grab some new packages is trustworthy? But, of course, “you know what you are doing,” because everyone else is some kind of idiot while you are not. Somehow you expect pip install to be safer than curlbash… when they are much more similar in...

• View post

  RE: https://infosec.exchange/@bontchev/117343817597525873 You really love using the word “idiot,” don’t you? You seem to grasp every chance to be insulting and demeaning when it simply isn’t needed. As I said, you need to get out more.

• View post

  iOS 27.0.1 is out already - there are no security fixes listed (just the words "this update has no published CVE entries"), but there's an interesting bug patched for iPhone 18 Pro and Pro Max models that "may unexpectedly restart when Face ID fails to authenticate." That's a "fail closed" situation, which beats "fail open" in a case like this, but that could, admittedly with a bit of a stretch and a wry look, be considered a potential DoS (denial...

• View post

  𝔸𝕞𝕠𝕤 𝕥𝕙𝕖 𝔸𝕣𝕞𝕒𝕕𝕚𝕝𝕝𝕠'𝕤 𝔸𝕝𝕞𝕒𝕟𝕒𝕔: The biter bit! Set a trap to trap the trappers... Lots more helpful advice on the ☀️ @SolCyber blog: https://solcyber.com/blog

• View post

  𝕋𝔸𝕃𝔼𝕊 𝔽ℝ𝕆𝕄 𝕋ℍ𝔼 𝕊𝕆ℂ: "MFA - The what, the how, and the why." Join me and David Emerson for a delightfully jargon-free, plain-English discussion of multi-factor authentication. We explain how and why the main forms of MFA work, while at the same time reminding you of the cybersecurity risks that MFA can't solve. (Side-story. In this episode, David mentioned in passing that he needed to buy a new laptop. I couldn't resist asking him what he felt about the price of RAM these day...

• View post

  Apparently the new Patch Tuesday fixes two 0-days. Also, watch out for new Nightmare Eclipse Wednesday Exploits🙀 https://solcyber.com/tales-from-the-soc-nightmare-eclipse-where-next-for-bug-disclosures-s1-ep027/

• View post

  Cynicism? Not in the latest TALES FROM THE SOC podcast from ☀️SolCyber 🫢‼️😬 Join me and David Emerson (@d@merveilles.town) for a provocative take on breach disclosures, patching, and cybersecurity in general. Search and listen 🔈on your favourite podcast feed, or follow along with our carefully-curated transcript 📖 on the blog: https://solcyber.com/tales-from-the-soc-nightmare-eclipse-where-next-for-bug-disclosures-s1-ep027/

• View post

  𝔸𝕞𝕠𝕤 𝕥𝕙𝕖 𝔸𝕣𝕞𝕒𝕕𝕚𝕝𝕝𝕠'𝕤 𝔸𝕝𝕞𝕒𝕟𝕒𝕔: No Such Agency? Never Say Anything? Well, the NSA campus is on OpenStreetMap, and hosts the National Cryptologic Museum, which is open to the public... …and fascinating! They've not only got working Enigma machines from WW2, but also a US version of the Bombe device used to automate Enigma cracking. For great articles and explainers, join us on the ☀️SolCyber blog: https://solcyber.com/copy-fail-hype-versus-reality-the-full-story/ #AmosArmadillo

• View post

  "Be smart and just pay," demand the attackers. Here are some lessons you can learn for yourself and your business. By me on the ☀️SolCyber blog: https://solcyber.com/blackmailers-going-by-exfilsquad-claim-breaches-against-uk-orgs-supporting-education-and-police/

• View post

  TALES FROM THE SOC: Exploits versus Entropy - are the shiniest new threats worse than the disruptive disorder of history? Join me and David Emerson (@d) for another thoughtfully outspoken but infectiously good-humored episode 😬 Find this awesome ☀️SolCyber podcast on your favorite podcast feed, or listen directly here: https://tales-from-the-soc.podbean.com/e/exploits-versus-entropy-s1-ep-025/

• View post

  Apple updates arrive, including for phone users (iOS 26.5.2). Apparently no 0-days…

• View post

  Bug had 98% CVSS score, but was 100% exploited against Nissan and perhaps 100s more companies… Explainer and actionable advice by me on the ☀️SolCyber blog: https://solcyber.com/nissan-staff-hacked-via-oracle-zero-day-bug/

• View post

  European supermarket chain Lidl is in the news for a data breach. Reports suggest that that the company has published a breach warning online in NL, BE, and DE - but good luck spotting it if you're just a regular user. (As a challenge, see if you can spot the link to the notification on the main DE site, shown below. Hint: that's not where they published it :-) Early reports suggest that the breach affects online shoppers (so if you went into a shop and bought items directly o...

• View post

  Patch Tuesday Mystery! A BitLocker bypass dubbed CVE-2026-50661 was patched in the July 2026 Windows update… So far, media coverage is just repeating Microsoft’s basic report, which admits this was a zero-day (known and disclosed already) but not exactly which already-disclosed bug it relates to. CrowdStrike, amongst others, has reasonably wondered whether, although “not confirmed at this time, this CVE may be the patch for [Nightmare Eclipse’s] GreatXML.” I wrote up this exploit in detail (...

• View post

  New podcast: AI - ENTERPRISE BEST PRACTICES Duck (🦆 yes, that is I!) and @d (David Emerson) of ☀️SolCyber give you a well-informed guide to using AI safely, all in plain English. Straight talk, good humour, no FUD, and zero hype - this is a short, digestible, and very instructive episode. Listen now 🔈, or read 📖 a cleanly-edited transcript (curated by me - free of AI guesswork and speculation 😬): https://solcyber.com/tales-from-the-soc-ai-enterprise-best-practices-s1-ep026/ (More links in...

• View post

  𝔸𝕞𝕠𝕤 𝕥𝕙𝕖 𝔸𝕣𝕞𝕒𝕕𝕚𝕝𝕝𝕠'𝕤 𝔸𝕝𝕞𝕒𝕟𝕒𝕔: What if AI automation speeds up *the wrong* outcome?! Catch the 𝗔𝗜 - 𝗘𝗡𝗧𝗘𝗥𝗣𝗥𝗜𝗦𝗘 𝗕𝗘𝗦𝗧 𝗣𝗥𝗔𝗖𝗧𝗜𝗖𝗘𝗦 podcast here: https://solcyber.com/tales-from-the-soc-ai-enterprise-best-practices-s1-ep026/ Links for Apple, Spotify, full transcript, and more in the comments. Or search "Tales from the SOC" from ☀️SolCyber in your favourite podcast feed.

• View post

  Apple iOS 26.6 is out. As well as promising to get you ready for iOS 27 (heigh ho!), there are lots of security fixes. None of these seem to be zero-days, but in plain language, there are one or more vulnerabilities of all these types, in no particular order ("Sec" = security bypass, "DoS" = denial of service, "EoP" = elevation of privilege, and "RCE" = remote code execution): Sec: Mirrored iPhones could leak sensitive data. Sec: Apps could track users...

• View post

  𝕋𝔸𝕃𝔼𝕊 𝔽ℝ𝕆𝕄 𝕋ℍ𝔼 𝕊𝕆ℂ: AI - ENTERPRISE BEST PRACTICES Join me and @d@merveilles.town (David Emerson) an informative guide to using AI safely in your business. Search "Tales From The SOC" in your favorite podcast feed, or listen directly on the ☀️SolCyber podcast pages. Links in comments below...

• View post

  𝕋𝔸𝕃𝔼𝕊 𝔽ℝ𝕆𝕄 𝕋ℍ𝔼 𝕊𝕆ℂ: AI - ENTERPRISE BEST PRACTICES Join me and @david@infosec.exchange Emerson for an informative guide to using AI safely in your business. Search "Tales From The SOC" in your favorite podcast feed, or listen directly on the ☀️@SolCyber podcast pages.

• View post

  The EU has fined search juggernaut Google €890,000,000 (about $1 billion) for anti-competitive behaviour. The penalty covered two offences, dubbed "self-preferencing" (€460 million) and "anti-steering" (€430 million), whose names describe Google's unlawful activities. 𝘚𝘦𝘭𝘧-𝘱𝘳𝘦𝘧𝘦𝘳𝘦𝘯𝘤𝘪𝘯𝘨 refers to Google's practice of giving its own products and services better or more prominent billing than everyone else's. Self-preferencing falls under what Americans generally...

• View post

  Craneware says that some of the stolen data was public already - but not all of it was! Reports itself to the FBI in the US and to the ICO in the UK. Story and useful advice on the ☀️SolCyber blog: https://solcyber.com/craneware-group-reports-huge-healthcare-data-breach-plays-down-risks/

• View post

  11 years in prison between them, but they may have millions stashed away for when they get out. About the latest Scattered Spider convictions… by me on the ☀️SolCyber blog: https://solcyber.com/two-attackers-imprisoned-over-transport-for-london-cyberattack/

• View post

  Firefox 152.0.6 is “just” a point release, not a major update, but it does fix two zero-days. Flagged as “critical,” CVE-2036-15718 and -15719 are listed as “exploit code for these are public,” but with no active attacks yet reported. The first sounds like an RCE (remote code execution) vuln, because it’s a memory pointer mismanagement bug in WebAssembly; the second sounds like a security bypass that might lead to trouble such as authentication token theft, because it’s a DOM (domain object mo...

• View post

  TALES FROM THE SOC: Exploits versus Entropy - are the shiniest new threats worse than the disruptive disorder of history? David Emerson (@d@merveilles.town) is in great form, as always - thoughtfully outspoken but infectiously good humored at the same time. Find this awesome ☀️SolCyber podcast in your favorite podcast feed, or listen/read here: https://solcyber.com/tales-from-the-soc-exploits-versus-entropy-s1-ep025/

• View post

  𝔸𝕞𝕠𝕤 𝕥𝕙𝕖 𝔸𝕣𝕞𝕒𝕕𝕚𝕝𝕝𝕠'𝕤 𝔸𝕝𝕞𝕒𝕟𝕒𝕔: Ever wondered why internet RFC docs avoid the word "byte"? If you want to sound fabulously pompous, say, "Terms such as 𝘣𝘺𝘵𝘦, 𝘸𝘰𝘳𝘥, 𝘥𝘸𝘰𝘳𝘥, 𝘴𝘩𝘰𝘳𝘵, 𝘭𝘰𝘯𝘨, and 𝘲𝘶𝘢𝘥𝘸𝘰𝘳𝘥 don't have an obvious semantic or historical relationship with the number of binary digits (𝘣𝘪𝘵𝘴, for short) that they contain, and remain dangerously ambiguous to this day when calculating how much memory they need. So it's better to choose words and abbreviations that more c...

• View post

  RE: https://tribe.net/@AbsoluteMemery/116838728227285524 The bizarre thing is that the software that harvests some the most intimate stuff about you on an an absurdly consistent basis - taking full copies of programs you run that “seem to be new,” perhaps; recording the URLs you visit; tracking the DNS requests you make; copying every command line parameter you type in (which often includes passwords and other PII); reading your emails before you do just in case; scraping process memory and fol...

• View post

  𝔸𝕞𝕠𝕤 𝕥𝕙𝕖 𝔸𝕣𝕞𝕒𝕕𝕚𝕝𝕝𝕠'𝕤 𝔸𝕝𝕞𝕒𝕟𝕒𝕔: Some secret software strings are so cool that they're now paradoxically part of public programming practice. (Try connecting to Google's Gmail service via IMAP and sending it the command XYZZY :-) Find heaps of facts, fun, and plain-English explainers on the ☀️SolCyber blog: https://solcyber.com/amoss-almanac-like-a-dictionary-only-cooler/ #AmosArmadillo

• View post

  A ‘Janus’ attack! Funky bug-o’-the day is CVE-2026-5704 in the venerable GNU ‘tar’ utility. Tar is short for “tape archive,” and it’s one of the oldest and most widely-used package download formats around. (When you see files called *.tgz, or *.tbz, or *.txz, those are just tar archives that have subsequently been compressed.) Each entry in the archive has a name, a list of access permissions and other attributes, a size, and (size) bytes’ worth of data. Some filenames, such as Unix or Windows...