Good layperson-level explanation.

Surveillance as a security threat

Researchers claim misconfigurations are also rife in cloud infrastructure

Written and performed by Forrest Brazeal (x3)

New tech songs drop first on Twitter: https://twitter.com/forrestbrazeal

Lyrics:
VERSE 1
My day was going great;
Just pushed a code update;
But then the pagers started humming:
Oops, did I just delete
Half the production fleet?
That sinking feeling's coming, from deep within my plumbing

PRECHORUS
Now my life is flashin',
Hope my boss will show compassion
And I really, really need someone to say...

CHORUS
Hey hey hey, it's gonna be okay.
You didn't just set fire to your resume.
This happens to the best,
Try not to get too stressed,
It'll be an awesome story someday.

VERSE 2

I tweaked a small config,
Turns out that it was big
And now my app has been beheaded;
When I do something wrong,
I fear I don't belong,
How can the world forget it, we're trending now on Reddit.

PRECHORUS 2
Oh, mistakes will find you
But you've got a team behind you
So fix the process, yes, but don't dismay:

CHORUS 2
Hey hey hey, it's gonna be okay.
We'll do a full postmortem some other day.
It was a swing and miss,
We're gonna learn from this
And we'll all be better engineers, like,
 
BREAK
Look, here's what you need to know when something gets destroyed
If there's negligence or malice then you shouldn't be employed
But if a human is assumin' then the problem is the system;
It's gut-wrenching, butt-clenching, but you work with 'em.
It can happen to a junior, happen to a senior.
Just because you caused a little pause doesn't mean you're
Incompetent, it means you're doing work with real effect.
It's a scar of battle, baby. That'll earn you some respect.

PRECHORUS 3
And we all have been there
Made a slip or two or ten there;
So we try to do a blameless RCA...

CHORUS 3
Hey hey hey, it's gonna be okay.
You will still be here when this blows away.
We've all screwed something up,
So welcome to the club.
We would love to hear your story someday.

New NAME:WRECK DNS Vulnerabilities Impact Nearly 100 Million Servers and IoT Devices.

When it comes to security research, the path from bug to vulnerability to exploit can be a long one. GitHub Security Lab describes the journey.

Yesterday, a researcher disclosed a method of hiding up to three MB of data inside a Twitter image. In his demonstration, the researcher showed both MP3 audio files and ZIP archives contained within the PNG images hosted on Twitter.

Today, researchers have exposed common weaknesses lurking in the latest smart sex toys that can be exploited by attackers. As more as more adult toy brands enter the market, and COVID-19 situation has led to a rapid increase in sex toy sales, researchers believe a discussion around the security of these devices is vital.

A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disclosure notifications. - oss-vulnerability-guide/guide.md at ...

Similar number in 2020 required no user interaction, says redscan

This blog post brings more technical details on CacheFlow: a threat that we first reported about in December 2020. We described a huge campaign composed of dozens of malicious Chrome and Edge browser extensions with more than three million installations in total.

ZeroLogon is a treasure for cybercriminals, an ongoing struggle for Microsoft, and a headache for everyone caught in the middle.