Security Humor

Closeup of person going “Shhh!”

PyPI Goes Quiet After Huge Malware Attack: 500+ Typosquat Fakes Found

|
Emergency stop button: The Python Package Index was drowning in malicious code again, so they had to shut down registration for cleanup ...
Multiple, unskippable notifications

Apple OTP FAIL: ‘MFA Bomb’ Warning — Locks Accounts, Wipes iPhones

|
Rethink different: First, fatigue frightened users with multiple modal nighttime notifications. Next, call and pretend to be Apple support ...
Smokey Bear / This-is-fine crossover

Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data

|
Meta MITM IAAP SSL bump: Zuck ordered “Project Ghostbusters”—with criminal consequences, says class action lawsuit ...
Randall Munroe’s XKCD ‘The Wreck of the Edmund Fitzgerald’

Randall Munroe’s XKCD ‘The Wreck of the Edmund Fitzgerald’

|
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink ...
Scary skeletons

Telegram Privacy Nightmare: Don’t Opt In to P2PL

|
Scary SMS shenanigans: Avoid Telegram’s new “Peer-To-Peer Login” program if you value your privacy or your cellular service ...
a PRC flag flies in a stiff breeze

China Steals Defense Secrets ‘on Industrial Scale’

|
UNC5174 ❤ UNC302: CVSS 10 and 9.8 vulnerabilities exploited by Chinese threat actor for People’s Republic ...
A green worm on a juicy red apple

Apple M-Series FAIL: GoFetch Flaw Finds Crypto Keys

|
GoFAIL: Researchers worm their way into broken cache-filling microcode in most Macs and iPads ...
Randall Munroe’s XKCD ‘Schwa’

Randall Munroe’s XKCD ‘Schwa’

|
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink ...
Public washroom faucets

EPA and White House Raise Alarm on Water Cybersecurity

|
Iran and China fingered: Biden admin. chides governors: Water infra. lacks “even basic cybersecurity precautions.” ...