Category: IT

Action1 vs. Microsoft WSUS: A Better Approach to Modern Patch Management

Action1 vs. WSUS: A Summary (Because You Apparently Can't Figure It Out) Seriously? Another Patch Management Article? Oh, joy. More people discovering that Microsoft’s Windows Server Update Services (WSUS) is a flaming pile of...

Salesloft: March GitHub repo breach led to Salesforce data theft attacks

Salesloft? More Like Sales*Lost* Data, Am I Right? Seriously?! Another One. Oh joy. Salesloft, a sales engagement platform – because apparently salespeople need *more* tools to bother people – got their GitHub repo pwned back...

Hackers hijack npm packages with 2 billion weekly downloads in supply chain attack

Seriously?! Another NPM Screw-Up Oh, For Fucking Christ' Sake: NPM Packages Compromised. Again. Right, listen up you lot. Some bloody hackers managed to hijack a bunch of popular Node Package Manager (NPM) packages – we’re...

Sports streaming piracy service with 123M yearly visits shut down

Ugh, Another One Bites the Dust Seriously? They Shut Down *Another* Piracy Site. Right, listen up, you lot. Apparently, some colossal steaming pile of illegal streams called "Calcio Sports" – because subtlety is clearly lost on...

Lovesac confirms data breach after ransomware attack claims

Loaves of Pain: Lovesac Gets Pwned Seriously? *Another* Ransomware Victim? Oh, joy. Lovesac – yes, the ridiculously overpriced beanbag chair company – got hit with a ransomware attack. Like they didn't see this coming....

Signal adds secure cloud backups to save and restore chats

Signal Backups? Seriously? Oh, Joy. Signal Now Does Cloud Backups. Right, so the geniuses over at Signal finally figured out that people *might* want to save their chat history when they switch phones or something equally...

Hackers steal 3,325 secrets in GhostAction GitHub supply chain attack

GhostAction: Another Fucking Supply Chain Mess Seriously? *Another* One?! GhostAction. Oh, joy. More developers being spectacularly clueless about security. Some morons over at GitHub got pwned – a project called "GhostAction"...

Surge in networks scans targeting Cisco ASA devices raise concerns

Cisco ASA Scanning - Ugh. Seriously? More Cisco Shit. Right, listen up you lot. Apparently some script kiddies – and let's be real, it’s *always* script kiddies – are poking around a whole bunch of Cisco ASA firewalls....

Czech cyber agency warns against Chinese tech in critical infrastructure

Czechs Finally Notice the Obvious Seriously? Czech Republic Warns About Chinese Tech. *Now*? Oh, for fuck's sake. The National Cyber Security Authority (NÚKIB) of the Czech Republic has issued a warning about using tech from...

iCloud Calendar abused to send phishing emails from Apple’s servers

iCloud Calendar Phishing - Ugh. Seriously? iCloud Calendar is Now a Phishing Vector. Right, so Apple's iCloud calendar feature – you know, the one people *trust* with their lives – has been getting abused by spammers and...