Weekly Round-Up 407

This week’s update is quite extensive mainly due to the continuous influx of recent breaches and revelations that I analyze. I frequently receive disclosure notifications from my followers who have been affected by new breaches, and it’s always intriguing to see how they are phrased. It provides insight into the level of responsibility the company is accepting, how much fault they are attributing to the hackers, and increasingly, how much legal input is evident. The last part, in particular, tends to water down all the pertinent details into vague, overarching statements that reveal very little about the actual events. Try to identify these trends in this week’s disclosure announcements. Once you recognize the patterns, you’ll start noticing them everywhere in the future.

Sources

1. Sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite
2. The JFrog webinar from last night is now available on demand (external dependencies, software bills of materials and AI, among other things)
3. I don’t like the use of the term “warfare”, but there’s no doubt are banks are being hammered by criminals (it’s business to them, not war)
4. Try getting ChatGPT to generate an image with exactly 5 people in it, I dare you! (after I got over the frustration, this was actually kinda fun 😊)
5. The state of data breaches, part 2 (hackers, corporate victims and law enforcement)