WannaCry. And other things. But mostly that.

Docusign had their users' e-mail addresses stolen, which were used in a phishing campaign with an e-mail crafted to look like Docusign's. I can tell from first-hand experience that it was a pretty convincing attempt.

Apple released security updates for MacOS, iOS, Safari and others, fixing a total of 66 vulnerabilities.

It was found that HP laptops, through an audio driver from Conexant, log all keystrokes entered in the machine. It doesn't seem intentionally malicious though, but rather a debugging tool.

In a "How was this not a thing yet?" move, Wordpress has set up a bug bounty program on HackerOne.

TL;DR: If you own an Asus RT router, update it.

OpenVPN's security audits found 7 vulnerabilities, out of which one was rated high severity and another medium. All were fixed. The researchers praise OpenVPN's secure development, although they do include some remarks.

Interesting overview of some of the most important HTTP security headers, like HTST, X-Frame-Options and others.

I remain amazed by the concept of malware-as-a-service. This article shows off DiamondFox. Just purchase the software, pick your plugins (keylogger, DDoS, Crypto Wallet Stealer, ...) and watch the dashboard to track your geographical spread and dig down into victim details.

Something I've never given any thought about: security of yachts. Probably not that relevant to any of us, but an interesting read nonetheless :-)

This is a long but interesting read on how security has progressed over the last decades. How crime evolved, how the private industry evolved, cyber warfare and much more.