Supported by 1Password.
Hi folks,
Lot's of smaller, interesting articles this week, and a bunch of breaches and issues, unfortunately. Also I really wouldn't want to be a Fortinet admin (or sales person) these days. Either way, happy reading and have a good weekend!
Cheers,
Always interesting to read these. Their blog has a post for every one of the four days in total.
They not only set up the honeypot tenants, but also go to known phishing sites and "get phished" with the fake tenants, to then study what the attackers do once they're in. That must be so cool to do :-)
From the article: "Private Cloud Compute (PCC) is a cloud intelligence system for complex AI processing of data from user devices in a way that does not compromise privacy. Shortly after Apple announced PCC, the company gave early access to select security researchers and auditors so they could verify the privacy and security promises for the system.". Nice! Sounds like a worthy effort.
It looks like a good, down to Earth list that might be a good starting point for a security program.
It doesn't sound like a practical attack yet, but it's a good reminder not to take standard encryption necessarily for granted towards the future.
Very interesting read on what I imagine will be a hot topic the next decade: legal liability of software makers.
Nice short post on why Apple's generated passwords are what they are, with UX in mind.
I don't think most developers realise how valuable 1Password can be. It doesn't just hold passwords, it also hold your SSH keys, signs your Git commits, injects token and other secrets in CLI scripts when you want, and much more. (Sponsored)