serisec

Tag: update

  • Weekly Update 506

    Weekly Update 506 I’m finding it quite fascinating to watch the current spate of ShinyHunters breaches and dumps. There’s the obvious criminality of it all, but then there’s also the response from organisations (or lack thereof, as it relates to disclosure to victims), the appearance and disappearance of victims on their dark web site, the…

  • Weekly Update 504

    Weekly Update 504 It’s a hot topic, the old “pay or don’t pay” for hackers not to leak your data. Since recording this a few days ago, we’ve had Grafana go with the “no pay” approach, and I’ve seen a raft of commentary around other companies reaching “agreements”, which is a much politer way of…

  • Weekly Update 503

    Weekly Update 503 Well, it’s the day before the Instructure “pay or leak” deadline (at least by my Aussie watch), and the company remains removed from the ShinyHunters website. In its place sits a press statement that amounts to “we’re not making any statements”. So did they pay? And if so, what lofty figure would…

  • Weekly Update 500

    Weekly Update 500 Looking back at this milestone video, it’s the audience question towards the end I liked most: “are you happy”? Charlotte and I have chosen a path that’s non-traditional, intense and at times, pretty stressful. There’s no clear delineation of when work starts and ends, no holidays where we don’t work, nor weekends,…

  • Weekly Update 496

    Weekly Update 496 Watching OpenClaw do its thing must be like watching the first plane take flight. It’s a bit rickety and stuck together with a lot of sticky tape, but squint and you can see the potential for agentic AI to change the world as we know it. And I don’t think that’s hyperbolic.…

  • Weekly Update 495

    Weekly Update 495 In the beginning, it was simple. A website, a database and 150M+ email addresses to search. Time has added serverless functions (which run on servers 🤷‍♂️), code on the edge, new data storage constructs and a completely different mechanism for even just querying a simple email address. HIBP is a continually evolving…

  • Weekly Update 494

    Weekly Update 494 Since starting HIBP a dozen and a bit years ago, I’ve loaded an average of one breach every 4.7 days. That’s 959 of them to date, but last week it was five in only two days. That’s a few weeks’ worth of breaches in only 48 and a half hours. And that’s…

  • Weekly Update 493

    Weekly Update 493 The Odido breach leaks were towards the beginning during this week’s update. I recorded it the day after the second dump of data had hit, with a third dump coming a few hours later, and a final dump of everything the day after that. From what I hear, it dominated the news…

  • Weekly Update 492

    Weekly Update 492 The recurring theme this week seems to be around the gap between breaches happening and individual victims finding out about them. It’s tempting to blame this on the corporate victim of the breach (the hacked company), but they’re simultaneously dealing with a criminal intrusion, a ransom demand, and class-action lawyers knocking down…

  • Weekly Update 490

    Weekly Update 490 A big “thank you” to everyone who helped me troubleshoot the problem with my “Print Screen” button on the new PC. Try as we all might, none of us could figure out why it refused to bind to SnagIt and instead insisted on dumping the entire collection of screens to a file…

  • Weekly Update 487

    Weekly Update 487 I thought Scott would cop it first when he posted about what his solar system really cost him last year. “You’re so gonna get that stupid AI-slop response from some people”, I joked. But no, he got other stupid responses instead! And I got the AI-slop responses! Draw your own conclusions on…

  • Weekly Update 486

    Weekly Update 486 I’m in Oslo! Flighty is telling me I’ve flown in or out of here 43 times since a visit in 2014 set me on a new path professionally and, many years later, personally. It’s special here, like a second home that just feels… right. This week, the business end of things is…

  • Weekly Update 485

    Weekly Update 485 15 mins and 40 seconds. That’s how long it took to troubleshoot the first tech problem of 2026, and that’s how far you’ll need to skip through this video to hear the audio at normal volume. The problem Scott and I had is analogous to the troubleshooting so many of us do…

  • Weekly Update 484

    Weekly Update 484 I think the start of this week’s video really nailed it for the techies amongst us: shit doesn’t work, you change something random and now shit works and yu have no idea why 🤷‍♂️ Such was my audio this week and apoligise to those of you watching the video below for the…

  • Weekly Update 477

    Weekly Update 477 What. A. Week. It wasn’t just the preceding weeks of technical pain as we tried to work out how to get this data loaded, it was all the subsequent queries we had to deal with too. Some of them are totally understandable, whilst others just resulted in endless facepalms 🤦‍♂️ But we…

  • Weekly Update 474

    Weekly Update 474 You’re not going to believe this – the criminals that took the Qantas data ignored the injunction 😮 I know, I know, we’re all a bit stunned that making crime illegal hasn’t appeared to stop it, but here we are. Just before the time of writing, I was contacted by someone who…

  • Weekly Update 460

    Weekly Update 460 This week’s update is the last remote one for a while as we wind up more than a month of travel. I’m pushing this out just before we jump on the Qantas plane home… right after they’ve advised just how much of my data was impacted by their breach. That got me…

  • Weekly Update 459

    Weekly Update 459 New week, different end of the world! After a fleeting stop at home, we’re in Japan for a proper holiday (yet somehow I’m still here writing this…) with the first stop in Tokyo. It’s like nowhere else here, and this is now probably my 10th trip to Japan over a period of…

  • Weekly Update 453

    Weekly Update 453 Well, the last few weeks of insane hours finally caught up with me 🤒 Not badly, but I evidently burned enough midnight oil to leave the immune system somewhat degraded and just after recording this video, I really didn’t feel like doing much at all. Some congestion and sniffles aside, it’s really…

  • Weekly Update 446

    Weekly Update 446 After an unusually long day of travelling from Iceland, we’ve finally made it to the land of Guinness, Leprechauns, and a tax haven for tech companies. This week, there are a few more lessons from the successful phish against me the previous week, and in happier news, there is some really solid…

  • Weekly Update 434

    Weekly Update 434 This week I’m giving a little teaser as to what’s coming with stealer logs in HIBP and in about 24 hours from the time of writing, you’ll be able to see the whole thing in action. This has been a huge amount of work trawling through vast volumes of data and trying…

  • Weekly Update 430

    Weekly Update 430 I’m back in Oslo! Writing this the day after recording, it feels like I couldn’t be further from Dubai; the temperature starts with a minus, it’s snowing and there’s not a supercar in sight. Back on business, this week I’m talking about the challenge of loading breaches and managing costs. A breach…

  • Weekly Update 429

    Weekly Update 429 A super quick intro today as I rush off to do the next very Dubai thing: drive a Lambo through the desert to go dirt bike riding before jumping in a Can-Am off-roader and then heading to the kart track for a couple of afternoon sessions. I post lots of pics to…

  • Weekly Update 425

    Weekly Update 425 This was a much longer than usual update, largely due to the amount of time spent discussing the Earth 2 incident. As I said in the video (many times!), the amount of attention this has garnered from both Earth 2 users and the company itself is incommensurate with the impact of the…