ZDI is ramping up the pressure on software vendors that consistently ship faulty, incomplete security patches I talked to @dustin_childs about "disturbing trends" in patch quality problems from all the major tech vendors Read:

securityweek.comVulnerability Broker Applies Pressure on Software Vendors Shipping Faulty, Incomplete Patches | SecurityWeek.ComTrend Micro’s Zero Day Initiative is ramping up the pressure on software vendors that consistently ship faulty, problematic security patches.

2:47 PM ∙ Aug 17, 2022

---

17Likes8Retweets

-

Crypto, fraud, scams. Researchers looked and found evidence of insider trader by crypto markets. Shocking, I know.

We find evidence of systematic insider trading in cryptocurrency markets, where individuals use private information to buy coins prior to exchange listing announcements. Our analysis shows significant price run-ups before official listing announcements, similar to prosecuted cases of insider trading in stock markets. Leveraging blockchain data, we identify the specific transactions and wallets (individuals) that consistently trade before announcements, ruling out alternative explanations. We estimate that insider trading occurs in 10-25% of cryptocurrency listings and as a lower bound, insiders earned $1.5 million in trading profits. Our findings identify cases that are yet to be prosecuted.

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4184367

-

On p.20/21: (1) Reporting Fake or Imposter [..] Accounts. (2) Indications or Common Identifiers Associated w/Imposter Accounts.

My book “Cyber and the City” has now been published! So, to mark the occasion, here’s a short thread on the history and origins of cyber security in the UK financial sector. Book available here and elsewhere: amzn.eu/d/hvG6MNZ (1/12)

3:01 PM ∙ Aug 17, 2022

---

57Likes15Retweets

-

https://pubs.geoscienceworld.org/ssa/srl/article-abstract/89/2A/577/525827/Do-Large-Magnitude-8-Global-Earthquakes-Occur-on

-

-

Follow up on the other day’s UK water hack

https://www.bloomberg.com/news/articles/2022-08-17/uk-water-supplier-hit-by-extremely-concerning-cyberattack

-

I was one of those three, and the hackers were able to take over my Signal account for 13 hours. Here's how we responded to this incident.

Great paper by @BushraAlAhmadi at @USENIXSecurity about alert fatigue in the SOC, noting that we should be more careful to distinguish between false positives and 'benign triggers'. usenix.org/conference/use…