Episode 230: A number we all agree upon

1. 5th November 1993: Bugtraq was created by Scott Chasin as a full disclosure vulnerability reporting mailing list at the dawn of the World Wide Web. Bugtraq had an enormous influence on how orgs responded to vuln disclosure and paved the way for a shift which led to bug bounty programs.

https://x.com/todayininfosec/status/1986164925039841770

1. 24th October 2002: The worm-like Friendgreet propagated by emailing all Outlook contacts from each computer where it was installed. But THERE WAS A TWIST!

The software presented a EULA stating it would do that!

They gave fair warning, right!?

(EULA = End User License Agreement)

https://x.com/todayininfosec/status/1981885412374114601

CyberSlop — meet the new threat actor, MIT and Safe Security

Cybersecurity vendors peddling nonsense isn’t new, but lately we have a new dimension — Generative AI. This has allowed vendors — and educators — to peddle cyberslop for profit.

Earlier this year, MIT released a working paper and made a webpage around 80% of ransomware attacks using Generative AI

Law passed for scammers, mules to be caned after victims in Singapore lose almost $4b since 2020

SINGAPORE – Scammers will get at least six strokes of the cane, with the punishment going up to 24 strokes depending on the severity of the offence.

Those to be caned will include syndicate members and recruiters, and those who help them, such as money mules who provide their bank accounts, SIM cards or Singpass credentials.

These mules will face discretionary caning of up to 12 strokes.

Tweet of the week: https://x.com/phl43/status/1985841184141689196

Come on! Like and bloody well subscribe!