Richi Jennings
(He/Him)
As seen in:
Forbes,
Computerworld,
CIO,
Petri,
NewsBreak,
Security Boulevard,
DevOps.com,
ReversingLabs
Articles by Richi Jennings
Best of 2025: Huge Food Wholesaler Paralyzed by Hack - is it Scattered Spider Again?
We were warned this would happen. And now here we are. United Natural Foods (UNFI) has had to switch off systems after a cyberattack, crippling its operations. This is a huge deal, because UNFI is a big part of the grocery distribution network in the U.S. and Canada. Once again, it looks like the work of UNC3944, a/k/a “Scattered Spider.” In today’s SB Blogwatch, we hoard canned goods. Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Farewell, Skype sounds.
Best of 2025: NOT-So-Great Firewall: China Blocks the Web for 74 Min.
HTTPS connections on port 443 received forged replies. Chinese web users couldn’t access websites outside the People’s Republic yesterday. The outage lasted an hour and a quarter—with no explanation. Nobody’s sure whether it was a mistake or an ominous test of new censorship capabilities. But some are linking it to a recent outage in Pakistan. In today’s SB Blogwatch, we shave with Hanlon’s razor. Your humble blogwatcher curated these bloggy bits for your entertainment.
Best of 2025: Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’
Larry’s PR angels desperately dance on the head of a pin. Oracle is now admitting that, yes, an Oracle cloud service was breached. This is, of course, despite last week’s vehement denials. In today’s SB Blogwatch, we see man tic. Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Happy Birthday. Editor Note: Oracle has now officially acknowledged the breach involved stolen credentials from two obsolete servers but maintains that no data was stolen.
Best of 2025: Ukraine Pwns Russian Drone Maker - Gaskar is ‘Paralyzed’
Ukrainian Cyber Alliance and Black Owl team up to hack manufacturer of Russian military drones, sources say. Gaskar Group, Russian designer of drones plaguing Ukraine’s skies, is in utter disarray. Or, at least, so says Ukrainian military intelligence. Hacker groups teamed up to steal and delete 57 TB of critical data and backups, preventing the company from operating, we’re told. In today’s SB Blogwatch, we peer through the fog of war.
US Defense Contractor Boss Sold Zero Days to Russia - Cops a Plea
Peter Williams admits to selling unpatched iPhone bugs to a shady Russian broker. The former head of L3Harris’s Trenchant “offensive cyber” division has admitted to stealing a weapons-grade exploit chain worth $35 million and then selling it for personal gain. The feds charged Peter Williams last week—and this week he’s decided to ’fess up. The company’s not on trial, but the story raises important questions about the national security risks of outsourcing such weaponry.
Elon Musk’s SpaceX ‘is Facilitating’ Scams via Starlink
Pig-butchering scammers in Myanmar lose use of 2,500 Starlink terminals. As we discussed earlier this year, organized crime groups are using slaves to scam people from massive “pig butchering” factories. One notorious center for the grotesquely evil practice is Myanmar. This week, SpaceX is crowing about how it’s blocked 2,500 Starlink satellite internet terminals being used by these scumbags to reach their victims. In today’s SB Blogwatch, we wonder what took Elon so long.
October Patch Tuesday Fails Hard - Windows Update Considered Harmful?
Showstopper bugs with security certificates—plus failing USB keyboards and mice—cause QA questions. Microsoft’s Windows security update rollup is badly buggy this month. Post-patch, the WinRE recovery environment doesn’t work with most keyboards and mice. And a fix for a cryptography bypass bug is causing failures at several enterprises, requiring rollbacks or registry edits to resolve. It’s leading to inevitable concerns about the Windows dev process. In today’s SB Blogwatch, we grab a Linux ISO.
#Pixnapping: Android Timing Attack Sends Google Back to the Drawing Board
Researchers discover a new way to steal secrets from Android apps. Anything any Android app can display is vulnerable to the Pixnapping attack—including 2FA codes. That’s the worrying claim from a group of researchers this week. “It’s like Rowhammer, but for the screen,” quips one wag. Google thought it had already fixed the previously undisclosed flaw. But the group’s demo says not. In today’s SB Blogwatch, we blur the pels. Your humble blogwatcher curated these bloggy bits for your entertainment.
#RediShell: Redis/Valkey Get ‘Perfect 10’ Critical RCE Vuln
CVSS 10.0 vulnerability in ubiquitous cloud storage layer. PATCH NOW. Redis (Remote Dictionary Server) and its open source fork Valkey share a scary flaw that can give an attacker full remote code execution. It’s been assigned a maximum CVSS score of 10.0—which is something you don’t often see. Redis shouldn’t normally be exposed to the internet, but it often is. In today’s SB Blogwatch, we descend a layer. Your humble blogwatcher curated these bloggy bits for your entertainment.
Asahi Hack Update: Beer-Free Day #5 Dawns in Japanese Ransomware Crisis
Breaking: Big beer brewer belatedly believes bitten by ransomware—and likely a data breach. Japan’s biggest producer of beer is still not producing any beer this week. Asahi Group Holdings shut down production Monday after detecting a cyber intruder. And today it’s confirmed fears of ransomware. In today’s SB Blogwatch, we dry out. Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Underestimating Jane Goodall’s impact on science. 金のうんこ！ What’s the craic?
‘Aggressive’ Akira Ransomware Blitz Clubs SonicWall 2FA to DEATH
Yet another security problem plaguing SonicWall customers. The Akira gang have found a way to override the multifactor authentication in SonicWall SSL VPN appliances. These scrotes appear to be able to move laterally from the VPN boxes to deploy ransomware. It’s worrying that they’ve broken SonicWall’s 2FA. In today’s SB Blogwatch, we hear customers’ anger. Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Uber hacking. Strange Factors What’s the craic?
‘Aggressive’ Akira Ransomware Blitz Clubs SonicWall 2FA to DEATH
Yet another security problem plaguing SonicWall customers. The Akira gang have found a way to override the multifactor authentication in SonicWall SSL VPN appliances. These scrotes appear to be able to move laterally from the VPN boxes to deploy ransomware. It’s worrying that they’ve broken SonicWall’s 2FA. In today’s SB Blogwatch, we hear customers’ anger. Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Uber hacking. Strange Factors What’s the craic?
Jaguar Land Rover Admits to Longer Shutdown as Childish Hackers Troll Carmaker
JLR woes worse than previously thought. The iconic British brand today warned its business would stay stalled for even longer. And a loose confederation of threat actors, now calling itself Scattered Lapsus$ Hunters, has claimed responsibility for hacking the big car firm—via tedious Telegram trolling. Yes, it’s those Salesforce vish kiddies again. In today’s SB Blogwatch, we drive the point home. Your humble blogwatcher curated these bloggy bits for your entertainment.
sap exploits Archives
Jaguar Land Rover Admits to Longer Shutdown as Childish Hackers Troll Carmaker | | Blog, communication and social engineering, Cyber Security, Cybersecurity, Data breach, Data Privacy, DevSecOps, FEATURED, Information Security, IT Security and Data Protection, Jaguar, Jaguar Land Rover, Land Rover, Lapsus$, malicious social engineering, Phishing and social engineering, professional social engineers, Ransomware, SAP, sap exploits, SB Blogwatch, scattered spider, security, Security News,...
Microsoft’s ‘Gross Cybersecurity Negligence Threatens National Security’
“Like an arsonist selling firefighting services,” quips this 76-year-old. U.S. senator Ron Wyden (pictured) is demanding the FTC do something about Microsoft already. He says Satya’s crew are to blame for some awful ransomware attacks exploiting a vulnerability that’s more than 10 years old. Known as Kerberoasting, the exploit affects Active Directory installs that aren’t configured to modern specs. In today’s SB Blogwatch, we wonder where to point fingers.
Burger King’s ‘Very Bad’ Bugs Leaked Your Data, Claim Gagged Hackers
Restaurant Brands International (RBI) “assistant” platform riddled with terrible security flaws. A pair of ethical hackers discovered a bunch of “catastrophic” vulns in the code running 30,000 Burger King, Tim Hortons, Popeyes and Firehouse Subs locations. Owner RBI quickly fixed the flaws, but then its contractor Cyble issued a sus-seeming DMCA takedown notice. Tale as old as time: Poor, unfortunate $8½ billion corporation vs. evil, vindictive, millennial hackers. In today’s SB Blogwatch, we rule.
Tim Hortons Archives
Burger King’s ‘Very Bad’ Bugs Leaked Your Data, Claim Gagged Hackers | | AI, API security, Burger King, canada, Carrols, Cloud Security, CloudFlare, Content Takedown, Cyber Security, Cybersecurity, Cyble, Data breach, Data Privacy, Data Security, DevSecOps, DMCA, FEATURED, Featured Articles, Firehouse Subs, Industry News, Information Security, IT Security and Data Protection, Network Security, Popeyes, Privacy, Restaurant Brands International, SB Blogwatch, security, Security News, Streisand...
Featured Articles Archives
Burger King’s ‘Very Bad’ Bugs Leaked Your Data, Claim Gagged Hackers | | AI, API security, Burger King, canada, Carrols, Cloud Security, CloudFlare, Content Takedown, Cyber Security, Cybersecurity, Cyble, Data breach, Data Privacy, Data Security, DevSecOps, DMCA, FEATURED, Featured Articles, Firehouse Subs, Industry News, Information Security, IT Security and Data Protection, Network Security, Popeyes, Privacy, Restaurant Brands International, SB Blogwatch, security, Security News, Streisand...
IT Security and Data Protection Archives
Burger King’s ‘Very Bad’ Bugs Leaked Your Data, Claim Gagged Hackers | | AI, API security, Burger King, canada, Carrols, Cloud Security, CloudFlare, Content Takedown, Cyber Security, Cybersecurity, Cyble, Data breach, Data Privacy, Data Security, DevSecOps, DMCA, FEATURED, Featured Articles, Firehouse Subs, Industry News, Information Security, IT Security and Data Protection, Network Security, Popeyes, Privacy, Restaurant Brands International, SB Blogwatch, security, Security News, Streisand...
Google Hack Redux: Should 2.5B Gmail Users PANIC Now?
Well? Should they? Let’s ask Ian Betteridge. Four weeks ago, Google admitted it was hacked by ShinyHunters and/or Scattered Spider—via vishing. Sadly, this sparked a journalistic game of Telephone: Over the space of four weeks, “This Salesforce instance got vished,” quickly became, “2.5 billion Gmail users hacked!!1!” Sigh. “This is entirely false,” complains Google. In today’s SB Blogwatch, we bait for clicks during dog days. Your humble blogwatcher curated these bloggy bits for your entertainment.
watering hole attack Archives
Russian-Linked ATP29 Makes Another Run at Microsoft Credentials | | APT29, Cozy Bear, Microsoft, Midnight Blizzard, Phishing Attacks, russia hacker, watering hole attack Amazon researchers disrupted a watering hole campaign by Russian-linked cyberespionage group APT29 designed to use compromised websites to trick users into giving the threat actors access to their Microsoft accounts and data ...
Farmers Group Loses 1.111M PII Rows: It’s Salesforce Again
Scattered Spider claims another Salesforce instance—albeit three months ago. A subsidiary of Zurich Insurance (SIX:ZURN) admitted to a huge leak: More than one million customers’ data. Farmers Group is the latest corporation ’fessing up to its data going AWOL via Salesforce vishing. Farmers also trades as Foremost, Bristol West, Farmers Life and 21st Century Insurance. In today’s SB Blogwatch, we wonder what their Swiss masters will think.
NOT-So-Great Firewall: China Blocks the Web for 74 Min.
HTTPS connections on port 443 received forged replies. Chinese web users couldn’t access websites outside the People’s Republic yesterday. The outage lasted an hour and a quarter—with no explanation. Nobody’s sure whether it was a mistake or an ominous test of new censorship capabilities. But some are linking it to a recent outage in Pakistan. In today’s SB Blogwatch, we shave with Hanlon’s razor. Your humble blogwatcher curated these bloggy bits for your entertainment.
online censorship Archives
NOT-So-Great Firewall: China Blocks the Web for 74 Min.
UK Quietly Drops ‘Think of the Children’ Apple iCloud Crypto Crack Call
Brits agree to change course, but Tim still shtum. The U.S. administration is celebrating a “mutually beneficial understanding” with the UK, meaning Apple won’t need to backdoor iCloud. (As we learned six months ago, those pesky Brits were demanding Apple break its end-to-end encryption, also known as Advanced Data Protection—ADP.) National intelligence director Tulsi Gabbard and White House veep JD Vance seem happy about it, anyway.
Dating Apps Archives
The Tea App Hack: How a “Safe” Space Leaked 13,000 ID Photos & 1.1M Messages | | Age Verification, AI Coding, App Development, app vulnerability, app-security, black hat, Cyber Security, cyber threat, Cybersecurity, Data breach, Data Privacy, Dating Apps, Digital Privacy, Episodes, exposed database, Firebase, Government ID, ID Photo Leak, Information Security, Infosec, las vegas, Lawsuits, odcast, Podcasts, Privacy, Privacy Nightmare, Private Messages, Safe Space, security, security best...
Act Surprised: Data Brokers Seem to Scoff at California Privacy Act
Sen. Hassan (pictured) is on the warpath. At least 35 data brokers employed “dark patterns” to discourage Californians from exercising their privacy rights. Researchers say the companies hid legally required web pages from Google—so people can’t find them. This U.S. senator is not at all happy, accusing the firms of “requiring people to navigate byzantine labyrinths.” In today’s SB Blogwatch, we join Maggie Hassan (D-N.H.) in her trisyllabic dissatisfaction.
ANOTHER WinRAR 0-Day: Don’t Patch Now - Uninstall It!
Old, bug-prone app relies on you to go look for update files. Venerable file compression-cum-archiving tool suffers yet another exploited vulnerability, causing the sole developer to issue a patch. Is it time to ditch WinRAR? Yes! Here’s why: Eugene Roshal (pictured) doesn’t believe in automatic updates. In today’s SB Blogwatch, we can’t believe it’s still like that—in 2025. Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Fiz.
Tropical Scorpius Archives
Zero day—zero clue: Old, bug-prone app relies on you to go look for update files ...
Google Breached - What We Know, What They’re Saying
‘ShinyHunters’ group hacked big-G and stole a load of customer data from a Salesforce cloud instance. This week, Google finally admitted it got socially engineered—leading to a breach of CRM data. Yes, you read that right: Google got vished. Do the scrotes have your info? We don’t know and Google’s not saying. What’s worse is this happened a couple of months ago. In today’s SB Blogwatch, we wonder why it took Google so long to tell us.
CRM phishing Archives
Google Breached — What We Know, What They’re Saying | | breach of privacy, communication and social engineering, CRM, CRM phishing, google, Google Threat Intelligence, Help Desk Social Engineering, malicious social engineering, Phishing and social engineering, Phone Social Engineering, Privacy, professional social engineers, Salesforce, salesforce security, SB Blogwatch, ShinyHunters, social engineering, social engineering attack, social engineering news vishing, UNC6040, UNC6240, vish,...
Amazon AI Privacy Panic - Bee Brings Bezos Panopticon
It records everything you say (and what people around you say, too). The company behind the Bee bracelet is being bought by Amazon. Think of it as Copilot+ Recall for the real world. It seems like Jeff Bezos (pictured) just can’t get enough of knowing everything about you and your life. Naturally, this raises a ton of privacy questions. In today’s SB Blogwatch, we have more questions than answers. Your humble blogwatcher curated these bloggy bits for your entertainment.
wearable devices Archives
Amazon AI Privacy Panic — Bee Brings Bezos Panopticon | | AI, AI and Privacy, AI privacy, amazon, Amazon Alexa, Amazon Echo, artificial intelligentce, artificial intellignece, Bee, Bluush, GenAI, generative AI, Generative AI risks, generative artificial intelligence, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things Security, iot, Privacy, SB Blogwatch, Wearable, wearable devices, wearables Amazzon Beee Buzzzz: It records everything you say...
Amazon Echo Archives
Amazon AI Privacy Panic — Bee Brings Bezos Panopticon | | AI, AI and Privacy, AI privacy, amazon, Amazon Alexa, Amazon Echo, artificial intelligentce, artificial intellignece, Bee, Bluush, GenAI, generative AI, Generative AI risks, generative artificial intelligence, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things Security, iot, Privacy, SB Blogwatch, Wearable, wearable devices, wearables Amazzon Beee Buzzzz: It records everything you say...
Amazon Alexa Archives
Amazon AI Privacy Panic — Bee Brings Bezos Panopticon | | AI, AI and Privacy, AI privacy, amazon, Amazon Alexa, Amazon Echo, artificial intelligentce, artificial intellignece, Bee, Bluush, GenAI, generative AI, Generative AI risks, generative artificial intelligence, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things Security, iot, Privacy, SB Blogwatch, Wearable, wearable devices, wearables Amazzon Beee Buzzzz: It records everything you say...
Ukraine Pwns Russian Drone Maker - Gaskar is ‘Paralyzed’
Ukrainian Cyber Alliance and Black Owl team up to hack manufacturer of Russian military drones, sources say. Gaskar Group, Russian designer of drones plaguing Ukraine’s skies, is in utter disarray. Or, at least, so says Ukrainian military intelligence. Hacker groups teamed up to steal and delete 57 TB of critical data and backups, preventing the company from operating, we’re told. In today’s SB Blogwatch, we peer through the fog of war.
‘FRED’ Security FAIL - Ignored by US Rail for 20 YEARS
Railroad industry first warned about this nasty vulnerability in 2005. Freight trains in the U.S. use a radio link between front and rear, designed around 40 years ago. It’s emerged that the Flashing Rear End Device (FRED) can be told to slam on the brakes via an extremely weak wireless protocol. The latest researcher to signal the problem says, “You could shutdown the entire railway system.” In today’s SB Blogwatch, we get to the points.
ICS/SCADA Wireless Attacks Archives
‘FRED’ Security FAIL — Ignored by US Rail for 20 YEARS | | American Association of Railways (AAR), cisa, CISA Advisories, CISA Advisory, CISA Alert, CISA cybersecurity advisory, CVE-2025-1727, Cybersecurity and Infrastructure Security Agency, Cybersecurity Infrastructure Security Administration, FRED, ICS/SCADA, ICS/SCADA Cybersecurity, ICS/SCADA Security, ICS/SCADA systems, ICS/SCADA Wireless Attacks, RADIO-STOP, Rail Cybersecurity, railroad, Railway Security, SB Blogwatch, sdr, software...
4 Arrests in Dawn Raid of Scattered-Spider Suspects
Three teenage males and a young woman hauled away by cops, suspected of hacking huge retailers. Four youngsters are in custody today, alleged to be the notorious Scattered Spider hackers (or at least, some of them). The “loose affiliation” of hackers is suspected of badly disrupting operations at three large retail chains since April. The four are innocent until proven guilty. In today’s SB Blogwatch, we channel Sir William Garrow.
Did This Retail Giant Pay a Ransom to Scattered Spider?
M&S head Archie Norman won’t say if he authorized DragonForce ransomware hacker payday. British shopping titan M&S is still dealing with the mess caused by April’s ransomware attack. There’s at least three months more work ahead says the firm’s chairman, Archie Norman (pictured). But there are persistent rumors M&S paid Scattered Spider’s ransom demand. In today’s SB Blogwatch, Norman will neither confirm nor deny. Your humble blogwatcher curated these bloggy bits for your entertainment.
Yet More Stalkerware Leaks Secret Data: ‘Catwatchful’ is Latest Nasty App
Content warning: Domestic abuse, stalking, controlling behavior, Schadenfreude, irony. A new data leak shows the dangers of secret, silent stalkerware. An app known as Catwatchful appears to be just as insecure as all the others. (Also known as spouseware and creepware, this vile trade enables all manner of frightening and dangerous abuse, from stalking to serious sexual assault. It’s no laughing matter.) The Catwatchful app’s user login database was vulnerable to a simple SQL injection attack.
ICE’s Shiny New ‘AI’ Facial Recognition App: False Positives Ahoy!
Liberty’s existential threat, or sensible way to ID illegal immigrants? U.S. Immigration and Customs Enforcement (ICE) agents are using a new phone app: Mobile Fortify puts “instant, AI powered” facial recognition in their hands. What could possibly go wrong? A major risk is inaccurate recognition. In today’s SB Blogwatch, the French want their statue back. Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Dua Weeknd. What’s the craic?
WhatsApp BANNED by House Security Goons - But Why?
Office of the Chief Administrative Officer (CAO) offers hazy reasoning. The U.S. House of Representatives has banned the use of Meta’s WhatsApp chat app on its managed devices. Jamie Crotts (pictured) is the CAO’s CIO, tasked with denying staffers any use of WhatsApp on House devices. Why? Apparently, Meta suffers from “a lack of transparency.” In today’s SB Blogwatch, we wonder who’ll be next to ban the app. Your humble blogwatcher curated these bloggy bits for your entertainment.
Chief Administrative Officer Archives
The Home of the Security Bloggers Network
US Pig Butchering Victims ‘Will’ Get Refunds - Feds Seize $225M Cryptocurrency
Pretty girls plus investment fraud equals forfeiture recovery (eventually). U.S. federal agencies have spent the past 18 months piecing together this complex money-laundering web. And now they’re ready to announce the seizure of a few hundred million from an industrial scale pig butchering scam—the biggest yet. You can practically hear the bacon sizzling. In today’s SB Blogwatch, we grab the lettuce and tomato. Your humble blogwatcher curated these bloggy bits for your entertainment.
Trump’s TikTok Tarry - Yet Again, Ban-Can Kicked Down the Road
Won’t somebody please think of the children? President Trump will reprieve TikTok a third time, despite concerns about security, press freedom and child safety. The White House says he’ll sign yet another executive order preventing enforcement of PAFACA—the Protecting Americans from Foreign Adversary Controlled Applications Act. As you might remember, he first did this way back in January. In today’s SB Blogwatch, we turn the page for you.
Trump’s TikTok Tarry - Yet Again, Ban-Can Kicked Down the Road
Won’t somebody please think of the children? President Trump will reprieve TikTok a third time, despite concerns about security, press freedom and child safety. The White House says he’ll sign yet another executive order preventing enforcement of PAFACA—the Protecting Americans from Foreign Adversary Controlled Applications Act. As you might remember, he first did this way back in January. In today’s SB Blogwatch, we turn the page for you.
Meta AI is a ‘Privacy Disaster’ - OK Boomer
Pundits accuse Zuckerberg’s latest app of having a “dark pattern,” tricking the over 50s into oversharing. The Meta AI app’s public feed is full of private, personal, identifiable information. And why are people sharing this stuff in public? Because they don’t realize that’s what the Share button does, apparently. Of course, that’s not what the Share button does in any other app. In today’s SB Blogwatch, we undershare and overlap.
dark patterns Archives
The Home of the Security Bloggers Network
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Richi
Contact Richi, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack