Special guest Jason Chan (@chanjbs)

‍

Security spotlight – Circle CI and critical infra

• Circle blog
• Jason's Tweet

Cargo cult security

• https://www.philvenables.com/post/ceremonial-security-and-cargo-cults

SafeURL for Go

• https://blog.doyensec.com/2022/12/13/safeurl.html

57 live keys in PyPI

• https://tomforb.es/i-scanned-every-package-on-pypi-and-found-57-live-aws-keys/

Web Hackers vs. the Auto Industry

• https://samcurry.net/web-hackers-vs-the-auto-industry/?mc_cid=a912d3465b&mc_eid=7d5236ea63

NSO Loses Latest Challenge on Lawsuit

• https://news.bloomberglaw.com/privacy-and-data-security/nso-loses-latest-challenge-to-meta-lawsuit-over-whatsapp-spyware
• https://srslyriskybiz.substack.com/i/96161346/bad-times-continue-for-nso-group
• https://knightcolumbia.org/content/knight-institute-comments-on-supreme-courts-denial-of-cert-in-nso-v-whatsapp
• https://mastodon.social/@jsrailton/109660291759846168
• https://www.techdirt.com/2023/01/20/another-israeli-exploit-developer-caught-selling-malware-to-blacklisted-countries/

Thousands of LifeLock customer accounts breached

• https://techcrunch.com/2023/01/15/norton-lifelock-password-manager-data/?mc_cid=a46fb5ec24&mc_eid=7d5236ea63&guccounter=1

Chick-fil-a accounts on the dark web

• https://www.bleepingcomputer.com/news/security/chick-fil-a-investigates-reports-of-hacked-customer-accounts/