What do you think was the official start of the security industry? Some will say it was when the Morris Worm hit in November 1988.  It started people thinking more about firewalls and a vulnerability disclosure process. The official start of the AI security industry?  Hugging Face and the resulting fallout. We’re still coming to […]

Although the fix for the File History bug has been fixed in a preview update for Windows 11, there is no such advanced fix for those of you on Windows 10. Your choice is to uninstall the September updates if you happened to inadvertently install them, or to just wait out the month with a […]

ON SECURITY By Susan Bradley Not a day goes by without a prompt to set up a passkey. As with everything in security, there are trade-offs. These mostly have to do with balancing security and convenience. This will manifest itself in the decisions you must make when setting up passkeys. Some decisions are made for […]

I’ve updated the master patch list here.  Please note I am not recommending installing updates at this time, we are just testing and reporting. I’ll be updating that page and monitoring for issues. So far the trending issues are: RDS servers having issues after the September updates. If you run an RDS farm, hold back. I […]

Once again it’s time to pause, ensure we have our backups and review what has been released. Even if you no longer use Windows, use a time of the month to review your browser updates, your operating system updates. All platforms need maintenance. Windows is releasing it’s normal monthly security updates. KB5124008 for Windows 11 […]

Well, sort of — with a password manager that can do so. While the rest of the world looks at the US Labor Day weekend as a time to relax, I look to it for a time to test. And what am I testing? If I enable passkeys on my personal PayPal account, can my […]

ISSUE 23.34 • 2026-08-24 ON SECURITY By Susan Bradley It all started when I was assisting someone who was trying to determine whether their Wi-Fi mesh routers were operating at the best possible speed. I tried to log in to the Web-based interface to the mesh system, which indicated that browser access was disabled. Uh-oh. […]

PUBLIC DEFENDER By Brian Livingston Public water utilities in several US states were hit with coordinated hacker attacks on July 26–27, 2026. The intrusions temporarily knocked Internet-connected control devices offline, forcing some agencies to warn customers to boil tap water. No permanent poisonings occurred, but the exploits may be a hacker group’s test run or […]

Was searching on a topic on my phone today and hit this. There is a reason that Apple has moved to a twice a month patching schedule. The Microsoft Threat Intelligence team indicates that it is “monitoring the active exploitation of the CVE-2026-65400 improper authentication vulnerability on a limited number of macOS devices, with telemetry […]

You’ve heard of the Pwned site, now there is a site where you can see whether you’ve been in Flocked videos. Except there is one catch:  For the site to list your automobile, you would have had to been included in a Freedom of Information Act search. “This website only displays searches from audit logs […]

The White House announced a change in policy wanting private companies to help in hacking our adversaries.  I’ve seen a few comments on it, such as Robert Graham’s take posted on Substack I’ve seen others indicate that it might make it harder to determine who is hacking whom, such as this author. I’m not so […]

I’ve updated the master patch list here.  Please note I am not recommending installing updates at this time, we are just testing and reporting. I’ll be updating that page and monitoring for issues. Right now I’ve seen .NET want to install, reboot and then offer up the operating system update. This month we’ve had a smaller […]

Reminder – we are still in pause mode.  But for those that are in test mode I’ve noticed one thing.  Some of you might get the .NET patch, it get installed and then the operating system is still downloading the main security patch. I’ve also seen a machine only see the .NET update and then […]

Once again it’s time to pause, ensure we have our backups and review what has been released. Even if you no longer use Windows use a time of the month to review your browser updates, your operating system updates. All platforms need maintenance. Windows is releasing it’s normal monthly security updates. For Windows 10 KB5120249 […]

I’m sure you’ve seen the news that there have been recent cyber-attacks from external attackers on various water systems in the United States.  Just the other day, PG&E changed out the gas smart meter at my home. All these smart devices provide a ton of benefit but also the potential for risk. Does your local […]

ON SECURITY By Susan Bradley OpenAI’s recent attack on another company’s cloud instances reminds me that sometimes we forget the basics. As we understand the situation at the moment, OpenAI’s test platform was meant to be isolated and not connected to the Internet. But because it needed to download certain items, it was given read-only […]

If you missed it the other day, SANS has a recording of its recent live-panel discussion of the OpenAI/Hugging Face breach. It points to nine questions to ask your security teams. But what about us as users of all of these systems where we don’t have a lot of control? For me, it gets back […]

PUBLIC DEFENDER By Brian Livingston Millions of people around the world have installed Internet-connected “security cameras” to monitor foot traffic around their homes and offices. Unfortunately, many of these video devices make it easy for unwanted persons to see your live feed and record whatever comes into view. It’s convenient to know who’s at your […]

ON SECURITY Tracking the attacker By Susan Bradley Recently, Apple, Adobe, Microsoft, and others released updates illustrating how much we are being impacted by AI. The three major vendors either sped up releases or released updates with a massive number of vulnerabilities. But does that make us more unsecure? Before I discuss some side effects […]

Some Dell devices with a specific Intel driver might experience poor performance Affected platforms Client Versions Message ID Originating KB Resolved KB Windows 11, version 25H2 WI1427598 KB5095093 KB5121767 Windows 11, version 24H2 WI1427599 KB5095093 KB5121767 After installing the June 23, 2026, Windows non-security preview update (the Originating KBs listed above), a limited number of […]