Hello cyber friends! There's no https://this.weekinsecurity.com newsletter today (I'm off for the holidays). But if you're a fan of my weekly dispatch (and now blog!), please consider a paying subscription starting at $10/month for exclusive articles, analysis & more.
Here's what I've written about so far:
@zackwhittaker Great advice! I use an ad blocker and am actively moving away from sites that refuse to let you use them
(like youtube).
One of my first blogs dug into the security and privacy of Oura wearable rings. I found that users' Oura health data isn't end-to-end encrypted and can be accessed by Oura staff, which makes it obtainable by governments. Oura told me it *has* received government demands for users' data.
In September, I distilled some of my decade-plus experience in investigating and reporting data breaches to help you read, understand, and critically analyze a data breach notification.
This blog cuts through the legal lingo and jargon so that you can know what actions to take to protect yourself.
https://this.weekinsecurity.com/how-to-read-and-understand-a-data-breach-notice/
One of the most important tools you can use on the internet to protect yourself from online security and privacy threats is… an ad-blocker.
In this deep-dive (and one of my favorites), I explain how ad blockers defend against surveillance and malware. I also have plenty of ad blocker suggestions for you to consider!
https://this.weekinsecurity.com/why-ad-blockers-are-a-top-security-and-privacy-defense-for-everyone/
@zackwhittaker It's not an ad-blocker. It's a spyware-blocker.
There's a whole new class of browsers, like Perplexity's Comet and OpenAI's Atlas, which have AI baked in. In this shorter blog post, I dive into the inherent security risks with AI browsers, (aka prompt injection attacks), and why anyone who wants to use an AI browser should proceed with caution.
https://this.weekinsecurity.com/ai-browsers-are-a-hot-mess-of-security-risks/
In this 15-minute(!!) long read, I wrote about how I almost made a finance executive crap themselves at a cocktail hour by describing one of the top cyber threats that concerns me today: Literally thousands of North Korean IT workers have infiltrated Western businesses, which have absolutely no idea.
As the U.S weighs potentially banning TP-Link routers from sale on national security grounds over its alleged links to China, I blogged about the U.S. government's weak-ass argument and why a ban won't save the U.S. from years of its own terrible cybersecurity practices.
@zackwhittaker Yeah this was a really great article!
@scottwilson thanks so much, scott!
