Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking (virtually) at the Policy-Relevant Privacy Research Workshop in Calgary, Canada, on Monday, July 20, 2026. I’m speaking a
Search Intelligence
Warning: Scammers are using FaceTime to empty bank accounts
Cybercriminals are combining social engineering through apps like FaceTime with unpatched devices to steal credentials and drain bank accounts.
Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys --
A week in security (July 6 – July 12)
A list of topics we covered in the week of July 6 to July 12 of 2026
Your next car could be watching your face
Driver-monitoring technology is becoming mandatory in new cars, but privacy experts warn it could create new risks alongside the safety benefits.
Choose your WhatsApp username carefully
WhatsApp is introducing usernames to help protect your phone number. Just make sure you don't undermine that privacy by choosing the wrong one.
A week in security (June 29 – July 5)
A list of topics we covered in the week of June 29 to July 5 of 2026
Why Social Engineering Attacks Are Successful... And How To Protect Against Them
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jul. 1, 2026 – Watch the YouTube video For years, social engineering has been the most common and effective attac
WinRAR flaw could allow attackers to take control of your computer
A new WinRAR update fixes a serious security flaw, but without automatic updates many users could miss the patch.
Chrome needs another whopper update to fix 382 security bugs
Google released a huge update of 382 security fixes, 15 of which were rated as critical. So, it's time to update agai
Update time: Apple releases security patches for iOS, MacOS Tahoe, Safari
A new Apple update fixes a multitude of browser and browser related vulnerabilities which have been public knowledge for a while
What the June 2026 Threat Technique Catalog update means for your AWS environment
The AWS Customer Incident Response Team (AWS CIRT) encounters patterns that repeat across engagements when helping customers respond to security incidents. We’re passionate about making sure that info
A week in security (June 22 – June 28)
A list of topics we covered in the week of June 22 to June 28 of 2026
Minnesota man known as ‘Snoopy’ sentenced in DraftKings hack
Nathan Austad, who sold access to compromised accounts through a criminal storefront, is the third and final defendant sentenced in the 2022 breach The post Minnesota man known as ‘Snoopy’ sentenced i
Update Chrome to patch critical browser security flaws
Chrome has patched 18 vulnerabilities, including four critical flaws. Two WebGL bugs could allow attackers to escape the browser's security sandbox.
Elite network says it was hacked after members’ personal data was left exposed
Personal data belonging to politicians, military leaders, and executives was left publicly accessible in what looks like a security misconfiguration.
Scattered Spider Hackers Plead Guilty on Day 1 of Trial
Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport
Meta pauses controversial employee-tracking program after security review
Meta has paused its controversial employee-tracking program. Unfortunately, employee privacy wasn't what stopped it.
Hackers steal passport and driver’s license data of 3 million Texans
A breach at a Texas Parks and Wildlife Department vendor exposed personal information belonging to more than three million Texans.
A week in security (June 15 – June 21)
A list of topics we covered in the week of June 15 to June 21 of 2026