LastPass
September 2023
September 2023
Vol. 6, Iss. 37
Robin’s Newsletter #273
Results of Microsoft investigation into US government email compromise. Online Safety Bill E2EE clause to remain unenforced until 'technically feasible'.
March 2023
March 2023
Vol. 6, Iss. 10
Robin’s Newsletter #246
LastPass breach was via engineer's home device. The White House wants to shift cyber liability.
January 2023
January 2023
Vol. 6, Iss. 5
Robin’s Newsletter #241
Hive ransomware infrastructure seized by FBI. The concentration of the illicit crypto-currency market. GoTo confirms customer data stolen during November breach.
Vol. 6, Iss. 3
Robin’s Newsletter #239
LastPass silent on breach. Royal Mail ransomware attack. FAA system outage grounds flights. Exfiltrating data from Google Sheets.
December 2022
December 2022
Vol. 5, Iss. 52
Robin’s Newsletter #236
LastPass customer vault data stolen in breach. EternalBlue-style vulnerability in Windows. Okta source code stolen.
Vol. 5, Iss. 51
Robin’s Newsletter #235
Microsoft certs used to sign malware. AWS API exposed ability to modify, delete container images. BEC scammers are targeting sugar and milk powder.
Vol. 5, Iss. 49
Robin’s Newsletter #233
UK managed security businesses to be regulated. Medibank attackers release data. Anker's Eufy smart camera 'local only' claims disputed.
August 2022
August 2022
Vol. 5, Iss. 35
Robin’s Newsletter #219
Lloyd's market bulletin tightens wording for cyber cover. Group behind Twilio attack has compromised 'over 130 organisations'. Mudge complaint alleges woeful security practices at Twitter.