Hackers scam Coinbase users and ransom data for $20M • The Register - Coinbase said that at no point during the compromise could the attackers have accessed customers’ funds, and confirmed the sources of the data were insiders bribed to steal information on behalf of the extortionists. The company said the data does not include passwords or private keys, but depending on the use, the following details of its customers may be compromised:

Microsoft ends Authenticator password autofill, moves users to Edge - App will stop storing passwords. Users have until August 1st to move passwords to another option.

  • June 2025: You can no longer save new passwords in Authenticator.
  • July 2025: Autofill will stop working in Authenticator; stored payment info will be deleted.
  • August 2025: Saved passwords and unsaved generated passwords will no longer be accessible in Authenticator.

FBI: End-of-life routers hacked for cybercrime proxy networks - Threat actors are breaking into edge devices, notably Linksys and Cisco EoL routers, and adding them to residential proxy botnets.

RSAC Cool Thing

- 4 mins read

This years RSAC was a strange experience. AI and Quantum saturated the expo floor, while talks ranged from IT to OT and everything in between. And weird political overtones stifled the environment.

Regardless of the weirdness, I decided to hit the expo floor and find the weird, the cool, and the special. And I was successful! Two different companies jumped out at me. One, Oasis offered an actual use case for quantum while Sepio offered a new endpoint security product.

One of the last Bletchley Park’s heroes Betty Webb dies • The Register - Webb along with a number of other prominent women in the cryptography field worked at Bletchley Park to help decrypt some 10k German intercepts per day. Women have a long history in the Computer Science and Cryptography fields, I would highly recommend Invisible Women by Caroline Perez, Hidden Figures by Shetterly, BROAD band: The Untold Story of the Women Who Made the Internet - Claire Evans,

So You Downloaded a Thousand TikToks

- 7 mins read

We’ve all been there, a friend sends over a funny TikTok, or you want to share it in your Signal chat and you know people aren’t likely to click the link. Plus who wants all that tracking and hidden redirects in a TT link? So what’s to be done? If you’re like me, a quick long press, and “Save Video” and you’re off to the group chat to laugh with your friends.

US defense contractor settles whistleblower suit for $4.6M • The Register - Out of a possible 110 points, MORSE awarded itself 104. A third party assessment of the environment found a catastrophic score of (-)142, Yes, 246 points in the opposite (bad) direction. As part of the settlement, MORSE is handing back $4.6 million to the Feds, and $851,000 of that is going to the ex-employee who blew the whistle.

US POL

Federal judge blocks DOGE’s access to Social Security Administration’s banks of personal information | TechCrunch - Hollander said DOGE “never identified or articulated” a reason why it needs access to the “personal and private data of millions of Americans.”

CISA fires then rehires security crew, and puts them on hold • The Register - CISA employees are back, but benched. Placed on paid-leave, Red Teamers and other security staff are still in limbo.

USCIS mulls policing social media of all would-be citizens • The Register - Social Media assessment that started under the Obama White House will be extended to all resident and documented aliens. Moves the social media scanning from before entry to all immigrants.

Badbox is back and a million Android devices were backdoored • The Register - Infected Android machines part of extensive botnet. Devices exploiting residential IP space to serve malicious ads.