Subj : Sophos Virus News To : All From : Daryl Stout Date : Wed May 31 2023 15:13:13 Here is the latest information from the Naked Security Blog from Sophos. You can go to nakedsecurity.sophos.com to read these. You can also sign up to have these delivered to your email during the week. *** Serious Security: That KeePass ''master password crack'', and what we can learn from it Here, in an admittedly discursive nutshell, is the fascinating story of CVE-2023-32784. (Short version: Don't panic.) *** Serious Security: Verification is vital - examining an OAUTH login bug What good is a popup asking for your approval if an attacker can bypass it simply by suprpessing it? *** S3 Ep136: Navigating a manic malware maelstrom Latest episode - listen now. Full transcript inside... *** Ransomware tales: The MitM attack that really had a Man in the Middle Another traitorous insider, busted by system logs that gave his game away. *** PyPI open-source code repository deals with manic malware maelstrom Controlled outage used to keep malware marauders from gumming up the works. Learn what you can do to help in future... *** --- SBBSecho 3.20-Win32 * Origin: The Thunderbolt BBS - Little Rock, Arkansas (454:1/33) .