Friday Squid Blogging: Another Squid

Someone named "Squid" seems to be a "West Country legend." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

Roblox clamps down on chats and age checks as legal pressure builds

Roblox has long faced criticism over child safety on its platform. Now it has started settling with state attorneys over the issue, and the total is climbing fast. On April 21, Alabama Attorney General Steve Marshall announced a $12.2 million settlement with the child-focused online gaming...

Why East-West Visibility Matters for Grid Security

Learn how east-west traffic visibility helps detect and stop lateral movement attacks inside electric grid infrastructure and critical OT networks...

East-West Is the New North-South: Rethink Security for the AI-Driven Data Center

...

Stop Overpaying for East-West Traffic Control: Firewalls vs. Security Groups

...

Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing

One of Vladimir Putin’s favorite sabers to rattle seems to have lost its edge...

Budget Samsung phones shipped with unremovable spyware, say researchers

A controversy over data-gathering software secretly installed on Samsung phones has erupted again after a new accusatory post appeared on X last week. In the post on the social media site, cybersecurity newsletter International Cyber Digest warned about a secretive application called AppCloud tha...

EUVD-2016-2329

Malware in sbrugna...

EUVD-2014-6844

Malware in sbrugna...

EUVD-2007-1387

Malware in sbrugna...

EUVD-2016-2328

Malware in sbrugna...

EUVD-2018-18319

Malware in sbrugna...

EUVD-2022-44746

Malicious code in bioql PyPI...

EUVD-2024-35536

Malicious code in bioql PyPI...

EUVD-2024-35527

Malicious code in bioql PyPI...

EUVD-2022-46462

Malicious code in bioql PyPI...

From Fitbit to financial despair: How one woman lost her life savings and more to a scammer

We hear so often about people falling for scams and losing money. But we often don’t find out the real details of what happened, and how one "like" can turn into a nightmare that controls someone’s life for many years. This is that story. Not too long ago, a scam victim named Karen reached out to...

Web Caster V130 vulnerable to cross-site request forgery

Overview Web Caster V130 provided by NTT EAST, Inc. and NTT WEST, Inc. is a 050IP telephony-enabled broadband router. Web Caster V130 contains the following vulnerability. Cross-site request forgery CWE-352 - CVE-2025-58272 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this...

Malicious code in @malware-test-wests-nixie-metro-niffs/test-mlw3-wests-nixie-metro-niffs (npm)

The package @malware-test-wests-nixie-metro-niffs/test-mlw3-wests-nixie-metro-niffs was found to contain malicious code...

How an Email, Crypto Wallet and YouTube Activity Led the FBI to IntelBroker

FBI tracked IntelBroker as UK’s Kai West using an email address, crypto trails, YouTube activity and forum posts after dozens of high-profile data breaches and darknet activity...