Should have used triangulation to find it

from here and here

The Operation Triangulation malware is far from the first malware for the iPhone, but the fact that we've reached the point that we can no longer wait for Apple to take care of such things themselves must really be eating at the old-school Apple fanbois. 

We're still stuck in a position that anti-malware apps can't scan the iPhone directly, though. That's going to make detection much less likely since few are going to go through the aggravation of making a backup so they can scan that.

Investing in products but not people

from here and here

Too many people, especially decision makers in companies, engage in magical thinking when it comes to security software. They think you just have to "have" it or that it just has to be "active" in order to get the security benefits from it. It doesn't work that way. Security isn't a technology problem, it's a people problem, the technology is just a tool to help the people fighting the security threats. If your company doesn't have enough of those for someone to properly monitor and manage the security software...

Ask your lawyer if being lazy is right for you

from here and here

Well, this is an interesting development. Albanian IT staff get charged with negligence after a (supposedly) preventable cyberattack that they failed to prevent. Now, if it was really management's fault that things weren't kept up to date then I hope that comes out at trial and that the people who were really responsible are held accountable. This kind of legal action, combined with the uncertain future of cyber-insurance might just force businesses and organizations to finally start ponying up the funds to do security right. Or the decision-makers will find some other way to avoid accountability for not paying what should be the cost of doing business.

Packin' the K

Watch on YouTube

This cringy parody music video anti-malware ad from Kaspersky Labs is enough to make me wonder if maybe John McAfee wasn't the only security luminary on drugs.

What could possibly go wrong?

from here

Telling users to disable their antivirus was a shady thing software vendors advised their customers decades ago, before the malware problem exploded. It's mind boggling to learn that some are still doing it, and worse they're makers of remote administration software that is used by managed service providers who remotely administer the systems of hundreds of organizations - with a fairly predictable outcome. 

There are better ways of dealing with false alarms on the software you make than getting your customers to disable their security or worse getting them to disable their own customers security.

I feel safer already

found on Reddit

Yeah, that's OK. That game wasn't fun anyway.

RUN IDA sticker

Product Page

Rather than water bottles, I kind of expect to see this on the laptops of malware analysts.

EICAR Test QR Code Face Mask

Product Page

If you ever wanted to test your anti-virus software on your face, now you can. 

Send bitcoins if you want your brain back

from here

So based on this article, scrambling your brain with ransomware might be a bit of a stretch. However, if they can figure out the position of a pigs legs, how much more difficult would it be to read keystrokes (you know, like the ones when you enter your password)? I feel like maybe they didn't think this through all the way.

Anti-Malware phone case

Product Page

No, this isn't a case that actually fights malware, it simply depicts the fight against malware. it's certainly a creative design. I especially like the little details around belt-level on both of the figures.