Weekly Update 290

I hope scheduling these in advance is working well for everyone, the analytics certainly suggest a much higher viewership so I'm going to keep scheduling these and refining the whole thing further. Other than that, it's same-same this week with the usual array of breaches, tech and life down under. Enjoy 😊

References

1. I keep forgetting to talk about upcoming events (that's a list of what's coming  in 2022, I'll try to remember to discuss it next week given I'm off to Sydney the week after for the Akamai event)
2. Indonesian real estate site Travelio was breached (this dates back to last year, but the data is now in HIBP)
3. Lots of crickets chirping over at Avvo (this is becoming a textbook case of why disclosure is so hard)
4. Scott wrote a great blog post on PCI DSS 4.0 (really interesting to see how much focus has shifted to defending against Magecart style attacks via compromised JavaScript)
5. Sponsored by: Varonis for Salesforce. Detect suspicious behavior and strengthen your Salesforce security posture. Try it free!

Weekly update