Spent Sunday assembling a bookshelf and finished with one screw left over. I’ve decided it’s decorative. Security teams will recognise the approach.

Here’s what caught my eye this week.

Staffordshire Police Deliver Post to the Wrong Person

Staffordshire Police have been reprimanded (no fine, just a stern word) by the ICO after putting a domestic abuse victim’s new address into a notice served on their abuser. Read that sentence again slowly.

https://www.infosecurity-magazine.com/news/ico-reprimand-staffordshire-police/

When the Ambulances Go Elsewhere

The University of New Mexico hospital has diverted ambulances following a cyber incident.

Cybersecurity stopped being an IT problem a long time ago.

https://therecord.media/university-of-new-mexico-hospital-diverts-cyber-incident

Bank of America Would Prefer You Didn’t Give Your Password to the Chatbot

Bank of America has reminded customers that handing their banking password to an AI assistant is, on reflection, not recommended. If you’ve already done so, the bank will be in touch.

Somebody in a meeting had to say “we should probably put this in writing” and everybody else had to nod gravely. It’s a bit like a locksmith issuing guidance that you shouldn’t post your house keys to a stranger who says they’re very good with spreadsheets.

Bank of America kindly asks that you don’t share your banking password with your AI assistant

Volt Typhoon Takes the Spare Key and Locks Up Behind Itself

Volt Typhoon has been using a framework called Silent Train to hide zero-day attacks. The zero-day gets the headlines, but the real craft is in the exit: out the door, lights off, door locked, nothing disturbed.

I’m part disgusted and part impressed by the tidiness. Most of us can’t leave a kitchen like that after making toast.

https://www.bleepingcomputer.com/news/security/volt-typhoon-hides-zero-day-attacks-using-silent-train-framework/

Same Dungeon, New Subscription

Nintendo is remaking Zelda with better graphics, and people are delighted. Security vendors do the same every year, only the remake is the same dashboard with an AI button bolted on.

Same dungeon. Same monsters. Only now your sword needs a monthly subscription, and the final boss is a renewal quote.

https://www.bbc.co.uk/news/articles/cm9qz428nnljo?at_medium=RSS&at_campaign=rss

That’s your lot. If you’ve got a story that deserves a place here, or a bookshelf screw situation of your own, hit reply. Or find me on Bluesky or Mastodon, where I’m mostly pretending to be busy.

Stay safe out there, and keep your passwords away from anything that says “How can I help?”

Javvad