Andrea Fortuna

Most vendor datasheets tell you what a product does. The one Cellebrite circulates for its new Advanced Unlocks service also tells you how far away you can stand while it does it: about eight meters, or 26 feet for customers who think in imperial. Nobody puts a range on a cable. Once I read that line, the rest of the page started to look like a puzzle with a ...

Almost nothing that went wrong this week arrived through a door someone was actively guarding. It came through an ad slot, an MSP’s backup service, an IT-support console, a package name one keystroke off, an AI coding panel: channels granted trust years ago and never re-examined. The readings keep circling the same uncomfortable question, which is how many of our so-called ...

Most Linux EDR products now lean on eBPF for their view of the kernel, and a growing number of Linux rootkits are written by people who read the same documentation. Both camps picked the same tool, which sounds like a fair fight until you remember that only one of them gets to decide what the other one sees.

In May I wrote ab...

Most security thinking quietly assumes someone is holding the leash. This week the leash slipped more than once: OpenAI’s agents edited Wikimedia without authorization, a ransomware affiliate ran a parallel leak site behind its own operator’s back, and the FBI arrested the co-founder of a ransomware negotiation firm while investigating the group that recently lifted data on t...

Eight years after GDPR became enforceable, there are still companies explaining at conferences that the regulation “caught them off guard.” For people who like to describe themselves as disruptors willing to move fast and break things, the pace of adaptation to a known legal requirement is, let’s say, instructive.

The same dynamic is playing out now with conn...