Brutkey

Dan Goodin
@dangoodin@infosec.exchange

PR people. If you send me pitches like this, you almost surely will be summarily blocked.

I don't publish Goodhousekeeping-style tips for staying secure online. I'm not interested in talking to CEOs unless they are also engineers (and even then not very often). I eschew marketing fluff, "thought leadership," surveys, and funding and product news.

I look for new vulnerabilities, exploits and technical research, and telemetry that hasn't been published yet.

Please spend at least 10 minutes reading my past coverage and use it to internalize the kinds of stories I do and don't write. Then rather than sending me the same pitch you blast out to every other reporter, tailor your email to me.

I realize that you're probably under a lot of pressure and have managers who have unfair expectations and don't provide proper training. If it feels like I'm asking too much here, please just remove me from your list.

#prrants

Email from PR person: Dan, From restaurant menus to package delivery, wedding invitations to identity authentication, QR codes are everywhere. They provide the quickest way to drive mobile web traffic when you can’t have a direct link. And right behind every popular tech trend lurks the bad guys. QR code phishing (where folks download a fraudulent QR code which tricks them into downloading malware or sharing sensitive information) is an emergent threat that is evading traditional defenses and forging a new way for users to click on attacks. This attack technique, along with exec impersonations, spear phishing, and social engineering, has become one of the top concerns for email threat defense. The problem? Well, there’s two: Traditional email security providers have difficulty detecting them This attack method also creates an additional security blind spot. QR codes are usually scanned using a separate device than where the email was delivered. Smartphones, whether personal or not, are less likely to have robust security technology in place for prevention or detection. In a single day, cloud email security provider Tessian stopped over 3k QR code phishing attacks in their tracks. Are you interested in connecting with them on the five methods to thwart QR phishing attacks? Best,