# criminals cry (audio feeds) — RSS Amplifier Recent posts from the 1 feeds in the RSS Amplifier directory that cover criminals cry. Page: Feed: --- ## [The New HIPAA Security Rule Is Delayed to 2027 — What Healthcare Orgs Should Do Now](https://basicsarehard.substack.com/p/the-new-hipaa-security-rule-is-delayed) _2026-07-30 · Drew Hjelm · Basics Are Hard_ HHS pushed the updated HIPAA Security Rule back to at least July 2027 after comments called it too costly. The 2013 rule still applies — here's what to do now. ## [The First 24 Hours After a Business Email Compromise](https://basicsarehard.substack.com/p/the-first-24-hours-after-a-business) _2026-07-28 · Drew Hjelm · Basics Are Hard_ Fraudulent wire or compromised inbox? What to do in the first 24 hours of a business email compromise — the bank call, the evidence, and evicting the attacker ## [The worms will continue until the ecosystem improves](https://basicsarehard.substack.com/p/the-worms-will-continue-until-the) _2026-05-20 · Drew Hjelm · Basics Are Hard_ 458 packages. 5 ship to production. The rest are attack surface. ## [Building an AI App on Azure: What I Actually Learned](https://basicsarehard.substack.com/p/building-an-ai-app-on-azure-what) _2026-04-30 · Drew Hjelm · Basics Are Hard_ A serverless pipeline that watches RSS feeds, summarizes new posts with an LLM, and emails subscribers, built entirely with Azure Logic Apps, Terraform, and no long-lived secrets. ## [Mythos Zero Days Aren't the Real Problem](https://basicsarehard.substack.com/p/mythos-zero-days-arent-the-real-problem) _2026-04-22 · Drew Hjelm · Basics Are Hard_ Vulnerability management hinges on good architecture practices. AI-powered vulnerability discovery doesn't solve for this in any meaningful way. ## [Your Google Workspace Has Hundreds of OAuth Grants. Do You Know What They Can Do?](https://basicsarehard.substack.com/p/your-google-workspace-has-hundreds) _2026-04-20 · Drew Hjelm · Basics Are Hard_ The Vercel incident is a good reminder: do you actually control what OAuth apps can access your Google Workspace? ## [Supply chain attack alert: LiteLLM 1.82.8 is compromised.](https://basicsarehard.substack.com/p/supply-chain-attack-alert-litellm) _2026-03-24 · Drew Hjelm · Basics Are Hard_ Textbook PyPI supply chain attack, now targeting AI infrastructure. Treat your LLM stack like any other production dependency. ## [Your Free Email Might Be Pretty Expensive in a Data Breach](https://basicsarehard.substack.com/p/your-free-email-might-be-pretty-expensive) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Since the widespread adoption of the Internet in the 1990s, many internet providers and online companies have offered free email to anyone able to come up with a username. ## [Easy Playbooks to Make Ransomware Criminals Cry](https://basicsarehard.substack.com/p/easy-playbooks-to-make-ransomware) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Here are the slides and playbooks discussed in the BlueTeamCon presentation, "Easy Playbooks to Make Ransomware Criminals Cry" on August 28, 2022. ## [You’ve got Mail (and Misdirected Funds): A live demo of email hacking](https://basicsarehard.substack.com/p/youve-got-mail-and-misdirected-funds) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Presentation given at CypherCon, March 31, 2023 ## [profullstack on Ko‑fi (Sponsored)](https://crawlproof.com/a/gcZB6hPmRCoP) _2025-03-04 · **Sponsored**_ Open the creator's Ko‑fi page. ## [Threat Alert! How to Check and Secure your Google, Microsoft, and Apple Accounts](https://basicsarehard.substack.com/p/threat-alert-how-to-check-and-secure) _2025-03-04 · Drew Hjelm · Basics Are Hard_ Have you ever felt that unsettling moment when you suspect your online accounts have been breached?