Based in San Francisco Bay Area, Securesql is a blog by John Menerick. His insights dissect complex systems, offering a masterclass in cyber guardianship through expert analysis and cutting-edge protective strategies.

Redis RCE

If you haven't already, time to patch Redis.  Otherwise, please setup authentication in front of your Redis instance.

This remote code execution is going to get nasty http://www.shodanhq.com/search?q=redis_version and https://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape/ .  Time to bring up a few honeypots to grab some decent exploits and related kits.  

A sobering method to view masked credit cards in the browser

Square's encryption service fails to reliably secure passwords