Are any of my Fedi peeps attending Crowdstrike's Fal.con in Vegas next month? Wanna meet up?
#cybersecurity #InformationSecurity #Crowdstrike
Are any of my Fedi peeps attending Crowdstrike's Fal.con in Vegas next month? Wanna meet up?
#cybersecurity #InformationSecurity #Crowdstrike
Here's how to make sure #Instagram Maps is not leaking your location every time you open the app & why you should for your family's safety. Don't risk your physical & #cybersecurity.
https://proton.me/blog/instagram-maps-privacy-concern
someone hacked an iranian / chinese bitcoin mining pool (#LuBian) for what is now $15 billion worth of bitcoin back in 2020... and no one (other than the victims) seems to have even noticed until a few days ago. the thieves still have the bitcoins.
even in 2020 this was a $3.5 billion heist, making it the largest theft of any kind in human history.
should serve as a reminder that people who advocate for a "bitcoin standard" expect the world's governments to opt in to a system where, if north korea steals america's bitcoins, then it's game over for the american military and retirement system.
Missed one of my past conference talks? Let’s fix that.
I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.
“Security Metrics that Matter” https://twp.ai/4ioGd3
#OpenAI's 'Jailbreak-Proof' New Models? Hacked on Day One
Hours after releasing its first open-weight models in years with claims of robust safety measures, OpenAI's GPT-OSS has been cracked by notorious AI jailbreaker Pliny the Liberator
https://decrypt.co/333858/openai-jailbreak-proof-new-models-hacked
After three years of relentless tracking, we’ve published a [paper](https://blogs.infoblox.com/threat-intelligence/vextrios-origin-story-from-spam-to-scam-to-adtech/) that, for the first time, exposes the true identities behind VexTrio. This research connects real names to the various companies that form the VexTrio ecosystem. It begins with the origin story—how a group of Italians launched a successful spam and dating business. Over time, VexTrio expanded its operations into malicious adtech and online scams. For over a decade, the group employed deceptive tactics to defraud countless innocent internet users. These illegitimate gains funded the extravagant lifestyles of VexTrio’s key figures—who, despite increasing scrutiny, have yet to be fully stopped.
We’re deeply grateful to all the contributors who helped us reach this research milestone, especially @rmceoin and Tord from [Qurium](https://www.qurium.org/).
Millions of Dell laptops with Broadcom chips are vulnerable to critical firmware flaws called #ReVault, risking data theft & bypassing Windows login, including fingerprint spoofing. Dell has released patches—update NOW to stay protected!
#Cybersecurity #Dell #Broadcom #SecurityAlert
Hackers used a #VoicePhishing attack to steal personal info of Cisco customers! A scammer tricked a Cisco rep to access a CRM, exposing names, emails & more. Passwords & core services unaffected, but beware of phishing attempts! Stay vigilant.
#CyberSecurity #Vishing #InfoSec https://www.techradar.com/pro/security/hackers-use-voice-phishing-attack-to-steal-cisco-customer-personal-info #newz
Over 100 Dell Latitude & Precision laptops vulnerable to "ReVault" firmware flaws
Attackers can gain persistent access even after OS reinstall or bypass Windows login with physical access! Users urged to update firmware, disable unused features & enable chassis intrusion detection.
#Cybersecurity #Dell #ReVault #Firmware Vulnerability
https://cyberinsider.com/dell-laptops-vulnerable-to-revault-attacks-that-survive-os-reinstall/
#newz
PBS confirms a data breach exposing contact info of nearly 4,000 employees & affiliates!
The data leaked on Discord servers meant for PBS Kids fans, shared out of curiosity, not financial gain. PBS is investigating & alerting affected users. Stay cautious!
#DataBreach #CyberSecurity #PBS #newz
1/2 Life on #Earth has become quite absurd. I’m with folks who are furious about #PBS funding. We are one. But the entirety of our #PublicHealth, research , #Science and #Technology, #Cybersecurity and #NatSec infrastructure have been attacked and damaged from within. If a foreign adversary had done this the missiles would have already flown…and not a word about those ? For many PBS is the redline. None of this is funny but the comedy is just sitting there. Fasten your seatbelts…
"Searches around for a bucket, mop, and towels to clean up all this spilled tea"
Today's #Cybersecurity newsletter
New Open-Source Tool Spotlight
Subfinder is a fast tool for discovering subdomains by leveraging passive enumeration. It uses sources like Shodan, Censys, and more to gather accurate results without triggering rate limits. Ideal for reconnaissance in security workflows. #CyberSecurity #OSINT
Project link on #GitHub
https://github.com/projectdiscovery/subfinder
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking
PSA: Huntress has some cybersecurity openings: https://job-boards.greenhouse.io/huntress @huntress #cybersecurity #infosec
Authorities seize BlackSuit ransomware gang’s servers
German prosecutors say a joint U.S.-European operation has seized infrastructure belonging to the BlackSuit ransomware gang.
the operation secured “considerable amounts of data” that will be used to help identify the individuals responsible for the attacks.
#blackSuit #ransomware #malware #security #cybersecurity #hackers #hacking #hacked
https://finance.yahoo.com/news/authorities-seize-blacksuit-ransomware-gang-132115752.html
CSO: 5 hard truths of a career in cybersecurity — and how to navigate them https://www.csoonline.com/article/4026880/5-hard-truths-of-a-career-in-cybersecurity-and-how-to-navigate-them.html #cybersecurity #infosec
One of my almae matres (?) is hiring!
From the LinkedIn announcement:
"The 𝐂𝐨𝐦𝐩𝐮𝐭𝐞𝐫 𝐒𝐜𝐢𝐞𝐧𝐜𝐞 department at UCLouvain (Belgium) will soon open 𝐭𝐡𝐫𝐞𝐞 𝐟𝐮𝐥𝐥-𝐭𝐢𝐦𝐞 𝐟𝐚𝐜𝐮𝐥𝐭𝐲 𝐩𝐨𝐬𝐢𝐭𝐢𝐨𝐧𝐬 targeting excellent profiles in the following domains:
- 2 Positions in one or more of these areas:
=> 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐞𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠,
=> 𝐏𝐫𝐨𝐠𝐫𝐚𝐦𝐦𝐢𝐧𝐠 𝐬𝐲𝐬𝐭𝐞𝐦𝐬 𝐚𝐧𝐝 𝐥𝐚𝐧𝐠𝐮𝐚𝐠𝐞𝐬,
=> 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐝𝐞𝐩𝐞𝐧𝐝𝐚𝐛𝐢𝐥𝐢𝐭𝐲, 𝐢𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐟𝐨𝐫𝐦𝐚𝐥 𝐦𝐞𝐭𝐡𝐨𝐝𝐬.
- 1 Position in 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐚𝐧𝐝 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲, also broadly construed (e.g., system security, cyber-physical systems security, AI for security & security for AI, privacy, distributed systems security, etc.).
The three positions will be open to 𝐚𝐥𝐥 𝐬𝐞𝐧𝐢𝐨𝐫𝐢𝐭𝐲 𝐥𝐞𝐯𝐞𝐥𝐬 (assistant/associate or full)."
I loved the year that I spent at Université catholique de Louvain! I learned so much there, and every time I am back, I am welcomed with such open arms by the lovely people there. I'm happy where I am now at TU Delft, but seeing this announcement, my heart jumped and I admit that I did quickly check my profile against the positions that are opening.
#AcademicJobs #GetFediHired #AcademicMastodon #AcademicJob #SoftwareEngineering #ProgrammingLanguages #FormalMethods #SoftwareSecurity #CyberSecurity #Belgium #LLN #UniversitéCatholiquedeLouvain
#AcademicChatter
Watch out as scammers abuse Discord CDN to deliver RATs disguised as a #OneDrive file in a phishing attack targeting Microsoft 365 users.
Read: https://hackread.com/discord-cdn-link-deliver-rat-disguised-onedrive-file/
Your location information can leak through multiple data sources, such as GPS, Wi-Fi, Bluetooth, cellular networks, and device sensors, each offering varying levels of accuracy
Here are available location tracking techniques #infosec #privacy #technology
Find high-res pdf books with all my #cybersecurity related infographics at https://study-notes.org
#Microsoft Used #China-Based Engineers to Support Product Recently Hacked by China
https://www.propublica.org/article/microsoft-sharepoint-hack-china-cybersecurity