Catalin Cimpanu

Cybersecurity reporter for Risky Business

#infosec #cybersecurity #security

Public Key

npub1tqfukrqgh928vktkl6vx063ck2c4yn3ek8m44v3txfhztqe65anq63aefw

NIP-05 Address

campuscodi_at_mastodon.social@mostr.pub

Profile Code

nprofile1qqs9sy7tpsytj4rkt9m0axr8agut9v2jfcumra66kg4nym39sva2wespz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3samnwvaz7tmjv4kxz7fwdehhxamgv4ex2tnrdaks3tk3rj

Publishing to

relay.damus.io

relay.noswhere.com

Author Public Key

npub1tqfukrqgh928vktkl6vx063ck2c4yn3ek8m44v3txfhztqe65anq63aefw

Show more details

Last Notes

2024-08-30 11:46:13

Elon Musk: We're modifying the algorithm to surface tweets from smaller accounts
The accounts:
https://files.mastodon.social/media_attachments/files/113/050/803/376/456/241/original/4fda4f51ec1b9b3c.png

2024-07-26 15:37:06

Happy one-week anniversary, CrowdStrike customers!

2024-07-13 21:29:50

Google is removing EnTrust in October from Chrome.
Per Censys, they were the 22nd largest CA on the internet
https://censys.com/google-entrust-internet/
https://files.mastodon.social/media_attachments/files/112/781/306/430/420/085/original/236401e237f275b2.png

2024-07-02 15:39:09

It's a storm outside and Romania is about to play in the Euros.
This is the perfect time to ruin a delivery guy's day! 👺

2024-06-29 19:51:40

Australian man charged for setting fake WiFi access points to steal data from Australian airport users
https://www.afp.gov.au/news-centre/media-release/man-charged-over-creation-evil-twin-free-wifi-networks-access-personal #infosec #cybersecurity #security

2024-06-23 05:46:17

https://files.mastodon.social/media_attachments/files/112/664/344/345/644/577/original/65caa3139f8437fd.jpeg

2024-06-21 13:40:10

- reply

@npub14fa…99fr Weeeeeeell... knowing the US legal system, "incalculable" is probably $3/person

2024-06-21 13:38:14

- reply

@npub1lye…xtsp lol.... cause Kaspersky used to operate ThreatPost.... actually funny

2024-06-20 10:00:37

CertiK whitehat-bountying funds from Kraken and then laundering the assets through a sanctioned mixing service is the perfect definition of the s##t show that the crypto-scene has been for the past decade.
https://x.com/jconorgrogan/status/1803486112608034854

2024-06-19 09:58:10

- reply

@npub1mg9…lml3 working here too

2024-06-19 01:27:10

- reply

@npub14fa…99fr I used to have this opened 24/7 in my browser tabs. I should probably subscribe and stop being a Middle Age peasant 🫠

2024-06-14 02:10:13

- reply

@npub1dw5…w3tk somehow this was Biden's... not Obama's... fault.
Right... right

2024-06-13 20:37:55

The French government has published a report on Matriochka, a pro-Russian social media influence campaign that tried to discredit Western news media, public figures, and fact-checking organizations.
https://www.sgdsn.gouv.fr/publications/matriochka-une-campagne-prorusse-ciblant-les-medias-et-la-communaute-des-fact-checkers
#infosec #cybersecurity #security

2024-06-13 18:19:52

Cloud security firm Permiso has open-sourced a tool named YetiHunter that can search for signs of compromise in a company's Snowflake accounts.
https://permiso.io/blog/introducing-yetihunter-an-open-source-tool-to-detect-and-hunt-for-suspicious-activity-in-snowflake
https://github.com/Permiso-io-tools/YetiHunter
#infosec #cybersecurity #security

2024-06-13 17:49:02

German security firm G Data has discovered that Fortinet firewalls use weak password hashes to secure backup files.
https://www.gdatasoftware.com/blog/2024/01/37834-passwords-on-a-silver-platter
Tracked as CVE-2024-21754, the vulnerability can be exploited to decrypt backup files and read a device's login credentials.
https://www.fortiguard.com/psirt/FG-IR-23-423
"Those backup files are commonly sent back and forth via email, for review and control purposes."
#infosec #cybersecurity #security

2024-06-13 17:15:58

The CyberVandals research group says it did not see widespread coordinated DDoS attacks from pro-Kremlin groups during the recent EU elections.
https://blog.kybervandals.com/attacks-on-eu-by-russian-activist-summarized/
#infosec #cybersecurity #security

2024-06-13 12:48:35

Databricks security engineer Steve Weis has compiled a list of companies that use non-standard cryptography setups.
https://github.com/fancy-cryptography/fancy-cryptography

2024-06-13 11:58:02

- reply

@npub157z…2q4w Probably this guy: https://www.politie.nl/nieuws/2024/juni/5/verdachte-ransomware-opgepakt.html

2024-06-12 03:03:10

What the actual f...
https://www.nordbayern.de/panorama/nach-burgerentscheid-hunderte-tauben-sollen-mit-genickbruch-getotet-werden-1.14296366

2024-06-11 16:44:17

US federal agencies have suffered more than 32,000 security incidents over fiscal year 2023, according to a new White House report
PDF: https://www.whitehouse.gov/wp-content/uploads/2024/06/FY23-FISMA-Report.pdf
https://files.mastodon.social/media_attachments/files/112/598/990/063/693/319/original/f35e6d2bfe447e68.png

2024-06-11 15:30:32

More than 458,000 PHP Windows servers are currently exposed on the internet and potentially vulnerable to that nasty PHP-CGI/Windows bug
#infosec #cybersecurity #security
https://censys.com/cve-2024-4577/

2024-06-11 15:30:14

More than 458,000 PHP Windows servers are currently exposed on the internet and potentially vulnerable to that nasty PHP-CGI/Windows bug

2024-06-11 15:29:38

AWS adds support for security keys
https://aws.amazon.com/blogs/security/passkeys-enhance-security-and-usability-as-aws-expands-mfa-requirements/
#infosec #cybersecurity #security

2024-06-11 12:13:04

- reply

"Amplified narratives focus on undermining UN missions by portraying them as ineffective, corrupt, and complicit in crimes. They position Russian military involvement as a more effective and transparent alternative."
you know... the recommendation is the troops accused of genocide in many of these countries... used to clear communities from desired mining lands

2024-06-11 12:03:09

Pro-Russian operatives wage relentless disinformation campaigns on Telegram against UN peacekeepers in Mali, DRC, and CAR
https://blog.openmeasures.io/p/pro-russian-telegram-channels-amplify

2024-06-11 08:07:52

It's time companies... do it!
https://files.mastodon.social/media_attachments/files/112/596/958/569/844/329/original/414f9f62506192ab.png
https://files.mastodon.social/media_attachments/files/112/596/959/354/532/879/original/3723cbbcd0ee4bfa.png

2024-06-10 23:53:53

Unredacted has open-sourced FreeSocks, a Shadowsocks proxy-based system for bypassing internet censorship
https://unredacted.org/blog/2024/06/freesocks-is-now-open-source/
https://github.com/unredacted/freesocks-control-plane

2024-06-10 23:53:21

After European law enforcement agencies have argued for lawful access to encrypted instant messaging clients for a few years now, their demands have recently expanded. In a new report published this week, Europol has asked that lawful access should be considered for other technologies that use encryption, such as 6G, biometrics, DNS, the blockchain, and quantum computing.
https://www.europol.europa.eu/media-press/newsroom/news/equilibrium-between-security-and-privacy-new-report-encryption

2024-06-09 19:06:56

David Ross, one of the early pioneers of browser security research, has passed away, his family announced on Twitter.
In 1999, together with Georgi Guninski, he authored the first paper on XSS attacks named "Script Injection".
He also worked on implementing X-Frame-Options in Internet Explorer.
https://x.com/randomdross/status/1799284146231185584
#infosec #cybersecurity #security

2024-06-09 18:53:35

- reply

@npub12lx…jvjy It's ok.. I saw this two days later... all is forgiven

2024-06-09 15:30:12

The Cyber Partisans say they hacked the Belarusian State University.
The group claims it obtained documents and audio records from the university's internal network showing how its leadership dismissed staff and students who participated in anti-government protests.
The files show that the university declined to admit new students who participated in protests and left comments online against the dictatorship.
https://www.by.cpartisans.org/en/post/bsu-uncut-2020-2024-part-1 #infosec #cybersecurity #security

2024-06-09 13:40:44

The threat actor behind the Kuiper ransomware tried to sell its source code on the XSS hacking forums only to get immediately banned back in April
https://x.com/Libranalysis/status/1778036668236222483
#infosec #cybersecurity #security

2024-06-09 12:59:24

I'm gonna take a wild guess and say probably because the US is one giant country and there's 102,194 different languages in Europe... also previously divided by an "Iron Curtain"
Might be wrong :tinking: :SMOrc:
https://files.mastodon.social/media_attachments/files/112/586/772/669/743/566/original/1e5122f5cda391b7.png

2024-06-09 12:42:07

Security firm watchTowr has published its own analysis of CVE-2024-4577, a PHP-CGI vulnerability impacting Windows systems: https://labs.watchtowr.com/no-way-php-strikes-again-cve-2024-4577/
The bug was initially discovered by DEVCORE: https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/
watchTowr has also released proof-of-concept code: https://github.com/watchtowrlabs/CVE-2024-4577

2024-06-09 12:14:05

Morphisec has published a report on a campaign targeting Russia's aviation sector.
The company linked the attacks to a group tracked as Sticky Werewolf, an APT known to target Russia and Belarus exclusively.
This is the first report on the group from a non-Russian security firm.
https://blog.morphisec.com/sticky-werewolfs-aviation-attacks

2024-06-09 11:50:34

Mozilla has launched a new bug bounty program focused on large language models (LLMs) and other deep learning technologies.
The new platform is named 0-Day Investigative Network (0Din) and works as an intermediary between researchers and LLM vendors—similar to the likes of ZDI.
Mozilla says 0Din will accept bug reports for common LLM vulnerabilities and attacks such as Prompt Injection, Training Data Poisoning, Denial-of-Service, and more.
https://blog.mozilla.org/en/mozilla/keeping-genai-technologies-secure-is-a-shared-responsibility/
https://0din.ai/

2024-06-09 11:40:43

- reply

@npub1qa5…gqz7 https://csrc.nist.gov/glossary/term/end_cryptographic_unit

2024-06-09 11:39:36

South Korean security firm S2W has published a comprehensive look at the DDoS-as-a-Service operations that are promoting themselves via Telegram these days. Researchers look at the likes of Project DDoSia, SERVER KILLERS, CYBERBOOTER, DDOS-V4, and more. The research is in Korean.
https://medium.com/s2wblog/trends-of-telegram-daas-ddos-as-a-service-groups-their-hacktivist-motivations-attack-techniques-b222e5bfe0ef

2024-06-09 11:07:50

WolfSSL has open-sourced WolfHSM, a quantum-resistant cryptography framework for Automotive HSMs (Hardware Security Modules)
https://www.prweb.com/releases/wolfssl-inc-announces-wolfhsm-for-automotive-hsms-hardware-security-modules-302163846.html

2024-06-09 11:07:31

Talks from the Privacy Camp 2024 security conference, which took place this January, are available on YouTube
https://www.youtube.com/playlist?list=PLGeR6jS_7N7d0O9TKMDQwta-fZ_mN4ors

2024-06-07 23:24:54

CoinGecko data breach
https://www.coingecko.com/learn/getresponse-data-breach-june-2024

2024-06-06 18:07:15

The FCC has allocated $200 million to fund the acquisition of cybersecurity services and products at K-12 schools and libraries.
The funds will be made available in the next three years through the FCC E-Rate program. Prior to this year, E-Rate funds could previously only be used to purchase internet subscriptions and networking devices.
https://www.fcc.gov/document/fcc-adopts-200m-cybersecurity-pilot-program-schools-libraries

2024-06-06 17:49:55

French authorities have detained a 16-year-old teen for running a malware rental business.
The teen used nicknames such as ChatNoir and Cap and was part of the Epsilon hacker group that breached the Altice French multinational earlier this year.
According to posts on the group's Telegram channel, the teenager appears to be behind the WaveStealer malware.
https://www.lemonde.fr/pixels/article/2024/06/05/cybercriminalite-un-adolescent-interpelle-dans-l-enquete-sur-le-groupe-de-pirates-epsilon_6237496_4408996.html

2024-06-06 17:44:37

FCC passes rules to require broadband providers to file confidential reports on BGP protections and incidents
https://www.fcc.gov/document/fcc-proposes-internet-routing-security-reporting-requirements

2024-06-06 16:40:38

Ukraine's CERT team says a threat actor it tracks as UAC-0020 (Vermin) is targeting its military with spear-phishing attacks designed to deliver the SPECTR infostealer.
The group has returned with new attacks after first being spotted in March 2022, shortly after Russia's invasion of Ukraine.
Officials claim the Vermin group receives orders from law enforcement agencies in the Luhansk occupied territory.
https://cert.gov.ua/article/6279600

2024-06-06 16:10:04

NIST's CyberSeek project says the US still needs over 225,000 professionals to close its cybersecurity workforce shortage.
The agency says that only 85% of the the 1.2 million cybersecurity jobs in the US are occupied.
https://www.securityweek.com/225000-more-cybersecurity-workers-needed-in-us-cyberseek/
Interactive map: https://www.cyberseek.org/heatmap.html
https://files.mastodon.social/media_attachments/files/112/570/543/844/591/612/original/09be1ad02f125923.png

2024-06-06 14:17:35

- reply

(2/2)
The campaign launched a month after the Hamas October 7 attack and targeted at least 128 members of the US Congress. According to disinformation experts, social media accounts controlled by STOIC targeted US lawmakers with pro-Israeli propaganda and anti-Arab views. STOIC's campaign was also spotted and disrupted by Meta and OpenAI earlier this month.
PDF: https://fakereporter.net/pdf/pro-Israeli_influence_network-new_findings-0624.pdf

2024-06-06 14:16:51

According to reports from the New York Times and Haaretz, the Israel Ministry of Diaspora Affairs paid a private company named STOIC $2 million for a social media influence campaign that targeted US politicians. (1/2)
https://www.nytimes.com/2024/06/05/technology/israel-campaign-gaza-social-media.html
https://www.nytimes.com/2024/06/05/technology/israel-campaign-gaza-social-media.html

2024-06-06 13:33:59

Privacy organization noyb has asked data protection agencies in 11 EU countries to investigate Meta for its plan to use Facebook user data to train its AI
https://noyb.eu/en/noyb-urges-11-dpas-immediately-stop-metas-abuse-personal-data-ai

2024-06-06 11:44:09

Daixin Team claims to have breached the Dubai Municipality
https://databreaches.net/2024/06/05/daixin-team-claims-to-have-breached-the-dubai-municipality/
https://files.mastodon.social/media_attachments/files/112/569/499/464/609/090/original/e7f2e6b1b8fe191b.png

2024-06-06 11:28:23

South Korean security firm AhnLab has spotted a spear-phishing campaign that tries to bypass security defenses by asking users to copy-paste malicious PowerShell commands in their Windows Run prompt.
https://asec.ahnlab.com/en/66300/
https://files.mastodon.social/media_attachments/files/112/569/437/443/621/557/original/41c39cc4c7e5f556.png

2024-06-06 11:01:47

A Chinese cybercrime group is targeting websites built using the ThinkPHP framework in attacks designed to install a new web shell named Dama.
The attacks exploit two old 2018 and 2019 vulnerabilities in the framework, mostly used by Chinese-speaking developers.
Akamai says the attacks started last October and are ongoing.
The company couldn't say what the final payload was (i.e., cryptomining, proxy bot, DDoS, etc.).
https://www.akamai.com/blog/security-research/2024/jun/2024-thinkphp-applications-exploit-1-days-dama-webshell

2024-06-06 10:49:36

Cisco under investigation in Romania for allegedly rigging some public IT tenders
RO: https://economie.hotnews.ro/stiri-telecom-27191430-reactia-cisco-dupa-hotnews-scris-vizata-investigatia-privind-posibila-trucare-unor-licitatii-romania.htm
GT: https://economie-hotnews-ro.translate.goog/stiri-telecom-27191430-reactia-cisco-dupa-hotnews-scris-vizata-investigatia-privind-posibila-trucare-unor-licitatii-romania.htm?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp

2024-06-06 10:04:33

Cisco has rolled out patches for the Webex application to fix a bug that allowed unauthorized access to Webex meetings and metadata information.
The company says the bugs were exploited by security researchers at the end of May.
Cisco is notifying customers who had their data collected during the research.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-june-2024

2024-06-06 10:04:12

Eugenio Benincasa, a Cyber Defense Researcher at the Technical University of Zurich (ETH Zurich), has published a 74-page paper on the connections between China's hacking contests and bug bounty platforms and the country's offensive cyber capabilities.
PDF: https://css.ethz.ch/content/dam/ethz/special-interest/gess/cis/center-for-securities-studies/pdfs/CyberDefenseReport_%20From%20Vegas%20to%20Chengdu.pdf
https://files.mastodon.social/media_attachments/files/112/569/106/514/435/189/original/0a3a7d452ecf83f6.png

2024-06-04 18:38:08

The Android red team has a blog:
https://androidoffsec.withgoogle.com

2024-06-04 18:22:00

Talks from the OffensiveCon24 security conference, which took place at the start of May in Berlin, are available on YouTube:
https://www.youtube.com/playlist?list=PLYvhPWR_XYJlg1SfcKdZY6eXUTPPqnh_G

2024-06-04 18:04:01

- reply

@npub157z…2q4w Did they change this to UAC-0900 or is it just a typo?

2024-06-04 16:58:31

- reply

@npub1d5q…xvy7 glad to hear it! Wishing her a speedy recovery!

2024-06-04 16:54:30

The Bian Lian ransomware gang has taken credit for a ransomware attack on Northern Minerals, one of Australia's largest rare-earth mining companies.
Northern Minerals has confirmed the incident in a filing with the Australian Securities Exchange.
PDF: https://cdn-api.markitdigital.com/apiman-gateway/ASX/asx-research/1.0/file/2924-02814126-6A1210386
Coverage: https://www.cyberdaily.au/security/10662-exclusive-aussie-rare-earth-metals-producer-northern-minerals-confirms-ransomware-attack

2024-06-04 16:45:32

- reply

Just look at this chart!
What are we doing JS developers?
Do we actually code anymore or we just playing with legos at this point?
https://files.mastodon.social/media_attachments/files/112/559/357/803/289/939/original/441d9d8ce1252160.png

2024-06-04 16:44:09

From this report: https://mastodon.social/@ravirockks@infosec.exchange/112555805013166419
"Including any given PHP library has a greater than 50% chance of bringing a security flaw along with it."
kek 😆

2024-06-04 16:29:57

- reply

@npub17gf…20ur fixed

2024-06-04 16:25:46

A cyber attack has forced three major UK hospitals to cancel operations and redirect emergency patients to other nearby care facilities.
According to Metro, the incident has impacted transplant surgeries and blood transfusion centers.
https://metro.co.uk/2024/06/04/cyber-attack-forces-three-major-hospitals-cancel-operations-20968948/

2024-06-04 15:40:04

CISA has updated its KEV database with a new vulnerability currently actively exploited in the wild, a 2017 Oracle WebLogic command injection tracked as CVE-2017-3506.
https://www.cisa.gov/news-events/alerts/2024/06/03/cisa-adds-one-known-exploited-vulnerability-catalog

2024-06-04 15:39:33

PQShield cryptography security analyst Antoon Purnal has published a proof-of-concept named ClangOver that exploits a timing leak in the reference implementation of Kyber (ML-KEM), the soon-to-be NIST standard for post-quantum key encapsulation.
https://github.com/antoonpurnal/clangover

2024-06-04 14:23:47

The government of Canada's British Columbia region says a recent state-sponsored hack of its IT systems "hit 22 email boxes containing sensitive information about 19 people."
https://www.cbc.ca/news/canada/british-columbia/farnworth-cybersecurity-attack-security-1.7223125

2024-06-04 09:10:39

Sekoia has published a report on the now-seized PikaBot malware loader botnet.
Sekoia was one of the companies that participated in Europol's Operation Endgame, which took down the botnet last week.
The report looks at PikaBot's history since it launched in February 2023.
https://blog.sekoia.io/pikabot-a-guide-to-its-deep-secrets-and-operations/
https://files.mastodon.social/media_attachments/files/112/557/571/315/849/297/original/5d4bb28c03a61f99.png

2024-06-04 08:45:24

QNAP says it will stop using a device's MAC address as its default password.
Going forward, the company will use a cloud app named Cloud Key and data from the device's label to provide new users access to their devices.
https://www.qnap.com/en/news/2024/qnap-enhances-nas-initialization-process-switches-to-cloud-key-as-default-password-for-improved-security

2024-06-04 08:44:47

HIBP has recently indexed more than 361 million email addresses that a security researcher scrapped from Telegram channels.
There's no Telegram leak. These are emails shared inside Telegram groups and channels—typically in ones advertising hacked data. That's quite a lot if I'm being honest!
https://www.troyhunt.com/telegram-combolists-and-361m-email-addresses/

2024-06-04 01:34:41

Mobile operating system GrapheneOS is adding support for a duress password.
The feature will allow users to set a special password that deletes all their data when entered.
GrapheneOS says the duress-initiated wipe does not require a reboot and cannot be interrupted.
https://grapheneos.org/features#duress

2024-06-02 22:41:56

The German government is investigating a cyber attack on the country's leading party, the German Christian Democrats (CDU).
The country's Interior Ministry described the incident as "serious" and said teams have taken down affected systems.
https://www.dw.com/en/germany-major-hack-targets-center-right-cdu-party/a-69242147

2024-06-02 22:41:29

Oil and gas giant Shell is investigating a security breach after a threat actor began advertising the company's data on a hacking forum
https://www.ctvnews.ca/business/shell-investigating-a-potential-cybersecurity-incident-1.6907509
https://mastodon.social/@DarkWebInformer@infosec.exchange/112524701891915782

2024-06-02 16:21:32

AI platform Hugging Face discloses security breach
https://huggingface.co/blog/space-secrets-disclosure

2024-06-01 22:35:06

Talks from the Disobey 2024 security conference, which took place in February in Helsinki, are available on YouTube
https://www.youtube.com/playlist?list=PLLvAhAn5sGfiB9AlEt2KD7H9Dnr6kbd64

2024-06-01 22:30:47

IoT search engine Censys is seeing almost 14,000 Check Point security gateways connected to the internet: https://censys.com/cve-2024-24919/
The devices may be vulnerable to CVE-2024-24919, a zero-day in the company's devices that was patched last week: https://support.checkpoint.com/results/sk/sk182336

2024-06-01 18:45:03

Does anyone know an alternative for Old Dominion's website carbon-dating tool?
Seems to be dead for a few days now: https://carbondate.cs.odu.edu/

2024-06-01 18:10:54

Japanese crypto exchange DMM Bitcoin hacked hacked for $305 million
https://bitcoin-dmm-com.translate.goog/news/20240531_01?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp

2024-05-30 20:24:49

"Merry-Go-Round is the name HUMAN researchers have given to two independent rings of websites that operate and redirect traffic among each other in pop-under tabs, racking up digital ad impressions that are concealed from the user."
https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-merry-go-round-conceals-ads-from-users-and-brands

2024-05-30 19:56:09

Microsoft not saying a peep about the Recall privacy scandal is a huge tell of how much the company is focused on security
We should have had a statement by now that Recall is either re-engineered or removed

2024-05-30 19:38:21

Recorded Future has published a report on a cyber-espionage campaign carried out by Russian APT group BlueDelta that primarily targeted Ukrainian and European organizations with a tangent to Russia's war in Ukraine.
The final payload in this campaign was the Headlace infostealer.
The campaign started in late 2023 and is ongoing.
https://www.recordedfuture.com/grus-bluedelta-targets-key-networks-in-europe-with-multi-phase-espionage-camp
https://files.mastodon.social/media_attachments/files/112/531/727/734/825/834/original/70effbee60cd9d02.png

2024-05-30 18:14:28

US authorities have issued an arrest warrant for an 18-year-old student for launching cyberattacks that disrupted the STAAR online exams in the state of Texas
https://www.houstonchronicle.com/neighborhood/spring-klein/article/klein-cyberattack-staar-testing-19481598.php

2024-05-30 18:14:06

Indian authorities have arrested five suspects on charges of trafficking unwitting job seekers into Southeast Asian scam compounds
https://therecord.media/india-arrests-human-trafficking-southeast-asia-scam-compounds

2024-05-30 18:05:03

WatchTowr Labs has published a write-up on that Check Point zero-day from yesterday
https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/

2024-05-30 18:00:10

The European Court of Human Rights (ECHR) has ruled that a Polish surveillance law violates the European Convention on Human Rights.
The ECHR ruled that Poland's secret surveillance program violated the personal privacy of its targets and did not provide an avenue of appeal.
The court also found the program did not undergo reviews by an independent body and was subject to political influence.
https://notesfrompoland.com/2024/05/29/polish-surveillance-law-violates-human-rights-rules-european-court/

2024-05-30 17:59:13

Activision has won a lawsuit against EngineOwning, a company that makes cheats for Call of Duty games.
The judge awarded Activision a default judgement of $14.4 million and has ordered EngineOwning to stop making cheats and turn over its website to Activision.
https://www.theverge.com/2024/5/29/24166932/activision-call-of-duty-cheat-creator-lawsuit-engineowning

2024-05-22 17:21:32

Just think about it!
In just 14 days, Microsoft pivoted from "do security" in an internal memo on May 5 to "let's install an infostealer on everyone's PC" on May 21.
That's must be a world record in bad corporate management

2024-05-22 16:18:06

https://files.mastodon.social/media_attachments/files/112/485/641/710/933/211/original/512eae0dd09f70fc.png

2024-05-18 12:07:49

- reply

@npub1lye…xtsp yeah there is.... it's called DDG

2024-05-17 14:35:03

- reply

@npub136x…mwy4
"because they're in the kitchen"
~~ probably Harrison Butker :blobpeek:

2024-05-16 18:50:58

- reply

@npub19kd…strw an auto-complete will maybe fix a function or two... AI generated code will literally dump 400 lines of unvetted code

2024-05-16 18:12:51

NetBSD follows Gentoo and bans AI-generated code
"Code generated by a large language model or similar technology, such as GitHub/Microsoft's Copilot, OpenAI's ChatGPT, or Facebook/Meta's Code Llama, is presumed to be tainted code, and must not be committed without prior written approval by core."
https://www.netbsd.org/developers/commit-guidelines.html

2024-05-16 14:03:31

- reply

@npub157z…2q4w Seems to be the same threat actor from Rapid7's report from last Friday

2024-05-15 19:20:37

Twitter is full of idiots blaming the Fico assassination attempt on everything under the sun. From the WHO to Soros.
That site keeps digging its own grave of irrelevance

2024-05-13 00:15:17

- reply

@npub12lx…jvjy serves you right for not blocking Threads

2024-05-12 12:37:12

- reply

@npub1lye…xtsp That's the tactic from which the Ghostwriter APT got its name.
I think Doppelganger did some of this too, but I may be wrong/misremembering

2024-05-12 12:28:10

Is Gmail useless these days? I keep marking domains as spam, yet they're back the next day in my inbox with literally the same email/domain I marked as spam a few hours ago

2024-05-09 18:33:38

LockBitSupp doing the media tour with the same boring ass "you got the wrong guy" routine that all the previous ransomware dudes attempted and failed

2024-05-09 13:02:20

- reply

@npub1vr0…7upc kinda... all the Russian Twitter bots are spreading this it's the task du jour

2024-05-09 12:58:54

- reply

@npub13dc…5aw9 That's exactly why I'm not taking that clown seriously. There's actual cryptographers calling his app out and he's response was that "whataboutism"