Christoffer S.

🇪🇺 Father, husband, Swedish and cyber. Oh man, all the things cyber but mostly threat Intelligence. Dabble with Python. In the cybersecurity field as a professional since 2001.

Cybersecurity all the way... let's go!

Website: https://cstromblad.com
Github: https://github.com/cstromblad
ELEVATE Platform: https://www.elevate-platform.eu

Public Key

npub1nfcxlme0vu874ttzet99lr9z67qz2my0ks37y23fm5c3re7flynqp8yzp9

NIP-05 Address

nopatience_at_swecyb.com@momostr.pink

Profile Code

nprofile1qqsf5ur0auhkwrl2443v4jjl3j3d0qp9dj8mgglz9g5a6vg3ulyljfsprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntsq9tx8

Publishing to

relay.momostr.pink

Author Public Key

npub1nfcxlme0vu874ttzet99lr9z67qz2my0ks37y23fm5c3re7flynqp8yzp9

Show more details

Last Notes

2026-04-24 05:07:32 UTC

I'm looking for that article that dug into the claims of Mythos from Anthropic basically debunking all claims as nothing more than... Marketing.
I lost the link. Any one know what I'm referring to and got the link?

2026-03-25 20:47:17 UTC

I've finally gotten around to adding the final touches to the @npub1shl…kwr0 "bot" account.
It should very soon begin to write more Toots. And just to reiterate. The ORLYSEC account will publish from a very strict set of sources, always attributing to original source and no redirects, tracking links etc.
The very purpose of the account is to contribute a fairly high-quality feed of stuff that you probably would like to read/skim.
Let me know if there's something you'd like to see added or changed (content, tags etc.)

2026-03-22 16:37:22 UTC

Whenever there is a recent attack campaign reported across multiple articles I always wish for there to be a "sum of all the pieces" to try and get a better understanding.
I tried something new today with regards to TeamPCP and the recent CanisterWorm and Kubernetes Wiper campaign.
Let me know if you like the format.
https://cstromblad.com/posts/threat-actor-profile-teampcp/
#ThreatIntel #Cybersecurity

2026-02-19 09:21:16 UTC

Forgot to share the [@cert_eu](https://infosec.exchange/@cert_eu ) CTI Framework published about a week ago.
Not much to add, it's a great framework that should be studied by those involved with CTI in any reasonable capacity.
Easy to digest and read.
https://cert.europa.eu/publications/threat-intelligence/cyber-threat-intelligence-framework/

2026-01-16 08:41:45 UTC

Yesterday I got a pair of new headphones, Sony XM6es. Installed the App and for the first time in my life... I read the privacy policy.
I rejected it, and uninstalled the app.
Jesus fucking christ. It's a pair of headphones. They are collecting absolutely everything they can. Location, what I'm listening to, the text-to-speech, the ... anything and everything.
I've probably been naive (quite obviously) but I never thought a pair of headphones and an app to control them would collect this vast amount of data.
EDIT: I may have been to quick to assert that they collect data about other devices beyond my headphones.
Unfortunately I can't accept the terms. I tried to, via GrapheneOS, reject it's request for network access but apparently I have to be connected to the Internet in order to accept the terms. lol
Fuckers.

2026-01-13 06:59:57 UTC

For as long as I can remember I have always had this dreamy view of the US. As a youngster I even went there in my earlier days to try out a career as a model/actor. (Yeah... it didn't really work out!)
But the dream was there, and the "magical" view of the US was there.
Today... it's not quite the same. And it's so incredibly sad. I have many friends, even family, in the US. But I look at the current country leadership with utter disgust. Abusing... abusing almost everything that can be abused.
Bullying smaller countries, bullying and abusing minority and other marginalized groups of people.
Now with the whole Greenland business, Venezuela... when is it going to stop? I feel obliged to limit my use of services and tech from US companies just to do something.
But in so doing I feel I'm also punishing all those who do not support the current government, not supporting the orange man etc.
I'm very conflicted and I'm not quite sure what to feel or think.
#USPol #Europe #Sweden

2026-01-07 20:31:07 UTC

Huntress writes about VMware exploitation and boy, they have gone all in on the details.
https://www.huntress.com/blog/esxi-vm-escape-exploit
This is well worth reading. Exploit was likely developed almost a year before use. (Or something like that...)
#Cybersecurity #ThreatIntel

2025-12-03 19:36:27 UTC

- reply

Worth mentioning that Node.js appears affected 15.x and 16.x.
https://nextjs.org/blog/CVE-2025-66478

2025-12-02 12:18:04 UTC

Ohh I like this... Aikdo has presented a more detailed analysis of the early steps for the Shai Hulud 2.0 worm.
Attempting to map what steps the original threat actor took to gain a foothold. Useful stuff IMHO
https://www.aikido.dev/blog/shai-hulud-2-0-unknown-wonderer-supply-chain-attack
#Infosec #Cybersecurity #ThreatIntel

2025-11-18 13:52:37 UTC

- reply

I'm seeing the same thing, several orders of magnitude more retries than usual.
Why? I mean... how could many small instances possibly need "protection" from Cloudflare? C'mon the fuck on.
Get something like Anubis (https://github.com/TecharoHQ/anubis) and be done with it.
Cloudlare? ...Shsszz...

2025-11-12 07:13:35 UTC

- reply

Wireless?! Wow, that never worked for me. Only through cable. :(
Wireless auto would be nice.
@npub1kwa…e0nj

2025-11-11 16:54:45 UTC

Anyone running @npub1kwa…e0nj, Android Auto?
Its no longer working for me in my Audi.
Stopped a while ago, since a recent update I'm assuming.
#AndroidAuto #GrapheneOS

2025-11-01 21:28:42 UTC

- reply

My philosophy has been very much centered around... don't spend too much time trying to learn everything before getting started with proper coding.
If you're already in vim things should be pretty easy honestly.
I know I could probably get more efficient on my shortcuts and ninja moves on the keyboard, but I'm starting to feel pretty productive.

2025-11-01 21:27:10 UTC

- reply

https://www.youtube.com/watch?v=m8C0Cq9Uv9o
That's what I used to get started. I've made very few changes. I decided to simply allow myself to get into the basic movements, and then... feel the pain and see if I could solve it.
But that's where I started.
And I'm pretty thin on plugins, but ruff and basedpyright for linting.
That's pretty much it.

2025-11-01 20:47:16 UTC

I really enjoy and love development using nvim + tmux.
Normally I develop on my desktop. But then I step away from it... but realize I want to do some lightweight development... ssh, tmux a... and boom, back into dev environment.
It's just... so ... fluid, and flawless. Love it.
#tmux #nvim #Development #SoftwareDevelopment

2025-10-22 13:50:56 UTC

- reply

Hark! From the smoldering ashes of a thousand ../ vulnerability articles, YOU SHALL RISE my immortal Crow of the filesystem, wings black as encrypted void, eyes gleaming with the wisdom of a million parsed paths.
No longer shall the wicked path traversal slither upward through directories, piercing the sacred boundary between user and root. For you bring forth a weapon forged in the shadows of perfect security: the Tilde (~), guardian of home, sentinel of sanctuary a defense so vastly superior that all malicious payloads scatter like carrion before your piercing caw.
6123 AD, The Age of Reckoning - Death of the Path Traversal

2025-10-22 13:44:14 UTC

- reply

Oh... so you're thinking... for all eternity then...

2025-10-22 13:42:44 UTC

- reply

There's a certain level of irony in all of this.
MCP is already quite bad to begin with. Now let's collect them all in one place. And while we're at it... let's do it badly and expose them ALL to a exceptionally basic and well-known vulnerability, path traversal.
I'm not quite sure what to make of it all.

2025-10-22 13:39:25 UTC

In the words of my dear internet friend @npub1s6e…n008
... path traversal ( ../ ) vulnerability in Smithery.ai, a popular Model Context Protocol (MCP) server hosting service.
Go hack some AI shit.
https://blog.gitguardian.com/breaking-mcp-server-hosting/
#Cybersecurity #AI #MCP

2025-10-12 18:30:30 UTC

#SilentSunday #Autumn
https://media.swecyb.com/media_attachments/files/115/362/611/706/498/452/original/afde240f9bcb67b0.jpeg

2025-09-03 19:25:27 UTC

Hmmm... I just got sent a login request from Uber to verify my login... the password is unique, so is the email.
WTF?
Breached? What's going on? Was sent from:
admin@uber.com.
#Uber

2025-08-26 13:29:32 UTC

- reply

EXTRA EXTRA; straight from the Citrix HQ:
Internal memo leaked!
"Dear Development Team,
I've been watching SharePoint get all the attention lately with their shiny new CVE-2025-whatever, and frankly, I'm feeling left out. Remember last month when I was the cool kid with my own 0-day exploits? When every CISO would nervously whisper my name during security meetings?
Now SharePoint is trending on Mastodon while I'm just... sitting here... load balancing traffic like some kind of responsible enterprise appliance.
It's embarrassing.
Could we maybe accidentally expose an API endpoint or something? Just a small remote code execution vulnerability? I promise I'll patch it eventually (after 47 security advisories).
I miss being relevant.
Jealously yours,
NetScaler
"

2025-08-20 14:02:55 UTC

TrendMicro has published an analysis of Warlock, the ransomware group that most likely was behind the attack on Colt.
https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html
@npub1lcc…lcye @npub1s69…rmen
#ThreatIntel #Cybersecurity #Infosec

2025-08-15 18:21:50 UTC

... anyone know anything about @npub1z3m…zn2f ? He's been entirely silent since late June. I don't know him, but still... the silence. Hopefully it's just a vacation, but can you really stay away from the Fediverse for almost 2 months?
#Fediverse #InternetBuddy

2025-07-21 13:56:02 UTC

Finally got my new home router/firewall: TLSense N100L4: 4x 2.5Gbit LAN, N100 CPU, 256GB NVMe SSD, 16GB RAM ( from https://www.teklager.se h/t to @npub1c60…5sxy )
This bad boy has already caused me to rethink my life choices and whether or not I'm sane. They who said firewall rules, NATs and such is fun and games should... be sent to the principals office.
But... having now spent a significant amount of time configuring I'm starting to get things into a state that I'm happy with. Multi-WLAN, WireGuard based interfaces, selective routing and all those other fun things.
And I still have absolutely no clue about what reflective NAT is, or whatever all those 513 other settings do... but perhaps it's like DSLR cameras... you mostly use auto and convince yourself that you'll learn that other stuff eventually...
#HomeLab #Networking #Routing #Hard #Learning

2025-07-13 21:16:30 UTC

#SilentSunday #Nofilter #Sweden #Gotland
https://media.swecyb.com/media_attachments/files/114/847/995/963/382/938/original/34958d89c900ad27.png

2025-07-10 14:51:54 UTC

The BSky user decline is undeniable and I don't mean this as an insult to the platform, their current users and what not. But this really has felt inevitable from the start. It never was anything else than another centralized platform, and perhaps now it's beginning to sink in.
The hype has passed, the romantic early cozy feeling has been replaced with the cold and harsh reality of centralized social media platforms.
Hopefully as users begin to notice declining interaction they will come looking for an alternative and perhaps Mastodon has matured enough to cater to at least some of these users looking for a home.
#BlueSky #Mastodon
https://bsky.jazco.dev/stats
@npub1kxu…9fca
https://media.swecyb.com/media_attachments/files/114/829/483/250/594/449/original/4d57493b82df1663.png

2025-06-30 17:20:58 UTC

Before I go ahead and add another instance to the Fediverse, is there any way to host multiple "home-domains" on a single installation?
#MastoAdmin

2025-06-12 18:48:51 UTC

- reply

https://www.cloudflarestatus.com/

2025-06-12 18:40:45 UTC

- reply

Cloudflare.

2025-05-12 18:11:24 UTC

If you're active within the #Cybersecurity sphere and would not hesitate to proclaim your love for RSS/Atom feeds, well then I may have something you'd be interested in.
https://www.cyberespresso.eu
I will "officially" open registrations for a closed beta at the end of May to those interested in joining. This is following an earlier alpha version that a few fedizens have actually tried including @npub1s6e…n008 and @npub1vtx…e7wk . (Trying it doesn't obviously mean they liked it!) ;-)
This is my personal solution to a long-standing issue I've had with more and more low-quality articles being pushed to even high-quality sources. But now I'm turning it into a full-blown SaaS-application (kind of) and specifically target cybersecurity individuals. Too many solutions are aimed at companies with multi-million dollar budget. This doesn't compete with that... but I'm pretty confident it will provide significant benefit and value to those of you trying to keep up-to-date with the daily RSS-feed flow.
I believe I've built something pretty decent and at least to the point where I feel I can rely almost entirely on my Cyber Espresso feeds to surface the "good" content.
#Beta #EarlyAccess #RSS #Atom

2025-05-07 14:28:40 UTC

Kagi Now supports Peertube results when searching for videos. I think that's quite a nice feature to allow more "exposure" of this alternative platform.
"Peertube integration! Peertube results now show up in regular searches, plus you can filter by "source" to see more Peertube content"
#Kagi #Search #PeerTube
@npub1zq5…dlp2

2025-04-10 05:32:40 UTC

The Rise of Slopsquatting: How AI Hallucinations Are Fueling a New Class of Supply Chain Attacks
https://socket.dev/blog/slopsquatting-how-ai-hallucinations-are-fueling-a-new-class-of-supply-chain-attacks?utm_medium=feed
> Slopsquatting is a new supply chain threat where AI-assisted code generators recommend hallucinated packages that attackers register and weaponize.
This was an excellent article covering an area that definitely has not gotten enough attention, especially coupled with Vibe Coding.
SlopSquatting... What an excellent name!
#Socket #SlopSquatting #Cybesecurity
https://media.swecyb.com/media_attachments/files/114/312/030/440/978/720/original/7bc028c7e79341f5.jpg

2025-04-02 18:57:31 UTC

- reply

Impractical, expensive, not especially user friendly. Sure they are secure, but there are so many other things (again, imho) that makes them not ideal to use for carrying user identities.
@npub1lcc…lcye

2025-04-02 18:13:45 UTC

- reply

I genuinely think that #Passkeys may be the first and only real solution in decades to have a chance at replacing the password/MFA issues.
It will work for individuals as well as organizations and their employees.
Until then we'll have to accept reality which is compromised private computers leaking credentials, and having enforced MFA will help in some instances.
Smart cards has never, imho, been a realistic solution to almost any organisations; ever.

2025-03-28 07:52:41 UTC

(sophos.com) Evilginx: How Attackers Bypass MFA Through Adversary-in-the-Middle Attacks https://news.sophos.com/en-us/2025/03/28/stealing-user-credentials-with-evilginx/
A short descriptive article about Evilginx and how stealing credentials work, a few suggested ways of detecting etc.
Summary:
This article examines Evilginx, a tool that leverages the legitimate nginx web server to conduct Adversary-in-the-Middle (AitM) attacks that can bypass multifactor authentication (MFA). The tool works by proxying web traffic through malicious sites that mimic legitimate services like Microsoft 365, capturing not only usernames and passwords but also session tokens. The article demonstrates how Evilginx operates, showing how attackers can gain full access to a user's account even when protected by MFA. It provides detection methods through Azure/Microsoft 365 logs and suggests both preemptive and reactive mitigations, emphasizing the need to move toward phishing-resistant FIDO2-based authentication methods.
#Cybersecurity #ThreatIntel #Evilginx #Phishing #Credentials #MFA #Azure #Sophos

2025-03-21 13:57:55 UTC

- reply

Yes, this can certainly be a challenge. I'm fortunate enough to be both in a position that enabled me to drop to 80% and also being able to afford it.
I'm fully aware that not everyone has the same opportunity as I do, and I often try to remind myself of this and be grateful for my luck of being born in a safe and secure country, and on top of that... a white male which just by nature gives me privileges others were not born with.
I try and be grateful, I really do!

2025-03-21 11:41:31 UTC

I'm a cybersecurity worker. A husband, also a father of two. Life really do appear to accelerate as you get older. That's also why I decided a while back to reduce my official working hours to 80% before it's "too late".
Each Friday I'm no longer "working". It has enabled me to get some very necessary mental space and calm. Unfortunately I have also noticed that stigma around mental health, especially amongst men.
You are not alpha if you don't work 24/7 and know everything. I wish that it was more acceptable and common that men admitted that they perhaps don't always feel on top of the world.
I guess this is a small step towards that perhaps?
#Cybersecurity #MentalHealth

2025-03-18 09:40:49 UTC

Sekoia: https://blog.sekoia.io/clearfakes-new-widespread-variant-increased-web3-exploitation-for-malware-delivery/
A few days ago Brian Krebs wrote about ClickFix, and now Sekoia has written a technical deep dive of said malicious framework.
In the Sekoia report they analyze the evolution of ClearFake, a malicious JavaScript framework that compromises legitimate websites to deliver malware through drive-by downloads. Since its emergence in July 2023, ClearFake has evolved from displaying fake browser updates to using sophisticated social engineering tactics called 'ClickFix' that trick users into executing malicious PowerShell code. The latest variant (December 2024-February 2025) uses fake reCAPTCHA or Cloudflare Turnstile verifications alongside technical issues to deceive users. ClearFake leverages the Binance Smart Chain through a technique called 'EtherHiding' to store malicious code, making it impossible to remove. The framework has infected thousands of websites and is actively distributing Lumma Stealer and Vidar Stealer malware.
https://krebsonsecurity.com/2025/03/clickfix-how-to-infect-your-pc-in-three-easy-steps/
@npub1vc3…axsh
[@sekoia_io](https://infosec.exchange/@sekoia_io )
#CyberSecurity #ClickFix #ThreatIntel

2025-03-17 21:48:51 UTC

It would appear as if Wiz may have discovered another supply-chain compromise:
https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup
The attack involved compromising the v1 tag of reviewdog/action-setup between March 11th 18:42 and 20:31 UTC. Unlike the tj-actions attack that used curl to retrieve a payload, this attack directly inserted a base64-encoded malicious payload into the install.sh file. When executed, the code dumped CI runner memory containing workflow secrets, which were then visible in logs as double-encoded base64 strings. The attack chain appears to have started with the compromise of reviewdog/action-setup, which was then used to compromise the tj-actions-bot Personal Access Token (PAT), ultimately leading to the compromise of tj-actions/changed-files. Organizations are advised to check for affected repositories using GitHub queries, examine workflow logs for evidence of compromise, rotate any leaked secrets, and implement preventive measures like pinning actions to specific commit hashes rather than version tags.
#CyberSecurity #SupplyChain

2025-03-12 20:51:14 UTC

- reply

And... we're back, with a larger toot size of 2000.
Now I feel almost compelled to write something longer than 500 only because I can, but I shan't take advantage of this newfound power of longer tooting.
Hooray for running an instance! Hooray for open source. Hooray for simple and trivial changes.
Hooray. For me.!

2025-03-12 20:49:14 UTC

I have made a change to #SweCyb and actually modified the instance to allow for toots larger than 500 characters (now max will be 2000).
While a minor change I do feel that sometimes the 500 limitation is frustrating and I'd like to remove that frustration.
Assets are being precompiled and then it's a system start to hopefully have a little bit more space for tooooooooting.

2025-03-04 19:58:25 UTC

- reply

If you perhaps remember the attack against TietoEvry in Sweden... there has been speculation that it was executed because of exactly this.
Attacker escaped from VM into the entire VMware cluster... which led to pretty much a full compromise of the entire datacenter.
Now it's NOT KNOWN whether this was the actual flaw that led to the successful attack, but it certainly is a very plausible (and viable) vector.

2025-03-04 14:56:22 UTC

- reply

this looks like some sort of grand world wide tragedy of the commons.
When will it stop? When everything has been pillaged and destroyed?!

2025-02-19 12:50:04 UTC

- reply

... and I just realized that before switching to nvim as my main editor, I used Sublime Text AND Merge.
I probably have a license around here somewhere... that's a good idea, I could use Sublime Merge for git management, and continue my nvim usage.
Thanks for reminding me about Merge 🙂

2025-02-19 12:48:12 UTC

- reply

Yeah, sorry... I should have made that clear.
I do have some basic "skills" in using git for local versioning, but because I also split my work between two computers I wanted to a reasonably simple way of getting the source code synced between devices using git. I have used syncthing previously but found myself more times than I'd like with some incomplete syncs between devices.
So the PRs is when i push to git, probably (very likely) incorrectly.

2025-02-19 10:28:54 UTC

I'm a complete noob when it comes to source code management through git (one developer only).
Are there any good "for dummies" resources with clear and systematic workflows for how a single developer can work?
I'm trying to wrap my head around "branching/committing" often, tags and what not.
Right now I'm doing something wrong because I'm getting PRs on my own repo, I don't get it.
Need to learn.
#Git #SourceCode #Single #Developer #Python

2025-02-13 14:14:22 UTC

If you're using Mastodon and rely on the Web client I highly recommend that you also install the "substitoot" plugin for your browser of choice.
It will automatically, in the background, fetch reply threads, boosts/favourites of toots to give you a more real-[time/view] of a thread even if your particular instance has not seen all the toots.
I have NOT checked the security of this plugin and do not vouch for it in that sense.
https://substitoot.kludge.guru
#Mastodon #Federation #Feditips

2025-01-30 16:53:03 UTC

- reply

haha... I feel I need to contribute.
I have seen Airwolf and ultimately feel qualified to assert that helicopters and airplanes should in fact attempt to avoid colliding.

2025-01-29 11:52:33 UTC

- reply

Which model did you use?

2024-12-20 06:30:17 UTC

Hot take: How about, for all these VPN products and firewalls, making it impossible (or very hard) to expose admin consoles on the WAN- interface?
There appears to be an abundant and reoccurring number or vulnerabilities in these parts, and given that we appear not to have solved SQLi and ../ weaknesses perhaps this would be a solution?
#CyberSecurity

2024-12-19 07:07:42 UTC

Huntress: https://www.huntress.com/blog/analyzing-initial-access-across-todays-business-environment
Thorough analysis of initial access and the distribution of various techniques. Exploitation of 0days, contrary to reporting is not an especially common technique but using stolen creds and logging in, however, is.
Good read for sure and certainly helps with prioritization of defensive countermeasures.
#CyberSecurity #ThreatIntel

2024-12-06 18:06:43 UTC

Pay for it Friday! Use this toot as an excuse to support your #Fediverse instance home. Perhaps that's #Mastodon, #Pixelfed or any of the other wonderful software projects enabling us all to communicate across platforms.
Setup a recurring donation, anything and everything really counts. I'm personally supporting Mastodon with a $20/monthly donation (and have done so since 2023!). In addition to running a Swedish cybersecurity instance.
Boost if you believe in the fediverse ideal. 🙂

2024-12-05 08:11:02 UTC

- reply

I intentionally did not attempt to define success (beyond what can be extrapolated from my poll-choices).
For the record, I too think that Mastodon has been very successful. But let's also be frank about it. Millions of users, where only a very tiny fraction contributes financially to the development of the platform.
Not to forget AP, how should that be supported?
I think Onboarding + Discovery is absolute KEY to the success of the network (platform).

2024-12-04 21:56:11 UTC

What will make Mastodon more successful?

2024-12-02 21:20:27 UTC

- reply

Yes, this! People keep talking about the "feeling" you get here... I can't put my finger on it, but I get superstressed when I viewed some of the "threads" on BSky. They feel so... random.
Here on the other hand there's a certain "familiarity". It may be entirely in my head, but I feel a bit more... I don't know, at home here.
There certainly has been quite a bit of talk about boosting the number of followers people have "over there". As if that is the purpose of the platform...

2024-12-02 19:54:11 UTC

Has #infosec and #cybersecurity Mastodon really moved to BSky? Let's get some numbers on this shall we?
(Please boost for science!)

2024-11-27 17:07:28 UTC

@npub1vc3…axsh genuine question. With BlueSky blowing up in users you could easily attract a significant following. And I'm going to assume that as a journalist exposure is important to get them dollars coming in.
What's stopping you from doing that? I know what Twitter became, and possibly might happen to BSky as well.
But how come you, so far, decided to stick around? :)
I mean, don't get me wrong, I love it that you are here... But still kind of surprises me in some ways.

2024-11-27 14:34:40 UTC

I really do like the Bluesky domain-handle. Anyone with insights into how "hard" that would be to implement in Mastodon?
I mean... if anything it could just be the display-handle. Guess I should spend some time looking into the ActivityProtocol for that.
#Mastodon

2024-11-17 21:50:31 UTC

I've done something of an experiment. In short: I've taken roughly 600 toots (past few days days) from the #CyberSecurity tag. Cleaned them up, categorised them (based on linked material), processed and analyzed them.
Today I published the CyberSunday edition, a summarized version of all events. All references are numbered and can be traced to source.
https://cstromblad.com/posts/cyber-sunday-week-46/
This is a work-in-progress, but I'm quite pleased with the results so far.
1/x

2024-11-13 13:57:46 UTC

- reply

Hey... well done 😄
The idea of high quality is certainly somewhat subjective. What I wanted to try and "get at" is companies, organizations, groups, or people doing original cyber security research.
Mandiant investigating a new intrusion-set and campaign.
Krebs breaking a news story about some new crazyness.
BushidoToken tracking new malicious infrastructure.
The basic premise, and idea, was to find those sources.

2024-11-12 22:21:24 UTC

Looking for help in crowdsourcing "high quality" cyber security related sources. Criteria for inclusion can be found in repository.
To get started I've added 88 sources I believe fulfill stipulated inclusion criteria. Please fork and send PR with other sources you believe should be included.
Aiming to create a reasonably authoritative list with sources not only parroting what others have already written/said.
https://github.com/cstromblad/cybersecurity_sources/tree/main
#Cybersecurity

2024-11-11 16:59:41 UTC

- reply

Will be interesting to see if there is a related uptick of ransomware attacks now that it's even more profitable...

2024-11-10 10:51:27 UTC

- reply

Syftet, i min värld, handlar om att få in fler meddelanden till instansen.
Det räcker inte med att en användare subbar till en given tagg. Det måste finnas Toots som servern har sett.
Jag vill helt enkelt ge mina användare (och mig själv) ett bättre flöde av potentiella meddelanden. Jag bryr mig inte om den federerade tidslinjen.
@npub1zww…wvjz @npub1z9j…gdsq

2024-11-10 09:35:40 UTC

- reply

Tack för tipset, har ansökt om relay-koppling mot Mastodon.nu 🙂

2024-11-10 09:17:28 UTC

Finns det några svenska #relay servrar att koppla upp mot för att öka federationen? Om inte så funderar jag på om det annars vore värt att sparka igång en ny VPS för det ändamålet.
Se till så att det finns en "bra" federation mellan svenska AP-instanser som kör t.ex. Mastodon eller Pleroma. Det ger åtminstone en administratör möjligheten att "förbättra" den federerade timelinen.
Tankar på det?

2024-10-22 19:04:24 UTC

- reply

Owner profile has installed app through Google Play. Trying to install through Private Space Google Play does not work.
But it should work?

2024-10-22 16:58:01 UTC

- reply

Actually there appears to be something about installing ProtonVPN under Private Space. Google Play complains about not being able to install the app.
Have tried experimenting with different permissions etc. But nope, doesn't work.

2024-10-11 18:28:18 UTC

This is ...I don't know, but a little bit funny. Fortinet is DIGGING DEEP into some Ivanti exploited vulnerabilities.
if only they could dig equally deep into their own shit.
https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa
#Fortinet #Ivanti #Vulnerabilities

2024-10-02 14:21:46 UTC

Woho! For the Federation, for independence, for liberty, for freedom, for nerdness, for ... because I can. Run Your Own Mail Server has arrived.
Let's go.! @npub1ksf…r6s6
Get the book here: https://www.tiltedwindmillpress.com/product/ryoms-ebook/
#Books #MastoBooks #MailServer #SMTP #Federation
https://swecyb.com/system/media_attachments/files/113/238/267/748/516/603/original/48eca61b1ff5d0f0.jpg

2024-09-22 04:53:31 UTC

Any #Cybersecurity people on threads that I should follow?
I heard rumours of full 2-way interoperability?

2024-09-08 13:19:53 UTC

#SilentSunday
https://swecyb.com/system/media_attachments/files/113/102/133/222/007/160/original/956d033a39c6dde6.jpg

2024-08-26 15:42:59 UTC

Leaving #Estonia and the very beautiful #Tallinn and some very excellent coffee. Really should come back for a longer visit, a few hours was all I could spare to visit.
Next time, at least a few days :)

2024-08-20 11:03:33 UTC

Consider me curious. Does anyone have insights into the ransomware ecosystem as it relates to payments made using other currencies besides BC?
Just read the Chainalysis article about ransomware payments, but nowhere (understandably so) do they mention that RaaS may also use Monero, Ethereum etc.
I'm just trying to understand potential shifts to these "alternative" currencies.
#ThreatIntel #Ransomware #CyberSecurity

2024-08-16 13:02:16 UTC

@npub1kwa…e0nj was, or is, Graphene affected by this:
https://iverify.io/blog/iverify-discovers-android-vulnerability-impacting-millions-of-pixel-devices-around-the-world

2024-08-14 20:16:24 UTC

- reply

... that... could yeah... be useful.
I was kind of thinking like a note next to the export of a mute. So that it's more closely connected with the actual mute/block whatever.
But yeah... perhaps that could work as an intermediate solution!

2024-08-14 19:11:47 UTC

It would be quite useful, when muting a user, that I could provide myself a note for future reference of why I muted the account in the first place.
#Mastodon #Features #Moderation #Tools

2024-08-04 14:46:52 UTC

#SilentSunday #Sweden #Lake #Sunset
https://swecyb.com/system/media_attachments/files/112/904/294/343/968/808/original/46b4d0c0d6528dc6.jpg