Danny Palmer

Cybersecurity writer.

Public Key

npub1krkezf5yzsrrqq6g0ykc3rza4w7k08gev2ycvspnc0tg2vcktrjspl63au

NIP-05 Address

dannyjpalmer@infosec-exchange.mostr.pub

Profile Code

nprofile1qqstpmv3y6zpgp3sqdy8jtvg33w6h0t8n5vk9zvxgqeu8459xvt93egpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dshnztlc

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1krkezf5yzsrrqq6g0ykc3rza4w7k08gev2ycvspnc0tg2vcktrjspl63au

Show more details

Last Notes

2025-11-06 13:28:57 UTC

“What’s most important is the security of our customer data, that’s non-negotiable...”
But how do you secure a £5.7 billion online retailer against cyber threats in the age of AI?
Well, my interview with Zalando CISO Florence Mottay on how she approaches this challenge has gone live over at The Stack.
Very interesting, if I do say so myself! Would love you to check this one out.
#cybersecurity
https://www.thestack.technology/zalando-ciso-florence-mottay-ai-security/

2025-04-10 21:18:11 UTC

A press mailing list quote on behalf of a cybersecurity CEO I just recieved in my inbox 'regarding the revocation of Chris Krebs’ security clearance' is, uh, something...
"There is a lot to this story that has not seen the light of day yet.
"This is an example of a security professional getting involved in politics and paying the price of picking sides rather than staying on mission.
"It's a message to the rest of the IC community to stay out of politics."
O_o

2025-03-06 17:44:17 UTC

They say the internet never forgets, but it turns out that basically all the work I did before 2016... isn't there anymore. 😬
I guess I need to hope that anyone reviewing my CV doesn't think I'm telling big lies about my experience!

2025-02-18 20:35:48 UTC

After almost two years in the role, I recently received the unfortunate news that my job as Head of Editorial for [well-known cybersecurity] company is being eliminated because of corporate realignment.
I'm really sad and still in shock tbh. And I also need to find another job now in order to pay to keep a roof over my head, I guess?
Not really sure what the future holds but before I was in the job I'm now no longer have, I was a cybersecurity journalist for many, many years at ZDNet ( a role which was also taken out from under me when the whole senior editorial team was eliminated by new owners... who went onto sell the site at a big loss) so hopefully I'm still remembered from that.
(Google doesn't remember me though, my knowledge panel isn't a thing anymore)
I know I'm rambling now, but yeah - editorial, content, writing, journalism, that's my thing. Hopefully someone out there in the tech/cyber space needs that? Please. 🥺
Additional: something that's already proving tricky is that I'm in the UK, when it feels like the job market in this space is not great at all.

2025-02-07 09:52:37 UTC

Seems not ideal...
“The loss of skilled cyber professionals to the private sector is leaving critical roles unfilled, weakening national defences against cyber attacks”, the report stated.
https://www.cityam.com/public-sector-pay-gap-threatens-uk-cyber-resilience/

2025-01-09 11:35:11 UTC

Not me, someone who has been reporting and writing about cybersecurity for over a decade having a meltdown because I can't figure out an IT problem on my new work laptop. (authentication loop, do'h)

2024-12-18 15:19:35 UTC

Hello! My new feature examining BEC attacks, #AI and deepfakes has just gone live today.
While old tricks are still effective - BEC attacks cost businesses billions a year - cyber scammers are finding new ways to harness AI and deepfakes to make attacks even harder to identify.
“Deepfake video is scary. I took 30 seconds of video from one of my YouTube videos; not only did it match my audio, it matched my mannerisms too... It’s moving away from ‘nobody would fall for that’ to ‘anybody would fall for that," @nprofile…tdld told me.
(Thank you so much for being part of this @nprofile…tdld, always a pleasure!)
#cybersecurity
https://darktrace.com/the-inference/the-new-face-of-fraud-ai-and-deepfakes-in-business-email-compromise-attacks

2024-12-05 13:13:34 UTC

- reply

@nprofile…d2rl I've seen some applications for a senior role in the comms team here. People with no experience of comms, no experience of cybersecurity and on the other side of the world applying!
You got to be in it to win it, but still, there's a limit. 😅

2024-11-20 12:02:42 UTC

What the Bluesky v Mastodon discourse feels like.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/515/176/241/765/585/original/763e3c5f73f488c3.mp4

2024-11-18 18:17:46 UTC

- reply

@nprofile…d2rl About ten years ago, I went on a press tour of [cutting edge auto racing brand] - there was a machine that was actually in a locked case because it was running on something like that but was so bespoke it was still required. 👀

2024-11-18 17:21:59 UTC

So, apparently Thames Water is still using IT systems from the 1980s, which doesn't seem very ideal or secure for a critical infrastructure operator in 2024.
“The software we use is older than me, and some of the hardware is older than my dad,” says Siddharth*. He is one of a team fighting a daily battle to sustain ancient IT infrastructure at Thames Water."
Then later...
"The use of Lotus Notes is a signal of how starved of investment technology at the company has been since it was privatised in the late 1980s. Other examples of obsolete or near obsolete technology include wide reliance on 2G technologies, arrays of meters that remain analogue and require manual checks, and hardware that is often more than 30 years old." #infosec
https://www.theguardian.com/business/2024/nov/18/thames-waters-it-falling-apart-and-is-hit-by-cyber-attacks-sources-claim

2024-11-04 15:41:10 UTC

- reply

I, a foreign outsider abroad, am anxious about this week, so God knows how all of you in the US feel.
I also can't get my head around the privilege anyone can have to just just avoid being 'political' with what's on the line.
Also like cybersecurity is dominated by straight white men* or something.
*I am aware I am also one of these btw lol.

2024-11-04 15:37:40 UTC

Over on cybersecurity Reddit, the mods are removing any 'political discussion'
"This subreddit is dedicated to technical topics, and we intend to keep it that way."
Because tech is never ever political in any way, right? 🤷‍♂️
https://www.reddit.com/r/cybersecurity/comments/1gj1l9g/zero_tolerance_for_political_discussions/

2024-10-29 15:29:56 UTC

"A profile on the VK platform’s dating site — *which states Rudometov had liked 89 other users and received no likes in return* — contains his cybercrime moniker “ghacking” in his main username. Pictures from his dating profile and other online accounts were also included in the criminal complaint."
oof, brutal. 👀
https://therecord.media/redline-infostealer-malware-criminal-complaint-maxim-rudometov

2024-10-16 17:43:20 UTC

- reply

@npub18c7…er9d ohh, interesting, thanks for the heads-up!

2024-10-08 10:50:35 UTC

Now, I'd like to think I know a little bit about what the rise of deepfakes could mean mean for cybersecurity. I've also known my friend Ian here for over 30 years (!) and we was one of the best men at my wedding.
However, I actually kind of struggled to tell the difference* between the real Ian and the fake Ian, which is somewhat worrying, given all of the above. We seem to be entering an era where telling real from fake is getting harder - and that has consequences for everyone. #AI #cybersecurity
*This could perhaps be attributed to the recently diagnosed autism (at 38 lol), but still, just a bit concerning!
https://www.icaew.com/insights/viewpoints-on-the-news/2024/oct-2024/i-deepfaked-myself-it-was-terrifyingly-easy

2024-09-06 10:11:33 UTC

- reply

@npub17lg…9uux Props to them for being somewhat open about this! Other councils have previously tried to just.. not talk about anything.

2024-09-06 08:29:13 UTC

- reply

@npub1y5h…7m3c Well, it is almost spooky season.

2024-08-13 15:53:20 UTC

In the market for a new gaming PC monitor. Seems the cool kids are all using curved screens these days. Any suggestions? (My budget is not unlimited)

2024-08-04 09:30:01 UTC

Appropriate time to touch down for a hacker conference, isn't it? See you on the other side. #BHUSA
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/903/045/322/263/318/original/18c5712a43cdf620.jpg

2024-07-30 11:40:51 UTC

Nothing is sacred anymore. :(
"They wanted to look at other partners and NFTs and esports," Lee Cocker, who worked on almost every entry in the series, told Eurogamer. "Basically the IOC wanted to bring [it] back to themselves internally and look at other partners so they would get more money."
https://www.eurogamer.net/olympics-ditched-mario-sonic-series-to-explore-nfts-and-esports

2024-07-19 08:37:22 UTC

- reply

@npub1y5h…7m3c A Crowdstrike Kink, you say? (I mean, Rule 34 and all that)

2024-07-16 10:47:21 UTC

A thing I've done this morning:
Slid into the DMs of an arm of the US military. Let's see how this goes, eh?

2024-07-08 10:06:07 UTC

Important news: Built my new computer desk over the weekend, you guys. :ablobcatneon:

2024-06-13 08:40:46 UTC

- reply

@npub17lg…9uux Hmm, I wonder how the US would react if products made in another country were built with this 'tool' inside. 👀

2024-05-08 16:01:00 UTC

- reply

@npub1y5h…7m3c Currently on second runs of Baldur's Gate III and Disco Elysium. Very rarely do that. 👀

2024-04-24 14:11:32 UTC

F1 x Tech news.
Ferrari announces HP as new F1 team title sponsor
The Ferrari Formula 1 team and American technology giant HP have signed a landmark, long-term title sponsorship deal.
https://www.autosport.com/f1/news/ferrari-announces-hp-as-new-f1-team-title-sponsor/10602728/

2024-04-09 17:51:01 UTC

Peter Higgs, physicist who discovered Higgs boson, dies aged 94
https://www.theguardian.com/science/2024/apr/09/peter-higgs-physicist-who-discovered-higgs-boson-dies-aged-94

2024-04-02 10:29:55 UTC

Me, returning to infosec feeds and seeing what missed while I was ignoring the news for most of the Easter Bank Holoday weekend.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/201/150/597/859/611/original/a214442d02652e77.png

2024-03-17 12:48:31 UTC

Some cyberpunk spray paint art to enjoy this Sunday.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/111/100/026/075/716/original/727d9043b44c25d0.jpeg

2024-03-05 11:56:08 UTC

I keep getting promoted ads for joining RAF Intelligence on Reddit of all places.
Give my sight is so poor I get free eye tests, I don't think I should be the eyes for anyone, let alone the military, thanks. 🫠
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/042/941/817/425/927/original/03ee0161c961b0cb.jpg

2024-03-03 11:50:22 UTC

- reply

@npub17lg…9uux I remember back when I first downloaded Counter-Strike and I had to ask the rest of my family if it was okay to block up the internet for the hours, possibly entire day it took to download. 😆

2024-02-08 11:55:08 UTC

I very much approve of this.
Baldur's Gate 3 player completes the game while playing as a party of cats. #baldursgate3
https://www.pcgamer.com/baldurs-gate-3-player-completes-the-game-while-playing-as-a-party-of-cats/

2024-02-05 17:24:12 UTC

- reply

@npub1jc0…sldg Absolutely love the Brawn livery. 😁

2024-02-05 15:06:25 UTC

Edge is ‘stealing’ Chrome tabs from some users
https://www.pcworld.com/article/2223228/microsoft-edge-is-stealing-chrome-tabs-for-some-users.html
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/879/487/530/853/280/original/265de8bc90a0ec4b.jpg

2024-01-31 11:52:40 UTC

People who download a copycat version of a game which uses assets that are suspiciously similar to those of another well-known game franchise could lead to personal data being stolen. 👀
https://www.eurogamer.net/palworld-warns-of-app-store-clone-that-could-risk-your-personal-data

2023-11-21 09:41:34 UTC

- reply

@npub17lg…9uux Ah yes, rich men, truly the world's most oppressed people. 🤣

2023-11-15 20:16:21 UTC

You know, Steam, I'm not sure Football Manager and Crusader Kings are that similar.
Yes, they are both strategy, but I don't think I can get solve problems in FM, like I can in Crusader Kings.
'Another manager is frustrating me by blocking my transfer... have him disappear' 👀
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/416/388/121/579/698/original/30d8bfafc0ae51b4.png

2023-11-08 22:51:16 UTC

- reply

@npub17lg…9uux That cat is FAR more chilled out than I would be in that situation. 😅

2023-10-25 10:45:47 UTC

Learn to Code says, uh, The Pope.
'Mr Mironiuk will meet the Pope at the Vatican. But he admits he's not anticipating the pontiff to emulate his students in acquiring new skills.
"I don't expect him to know Python very well, at least," he said. "But he will get a certificate for his efforts in helping start the programme."
https://www.bbc.co.uk/news/technology-67209806

2023-10-17 15:25:12 UTC

This looks like it's XCOM but based around heists and hacking.
Sign me up. 😁
https://store.steampowered.com/app/1021210/Cyber_Knights_Flashpoint/

2023-10-05 09:59:01 UTC

Once again, it feels like one of the key reasons he's doing what he's doing to Twitter is because he just doesn't like journalists, the media, or any other of the prominent usergroups that are strongly critical of him.
Still find it weird how the literal richest man in the world can bang on about 'elites' when it's extremely rare for journalists to be affluent.
It's a poorly paid career path where nobody likes you!
(Fortunately I was not high profile enough to find myself regularly in the crosshairs of the haters!)
https://www.theguardian.com/technology/2023/oct/05/x-twitter-strips-headlines-new-links-why-elon-musk

2023-09-06 09:16:06 UTC

Mozilla Foundation research details how moder, internet-connected cars are a "privacy nightmare" because of the data collected by trackers, cameras, microphones, and sensors.
"All 25 car brands we researched earned our *Privacy Not Included warning label -- making cars the official worst category of products for privacy that we have ever reviewed."
'Highlights' include Nissan collecting data on your, uh, sexual activity.
#privacy #security
https://foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/

2023-09-02 21:07:20 UTC

CM Punk has been fired by AEW! The drama! #AEW
https://wrestlingnews.co/aew-news/cm-punk-fired-by-aew

2023-08-17 11:30:07 UTC

- reply

@npub17lg…9uux I kind of put myself on it when I was laid off from my previous job.
I was offered my current job the day before I was let go. Due to my time there I got 2 months worth of severance pay - and given that would have been my notice period if I'd left of my own volition I decided to spend two months just chilling out as who knows when that will happen again. It was great. (I played A LOT of F1 Manager!)

2023-08-04 22:13:54 UTC

- reply

Update: Bought it and it's about to finish downloading. But as it's almost midnight, I'll be waiting 'til tomorrow to sink my teeth into this. 👀

2023-08-04 13:43:45 UTC

One the one hand, Baldur's Gate 3 looks very good and VERY big.
But on the other hand I've been playing Final Fantasy XIV for pushing towards three years at this point and I've still got two more expansion packs to get through, let alone all the side stuff.
Hmm, decisions, decisions... #baldersgate3 #FFXIV #gaming

2023-08-02 10:37:09 UTC

Just look at the absolute rubbish the bird site is pushing as ads. These promoted posts for Crypto scams are relentless.
A link to a fake BBC article, full of made up quotes.
Pushed by a paid blue tick, of course!
https://media.infosec.exchange/infosecmediaeu/media_attachments/files/110/819/577/337/472/088/original/9986ae906ac7f0d7.png
https://media.infosec.exchange/infosecmediaeu/media_attachments/files/110/819/579/636/102/636/original/62f1cb6988f43f03.png

2023-07-29 14:52:11 UTC

Unfortunately for me, this beer at the beer festival was sold out. At least people are using Two Factor Authentication, I suppose. 😄
https://media.infosec.exchange/infosecmediaeu/media_attachments/files/110/797/931/318/322/866/original/5254f80dfd073ec3.jpg

2023-07-23 14:38:06 UTC

#F1 post: Really, really need someone to step up and challenge Max Verstappen - it's so boring just seeing him streak into the distance from lap one every race and know the win is inevitable.
Not even his teammate can keep up. Althouhh not like Red Bull would let Perez fight Verstappen anyway. 🤷‍♂️ #hungariangp

2023-06-26 14:06:07 UTC

Formula E team caught using RFID scanner that could grab live tire data from other cars. 👀
The DS Penske team was fined €25,000 after it surreptitiously installed an RFID scanner at the entrance to the pit, which the FIA stewards said could collect data from other race cars and give them an advantage.
"The Stewards were advised by the Technical Delegate that the competitor had installed RFID scanning equipment in the pit lane entry this morning that was able to collect live data from all cars. Firstly, it is forbidden in general for competitors to install or place any equipment in the pit lane. Secondly, the collection of data by this method gives the competitor a lot of information, which is a huge and unfair advantage. Taking all the circumstances together, the Stewards feel that the given penalty is appropriate."
https://www.theverge.com/2023/6/24/23772725/formula-e-ds-penske-rfid-tire-data-wireless-scanner