Catalin Cimpanu

Cybersecurity reporter for Risky Business

#infosec #cybersecurity #security

Public Key

npub1tqfukrqgh928vktkl6vx063ck2c4yn3ek8m44v3txfhztqe65anq63aefw

NIP-05 Address

campuscodi@mastodon-social.mostr.pub

Profile Code

nprofile1qqs9sy7tpsytj4rkt9m0axr8agut9v2jfcumra66kg4nym39sva2wespz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds50z7ck

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1tqfukrqgh928vktkl6vx063ck2c4yn3ek8m44v3txfhztqe65anq63aefw

Show more details

Last Notes

2026-05-09 23:43:44 UTC

A new botnet operation is hacking into Jenkins servers to deploy DDoS malware that attacks game servers
https://www.darktrace.com/blog/darktrace-malware-analysis-jenkins-honeypot-reveals-emerging-botnet-targeting-online-games

2026-04-30 18:18:20 UTC

The Nobel Peace Prize nomination list is out... and I'm not on it!
What the hell! You are the worst followers ever! You don't support me at all!!!!!!!!!!!!!!! 😭😭😭😭😭😭😭😭😭😭😭
https://files.mastodon.social/media_attachments/files/116/495/025/490/319/694/original/96a65d74c32e2837.png

2026-04-23 01:48:18 UTC

The world is so stupid these days
https://news.bitcoin.com/a-hair-dryer-may-have-gamed-a-paris-weather-sensor-for-34000-on-polymarket/
https://files.mastodon.social/media_attachments/files/116/451/499/081/637/305/original/c600632325765bab.png

2026-04-11 19:53:33 UTC

Bitcoin miners have entered the red as it now costs $88,000 to mint a $69,000 bitcoin
https://www.coindesk.com/markets/2026/03/22/bitcoin-miners-are-losing-usd19-000-on-every-btc-produced-as-difficulty-drops-7-8

2026-04-09 13:14:13 UTC

The Claude.md file can be abused for malicious operations
https://layerxsecurity.com/blog/vibe-hacking-claude-code-can-be-turned-into-a-nation-state-level-attack-tool-with-no-coding-at-all/
https://files.mastodon.social/media_attachments/files/116/374/926/152/634/247/original/035e2abd394fd77e.png

2026-04-04 23:46:26 UTC

The US Army has reduced the frequency of mandatory cybersecurity training from once a year to once every five years
https://defensescoop.com/2026/03/31/army-cybersecurity-training-policy-change/

2026-03-26 20:53:22 UTC

EU Chat Control vote fails again
https://howtheyvote.eu/votes/189270

2026-03-26 10:24:23 UTC

Kaspersky ties Operation Triangulation to Coruna exploit kit
https://securelist.com/coruna-framework-updated-operation-triangulation-exploit/119228/

2026-03-26 01:26:35 UTC

The EU and Chat Control is like a toddler insisting they want to touch the hot stove
#nevent1q…el5h

2026-03-22 10:45:19 UTC

A popular open-source vulnerability scanner (Trivy) was compromised last week in a supply chain attack
https://www.aquasec.com/blog/autonomous-runtime-security-turning-runtime-intelligence-into-agentic-response-2/
https://www.aikido.dev/blog/teampcp-deploys-worm-npm-trivy-compromise
https://github.com/aquasecurity/trivy/discussions/10425
https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise
https://www.stepsecurity.io/blog/trivy-compromised-a-second-time---malicious-v0-69-4-release
https://www.wiz.io/blog/trivy-compromised-teampcp-supply-chain-attack
https://www.crowdstrike.com/en-us/blog/from-scanner-to-stealer-inside-the-trivy-action-supply-chain-compromise/

2026-03-20 22:18:15 UTC

Android will require a 24-hour wait before sideloading apps
https://android-developers.googleblog.com/2026/03/android-developer-verification.html

2026-03-19 17:49:49 UTC

Japan will begin to carry out offensive cyber operations in October this year.
The ruling Cabinet approved the law after evaluating its conformity with the country's constitutional principles of non-aggression.
https://www.nippon.com/en/news/yjj2026031701011/

2026-03-19 14:46:22 UTC

Palo Alto takes another look at how threat actors are using AI for their malware operations
The conclusion is that many groups are still at the experimentation phase, with samples showing "superficial and ultimately ineffective use of LLMs as AI theater"
https://unit42.paloaltonetworks.com/ai-use-in-malware/

2026-03-19 00:07:56 UTC

Malicious Chrome extension brings its own JS interpreter to bypass Chrome's MV3 limitations
https://www.okta.com/blog/threat-intelligence/disrupting-shieldguard--a-security-extension-primed-to-drain-cry/
https://files.mastodon.social/media_attachments/files/116/252/923/495/673/166/original/fdf43f87e8da13ca.png

2026-03-05 10:20:22 UTC

My oh my... I hope they didn't store all their cyberz and computers in the same building /s
https://www.politico.com/news/2026/03/04/israel-iran-cyber-headquarters-00813364
https://files.mastodon.social/media_attachments/files/116/176/058/806/778/869/original/5f8ab52559b044f2.png

2026-03-05 09:55:59 UTC

Microsoft postpones its BlueHat Israel security conference, initially scheduled for next week
https://www.microsoftrnd.co.il/bluehatil/home

2026-03-03 13:54:04 UTC

An analysis of procurement documents reveal that China is pushing for the integration of AI tools into its military, intelligence, and cyber operations
https://www.foreignaffairs.com/china/chinas-artificial-intelligence-arsenal

2026-03-03 01:40:15 UTC

There's an Android zero-day getting patched this month:
https://source.android.com/docs/security/bulletin/2026/2026-03-01

2026-03-01 14:03:53 UTC

"A week-long automated attack campaign targeted CI/CD pipelines across major open source repositories, achieving remote code execution in at least 4 out of 5 targets"
👀👀👀👀👀
https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation

2026-03-01 10:37:03 UTC

Don't know what to make of this vague report on Israel carrying out the "largest cyberattack in history" agaisnt Iran
https://www.jpost.com/israel-news/defense-news/article-888271

2025-12-18 10:18:55 UTC

Sweet... a SonicWall zero-day to go with that Cisco zero-day right before your Xmas holiday
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019

2025-12-01 19:57:37 UTC

India has ordered smartphone makers to pre-install the government's Sanchar Saathi app.
The app is available for Android and iOS and allows users to report fraud and spam.
https://www.pib.gov.in/PressReleasePage.aspx?PRID=2197140&reg=3&lang=2

2025-11-03 09:30:06 UTC

-Norway finds remote control features in its Chinese electric buses
-CyberCorps program freeze threatens students with huge loans
-Chrome gets a scareware blockers
-Conti member extradited to US
-BlueSky to test dislike button
-arXiv will block AI slop in its computer science cateogry
-Iranian hackers leak Israeli defense contractor data
-Garden hacked for $10.8m
-CFPB ends Meta investigation
Newsletter: https://news.risky.biz/risky-bulletin-norway-skittish-of-its-chinese-electric-buses/
Podcast: https://risky.biz/RBNEWS499/
https://files.mastodon.social/media_attachments/files/115/485/055/658/214/796/original/666c8e5d5f5f7e0d.png

2025-11-02 17:54:13 UTC

A Canadian couple has lost CAD$1 million (USD$710,000) to online scammers.
The couple, in their 70s, fell victim to a tech support scam that showed error messages on their laptop and then got daily calls from the scammers until they ran out of money
https://www.ctvnews.ca/toronto/consumer-alert/article/were-devastated-ontario-seniors-give-away-more-than-1-million-to-scammers/

2025-10-21 12:41:43 UTC

I must be the only person on the internet that wasn't affected in the slightest by yesterday's AWS outage
#lonely #leftout #uncool

2025-10-19 17:57:21 UTC

Cloud data management company Rubrik has found traces of the Brickstorm backdoor inside its customers' backups.
Brickstorm is the backdoor planted inside networks hacked by a Chinese cyber-espionage group.
https://zerolabs.rubrik.com/blog/unmasking-the-invisible-hunting-and-defeating-edr-evading-threats-like-brickstorm

2025-10-19 17:06:49 UTC

This stupid Daily Mail article is basically "we're all gonna die in a nuclear war because some ransomware group hacked a small government contractor"
wow!
https://www.dailymail.co.uk/news/article-15205213/Russians-hack-files-EIGHT-MoD-bases-dark-web.html

2025-10-19 11:45:35 UTC

"China's State Security Ministry accused U.S. intelligence of prolonged attacks on the National Time Service Center. It found evidence of stolen data and credentials tracing back to 2022, used to spy on staff devices."
https://moderndiplomacy.eu/2025/10/19/nsa-accused-of-stealing-secrets-from-chinas-national-time-centre/

2025-10-19 10:52:59 UTC

Ten....
Ten is the number of PR people who have reached out this month to ask me why I'm not covering their clients, when their customers block site scraping and don't have an RSS feed
It's the 19th. That means one PR person every 2 days writes to me to whine about shooting themselves in the foot

2025-10-16 17:02:30 UTC

The Tor Browser will remove all of the Firefox AI features that Mozilla has been recently adding
https://blog.torproject.org/new-alpha-release-tor-browser-150a4/

2025-10-13 20:41:38 UTC

Mozilla has started the development of a free VPN feature for Firefox users.
This will be a separate product from Mozilla VPN, the company's commercial OS-level VPN.
https://connect.mozilla.org/t5/discussions/new-experiment-firefox-vpn-beta/m-p/107509
https://files.mastodon.social/media_attachments/files/115/368/794/286/773/411/original/53035a2763d120c7.png

2025-10-12 20:21:08 UTC

Microsoft published last week a dedicated page for recommended Intune security configurations
https://learn.microsoft.com/en-us/intune/intune-service/protect/zero-trust-configure-security

2025-10-12 15:54:30 UTC

Clop's extortion streak:
Accellion FTA platform (2020)
SolarWinds Serv-U FTP (2021)
GoAnywhere MFT platform (2023)
MOVEit Transfer (2023)
Cleo file transfer (2024)
E-Business Suite (2025)
via: https://www.orangecyberdefense.com/global/blog/cert-news/google-details-clop-extortion-campaign-leveraging-0-day-in-oracle-e-business-suite

2025-10-12 14:32:58 UTC

Trend Micro's ZDI has reported 13 vulnerabilities in the Ivanti Endpoint Manager that are still unpatched after the vendor requested an extension until March next year
https://www.zerodayinitiative.com/advisories/published/

2025-10-12 12:32:47 UTC

Spain has arrested the person behind the GXC phishing service.
Per authorities, the guy was living in Spain under a digital nomad visa and was constantly moving between different homes across the country
https://web.guardiacivil.es/es/destacados/noticias/La-Guardia-Civil-desmantela-una-red-de-phishing-bancario-y-detiene-al-principal-desarrollador-de-kits-de-robo-de-credenciales-en-Espana/
https://files.mastodon.social/media_attachments/files/115/361/205/240/742/732/original/fcb5930dc26ba45a.png

2025-10-12 09:48:02 UTC

Telegram founder and general a-hole Pavel Durov, who's IM network hosts hundreds of groups where info-ops coordinate their activity and pay for content, is annoyed that democracies are fighting back against the damage he, personally, has helped usher in in many autocratic regimes
https://files.mastodon.social/media_attachments/files/115/360/558/931/075/320/original/00670d141b9fbdda.png

2025-10-11 23:04:12 UTC

This is a neat question from a recent Sophos survey
https://news.sophos.com/en-us/2025/10/08/the-state-of-ransomware-in-healthcare-2025/
https://files.mastodon.social/media_attachments/files/115/358/030/305/081/460/original/4d872fcc6b778c00.png

2025-10-10 08:45:57 UTC

-EU scraps Chat Control vote
-Ukraine establishes a Cyber Force
-CISA workers reassigned to immigration enforcement
-Teenagers arrested for Kido hack
-Salesforce will not pay the ransom
-US Court halts FCC data breach rules
-California enacts tracking opt-out law
-China cleanses its internet of bad feelings
-All MySonicWall customers impacted by recent breach
-Discord breach impacted only 70k
-Kasatkin case starts in France
Newsletter: https://news.risky.biz/risky-bulletin-eu-scraps-chat-control-vote/
Podcast: https://risky.biz/RBNEWS489/
https://files.mastodon.social/media_attachments/files/115/348/982/815/983/628/original/ccb2dd5cdb5f1367.png

2025-10-09 17:58:41 UTC

Here's the German government's statement on not supporting Chat Control, calling it a "taboo for the rule of law."
https://www.bmjv.de/SharedDocs/Zitate/DE/2025/1008_Chatkontrolle.html

2025-10-09 17:57:35 UTC

Is Google gonna return just BleepingComputer links for every infosec term now? Did all the other sites die out?

2025-10-09 16:35:23 UTC

PAN's Unit42 looks at IUAM ClickFix Generator, a new phishing kit designed around using ClickFix-based phishing pages.
https://unit42.paloaltonetworks.com/clickfix-generator-first-of-its-kind/
https://files.mastodon.social/media_attachments/files/115/345/176/628/338/298/original/1771f9c091ed9b30.png

2025-10-09 15:54:50 UTC

Trend Micro says that a botnet named RondoDox that launched earlier this year has grown to a massive size and is now exploiting more than 50 vulnerabilities across 30+ different vendors
https://www.trendmicro.com/en_us/research/25/j/rondodox.html

2025-10-09 14:00:18 UTC

Looks like California has learned something from the EU Cookie Banner disaster
https://therecord.media/california-signs-law-opt-out-browsers
https://files.mastodon.social/media_attachments/files/115/344/565/546/657/200/original/bedfa874c0eba43a.png

2025-10-09 10:58:29 UTC

Azure outage on the way?
https://azure.status.microsoft/en-gb/status?_=07:40%20UTC%20on%2009%20Oct%202025
https://files.mastodon.social/media_attachments/files/115/343/852/037/330/053/original/6d38c604de8f29a6.png

2025-10-09 10:29:15 UTC

How many AI browsers need to fail before these companies get the note?

2025-10-07 16:47:22 UTC

Looks like Firefox is getting a profile manager in v144, next week
https://blog.mozilla.org/en/firefox/profile-management/

2025-10-07 15:42:38 UTC

CryptPad, Element, Tuta, and 40 other EU tech companies have signed an open letter against the EU's Chat Control proposal
https://blog.cryptpad.org/2025/10/07/open-letter-against-chat-control/
https://element.io/blog/element-signs-chat-control-open-letter/
https://tuta.com/blog/open-letter-against-chat-control

2025-10-07 15:25:44 UTC

Per this report, the Iranian government managed to block or throttle a large number of censorship circumvention tools during its June internet shutdown, during the short war with Israel
https://miaan.org/report-on-irans-blackout-of-the-global-internet/
https://files.mastodon.social/media_attachments/files/115/333/578/258/252/959/original/4260d98ab45d81a5.png

2025-10-07 14:57:21 UTC

There's never been a better year to be a North Korean crypto-hacker
https://www.elliptic.co/blog/north-korea-linked-hackers-have-already-stolen-over-2-billion-in-2025
https://files.mastodon.social/media_attachments/files/115/333/466/679/204/818/original/f753060b2fa2085b.png

2025-10-07 12:42:02 UTC

The Oracle zero-day... kek
https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/
https://files.mastodon.social/media_attachments/files/115/332/933/712/169/399/original/372eaa35b6b5aa57.png

2025-10-07 11:09:15 UTC

eSentire released Surveyor, a Windows kernel analysis and system profiling tool
https://github.com/eSentire-Labs/surveyor

2025-10-06 08:45:19 UTC

-Steam, Microsoft address games affected by major Unity bug
-Discord discloses data breach
-Gmail rolls out E2EE
-Apple and Google block ICE tracking app
-US Courts stonewalls Congress on recent hack
-US Air Force breach
-Renault UK hack
-Oracle links extortion campaign to recent vulnerability
-Salesforce denies new hack
-LinkedIn sues another web scraper
-New A2AS standard for AI
-Signal adds SPQR support
Newslettter: https://news.risky.biz/risky-bulletin-microsoft-tells-users-to-uninstall-games-affected-by-major-unity-bug/
Podcast: https://risky.biz/RBNEWS487/
https://files.mastodon.social/media_attachments/files/115/326/328/720/423/544/original/b47a95d365055648.png

2025-10-05 16:15:00 UTC

WhatsApp worm (SORVEPOTEL) deploys an infostealer that targets financial institutions and crypto exchanges in the Brazilian market
https://www.trendmicro.com/en_us/research/25/j/self-propagating-malware-spreads-via-whatsapp.html

2025-10-05 15:17:45 UTC

Gary Warner looks at "the Four Great Families" that ran most of the scam compound operations in Myanmar's Kokang region: https://garwarner.blogspot.com/2025/10/scam-compound-operators-members-of-four.html
China sentenced members from each family last week, with some receiving death sentences: https://news.risky.biz/risky-bulletin-scam-compound-operators-sentenced-to-death-in-china/

2025-10-05 11:45:57 UTC

AWS, Azure, and GCP are holding a joint cloud-hacking contest under the name of ZeroDay Cloud.
The contest will be held at Black Hat Europe this December.
Prizes will go up to $300,000 for certain vulnerabilities.
https://www.zeroday.cloud/

2025-10-05 11:11:57 UTC

I've finally understood that stupid American Eagle and Sydney Sweeney drama after someone explained it to me like I was 5:
https://blog.openmeasures.io/p/outrage-over-american-eagles-great

2025-10-04 22:33:26 UTC

New Mic-E-Mouse technique turns your optical mouse into a microphone that records conversations
https://sites.google.com/view/mic-e-mouse

2025-10-03 08:42:15 UTC

-Scam compound operators sentenced to death in China
-Red Hat got hacked and extorted
-UK makes new request for Apple user data
-Signal threatens to leave EU
-APT35 has another leak
-Microsoft launches a Security Store
-Outlook blocks inline SVGs
-Chrome 141 is out with security goodness
-Google Drive gets ransomware protection
-Cyberattack recovery is hard for UK schools
-EU MPs angry over spyware funding
Newsletter: https://news.risky.biz/risky-bulletin-scam-compound-operators-sentenced-to-death-in-china/
Podcast: https://risky.biz/RBNEWS486/
https://files.mastodon.social/media_attachments/files/115/309/328/715/453/358/original/adbdd787baed1544.png

2025-09-10 08:49:42 UTC

-US charges major ransomware figure
-White House to keep CyberCom and NSA dual role
-Apple ships "always-on" memory safety protection feature
-another massive supply chain attack hits the npm world
-Vietnam mega-breach
-Jeremy Clarkson's farm hacked
-Ransomware hits K Club before Irish Open
-SwissBorg hacked for $41mil
-Nemo Protocol hacked for $2.4mil
-Plex resets passwords after breach
-Tor VPN now available
Podcast: https://risky.biz/RBNEWS476/
Newsletter: https://news.risky.biz/risky-bulletin-us-charges-major-ransomware-figure/
https://files.mastodon.social/media_attachments/files/115/179/139/875/603/699/original/55b126572d15b1e6.png

2025-08-17 16:20:39 UTC

Mozilla warns that the German Federal Supreme Court is close to ruling that ad blockers are illegal
https://blog.mozilla.org/netpolicy/2025/08/14/is-germany-on-the-brink-of-banning-ad-blockers-user-freedom-privacy-and-security-is-at-risk/

2025-08-12 20:01:06 UTC

Poland's data protection agency has fined McDonald's Poland almost €4 million for leaking employee personal data
This is the second-largest GDPR fine handed out by Polish authorities
https://uodo.gov.pl/pl/138/3827

2025-08-10 19:55:38 UTC

CrediX DeFi platform vanishes after $4.5 million hack, deletes socials and takes website offline
https://www.theblock.co/post/366159/credix-team-vanishes-after-4-5-million-exploit-deletes-socials-and-takes-website-offline

2025-07-31 18:11:09 UTC

CISA has released Thorium, a malware analysis platform
https://www.cisa.gov/resources-tools/resources/thorium
Also on GitHub: https://github.com/cisagov/thorium

2025-07-30 08:26:20 UTC

-Aeroflot cancels flights after hack
-Flights also canceled in Luxembourg in separate hack
-Kazakhstan arrests ransomware suspect
-Kyrgyzstan nationalizes internet access
-US seizes Chaos ransomware funds
-Orange got hacked
-Tea app breach also involved private messages
-Malware found in Endgame Gear mice
-Ransomware group hacks RTE and Albavision broadcasters
-Data brokers ignore data deletion requests
Podcast: https://risky.biz/RBNEWS458/
Newsletter: https://news.risky.biz/risky-bulletin-us-seizes-chaos-ransomware-funds/
https://files.mastodon.social/media_attachments/files/114/941/218/715/856/288/original/a0962387e02d4532.png

2025-07-29 10:25:10 UTC

Congratulations to another infosec vendor who nuked their RSS feed and all their research for the past months went into a black hole
F***ing genius marketers!

2025-07-27 19:26:52 UTC

France's ship and submarine maker (Naval Group) allegedly got hacked
There's a supposed leak on that new BreachForums clone that popped up last week
https://www.telegraph.co.uk/business/2025/07/27/french-submarine-maker-targeted-by-hackers/

2025-07-10 11:56:56 UTC

French law enforcement authorities arrested a Russian professional basketball player at the request of the United States, where he is wanted for allegedly taking part in a ransomware hacking ring, a Paris court heard Wednesday.
https://www.themoscowtimes.com/2025/07/10/russian-basketball-player-arrested-in-france-at-request-of-united-states-a89756

2025-07-03 11:17:15 UTC

Hunters International ransomware shuts down operation and releases free decryption keys
Via 3xp0rt: https://x.com/3xp0rtblog/status/1940690461624357144
https://files.mastodon.social/media_attachments/files/114/789/019/265/212/541/original/2326586af7b9d1d1.png

2025-07-01 10:57:00 UTC

A group of Pakistani freelance web developers are behind a network of websites advertising cracked software.
Security firm Intrinsec says the group has built hundreds of websites over the past four years, most likely for a third-party.
https://www.intrinsec.com/pakistani-freelancers-building-cracking-websites-for-stealer-delivery/
https://files.mastodon.social/media_attachments/files/114/777/613/271/021/963/original/5ddc90edeebaace6.png

2025-06-17 12:35:15 UTC

"The sitecore\ServicesAPI user has a password hard-coded to b"
https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/
https://files.mastodon.social/media_attachments/files/114/698/728/915/510/391/original/4fe32aa32f67fd55.png

2025-05-31 12:31:35 UTC

Fun times ahead for Pegasus customers
Israeli ambassador to Spain threatens to use Pegasus data seized from NSO to attack Spanish government
"Mi Gobierno aún no ha respondido con revelaciones de Pegasus"
"My Government has not yet responded with Pegasus revelations"
https://www.elespanol.com/espana/politica/20250527/embajador-israel-funciones-advierte-gobierno-no-respondido-revelaciones-pegasus/1003743774464_0.html

2024-09-11 16:16:18 UTC

watchTowr are on top of their meme game this week
https://files.mastodon.social/media_attachments/files/113/119/812/806/473/259/original/ee98751508081652.png

2024-08-30 11:46:13 UTC

Elon Musk: We're modifying the algorithm to surface tweets from smaller accounts
The accounts:
https://files.mastodon.social/media_attachments/files/113/050/803/376/456/241/original/4fda4f51ec1b9b3c.png

2024-08-10 22:31:15 UTC

- reply

@npub104g…8993 what were the lessons again? 😁

2024-07-26 15:37:06 UTC

Happy one-week anniversary, CrowdStrike customers!

2024-06-21 13:40:10 UTC

- reply

@npub14fa…99fr Weeeeeeell... knowing the US legal system, "incalculable" is probably $3/person

2024-05-27 23:20:23 UTC

Thanks to that stupid EU cookie bs, the
Wayback Machine is now capturing those popups instead of a site's content

2024-05-24 16:23:02 UTC

How about you f*** off instead
https://files.mastodon.social/media_attachments/files/112/496/985/619/878/396/original/fab386ee92fd6d36.png

2024-05-05 11:13:58 UTC

Please never stream on Twitch if you have a bad mic.... literally half the audio on this site is just room noise

2024-04-25 12:59:28 UTC

Sometimes I wonder why the f*** I even bother using Signal

2024-03-24 18:02:24 UTC

Travian is still online
I am actually impressed

2024-03-12 22:21:36 UTC

GhostRace - Exploiting and Mitigating Speculative Race Conditions
https://www.vusec.net/projects/ghostrace/

2024-03-12 22:19:40 UTC

Jury Finds Russian-Swedish Operator of ‘Bitcoin Fog’ Guilty of Running the Darknet Cryptocurrency Mixer
https://www.justice.gov/usao-dc/pr/jury-finds-russian-swedish-operator-bitcoin-fog-guilty-running-darknet-cryptocurrency

2024-03-12 13:37:17 UTC

Hunt & Hackett looks at the leak from Chinese hacker-for-hire contractor i-SOON and its possible ties to at least three Chinese APTs—Poison Carp (also known as Evil Eye, Earth Empusa, EvilBamboo), Jackpot Panda, and APT41 (also known as Double Dragon, Wicked Panda, Bronze Atlas).
https://www.huntandhackett.com/blog/isoon-leak-sheds-light

2024-03-12 11:32:15 UTC

Broadcom has merged Carbon Black into its Symantec cybersecurity division.
The two brands will continue to operate separately. Broadcom acquired the Carbon Black Black last year as part of its $69 billion acquisition of VMware. The company initially planned to sell off Carbon Black.
Broadcom previously acquired Symantec for $10.7 billion in August 2019.
https://www.broadcom.com/blog/broadcom-brings-together-two-proven-portfolios-to-deliver-complete-hybrid-cloud-cybersecurity

2024-03-12 11:31:53 UTC

Tuta has enabled quantum-safe encryption by default on all new Tuta Mail accounts.
https://tuta.com/blog/post-quantum-cryptography

2024-03-04 22:31:00 UTC

Ukraine says it hacked Russia's Ministry of Defense
https://t.me/DIUkraine/3545
https://files.mastodon.social/media_attachments/files/112/039/785/735/861/041/original/0ef7e2ea71cdcc71.png

2024-02-06 12:58:20 UTC

Hackers operating out of China tried to break into websites and email systems of the Philippine government.
Philippine officials say the attacks came from Chinese IPs but didn't attribute the attacks to the Chinese government
https://www.philstar.com/headlines/2024/02/04/2330811/dict-foils-cyberattack-china-hackers

2023-12-08 11:17:42 UTC

Is Twitch just endless commercials now?

2023-11-23 12:42:41 UTC

Spotify saying the quiet part out loud
Article title: Spotify will end service in Uruguay due to bill requiring fair pay for artists
https://mixmag.net/read/spotify-end-service-uruguay-copyright-law-change-artists-fair-pay-amendment-news

2023-11-21 14:28:08 UTC

Senior Ukrainian cybersecurity officials sacked amid corruption probe
Yurii Shchyhol and Victor Zhora were accused of participating in a scheme to contract software at inflated prices.
https://cyberscoop.com/zhora-shchyhol-fired-corruption/

2023-11-12 18:21:39 UTC

Binarly has an analysis of the private key leaks that took place at Lenovo in September 2022 and MSI in April 2023.
The report's main finding was that multiple companies were apparently using the same Intel Boot Guard private keys to sign different types of firmware images.
https://binarly.io/posts/Dissecting_Intels_Explanation_of_Key_Usage_in_Integrated_Firmware_Images_IFWI/index.html

2023-11-04 20:39:09 UTC

Four unpatched issues in Microsoft Exchange servers... enjoy the company's new Trustworthy Computing part II period
https://www.zerodayinitiative.com/advisories/published/
https://files.mastodon.social/media_attachments/files/111/354/206/441/427/253/original/a47841c0553170f5.png

2023-11-02 01:10:34 UTC

Google has launched a new .ing TLD
All customers must use HTTPS for this one
https://blog.google/products/registry/introducing-the-ing-top-level-domain/
https://files.mastodon.social/media_attachments/files/111/338/286/557/842/437/original/15c5bb82b45a3738.png

2023-10-27 22:40:34 UTC

Enterprise software giant VMWare has published two security advisories to fix two sets of issues in its vCenter Server and Tools applications.
The worst of the two is the vCenter update, which fixes a 9.8/10-rated memory issue that can lead to remote code execution attacks (CVE-2023-34048).
https://www.vmware.com/security/advisories/VMSA-2023-0023.html

2023-10-05 16:08:03 UTC

Ransomware is being deployed within one day of initial access in more than 50% of engagements.
In just 12 months the median dwell time identified in the annual Secureworks State of the Threat Report has freefallen from 4.5 days to less than one day.
In 10% of cases, ransomware was even deployed within five hours of initial access.
https://www.secureworks.com/about/press/ransomware-dwell-time-hits-low-of-24-hours

2023-10-05 01:02:22 UTC

- reply

@npub1t22…3ddy coming to Romania in 2024

2023-10-05 00:17:51 UTC

The US House of Representatives has passed a bill that would remove minimum education requirements on federal cybersecurity jobs.
Named the Modernizing the Acquisition of Cybersecurity Experts Act, the bill passed with an overwhelming 394-1 vote
https://fedscoop.com/house-passes-bill-relax-federal-cyber-educational-requirements/

2023-10-04 22:51:57 UTC

From cURL founder on the nazi-X-chan:
"We are cutting the release cycle short and will release curl 8.4.0 on October 11, including a fix for a severity HIGH CVE."

2023-10-02 22:02:56 UTC

DataDog's security team has open-sourced a tool named KubeHound that can be used to analyze Kubernetes clusters and create graphs of possible attach paths.
Blog: https://securitylabs.datadoghq.com/articles/kubehound-identify-kubernetes-attack-paths/
Tool: https://kubehound.io/
https://files.mastodon.social/media_attachments/files/111/167/679/036/805/386/original/e5422373f83c6679.png