MOTHER SCRATCHER

https://krebsonsecurity.com/2024/09/this-windows-powershell-phish-has-scary-potential/

#CoSoSec #infosec

Zounds.

https://arstechnica.com/security/2024/09/sailors-hid-an-unauthorized-starlink-on-the-deck-of-a-us-warship-and-lied-about-it/

#infosec #military

Dang, this seems really bad.

https://arstechnica.com/security/2024/07/new-blast-radius-attack-breaks-30-year-old-protocol-used-in-networks-everywhere/

#infosec

this seems bad #infosec

https://stackdiary.com/linksys-velop-routers-send-wi-fi-passwords-in-plaintext-to-us-servers/

well this is a revolting development

AI hallucinates software packages and devs download them – even if potentially poisoned with malware

https://www.theregister.com/2024/03/28/ai_bots_hallucinate_software_packages/

#InfoSec

this looks worthwhile:

https://www.donotdox.com/

#privacy #infosec

well, shit

Microsoft says Kremlin-backed hackers accessed its source and internal systems
Midnight Blizzard is now using stolen secrets in follow-on attacks against customers.

#infosec #natsec

https://arstechnica.com/security/2024/03/microsoft-says-kremlin-backed-hackers-accessed-its-source-and-internal-systems/

dang--Doctorow got scammed

https://pluralistic.net/2024/02/05/cyber-dunning-kruger/#swiss-cheese-security

Good on him for being up-front with that... #CosoSec #InfoSec

have ppl seen this already? Seems bad.

https://www.cnbc.com/2023/12/13/how-to-stop-dropbox-from-sharing-your-personal-files-with-openai.html

#cososec #infosec

this seems bad

https://arstechnica.com/gadgets/2023/10/android-14s-ransomware-data-storage-bug-locks-out-users-remains-unfixed/

#CosoSec #InfoSec

this seems bad

#CosoSec #InfoSec

https://arstechnica.com/security/2023/10/hackers-can-force-ios-and-macos-browsers-to-divulge-passwords-and-a-whole-lot-more/

this seems bad #InfoSec

https://arstechnica.com/security/2023/07/hackers-exploit-gaping-windows-loophole-to-give-their-malware-kernel-access/

This seems bad:

https://elk.zone/mastodon.social/@mysk@defcon.social/110262314462126230

#InfoSec

#InfoSec

Apparently my org agreed to "secure delete" some data sent to us by a collaborator, including off of our backups.

My #infosec chops in this regard begin and end with DBAN. But since it's just a list of files and not an entire disk, I'm not sure how to proceed.

Any of you kind experts have advice? TIA!

This seems concerning.

https://www.washingtonpost.com/technology/2021/04/24/pentagon-internet-address-mystery

#CoSoSec #InfoSec

#CosoSec #Infosec