cybersecurity + privacy news, blog, data, tools and community
web
Joined September 2016
- Tweets1.8K
- Following137
- Followers3.8K
- Likes6.9K
is there a safe way to check one email against stealer logs?
every site wants you to just hand it over
how do you find out the moment a public exploit drops for a CVE?
KEV's always late and github search is a mess
benefits of running the take-home test a recruiter sent you on your work laptop:
• you look keen
• it was only a PDF
• north korea says thanks
disadvantages of running the take-home test a recruiter sent you on your work laptop:
benefits of using password123 for everything:
• you never get locked out
• no password manager to pay for
• hackers save time too
disadvantages of using password123 for everything:
it's on every leaked-password list, so it's the first thing a bot tries
check if yours are already out: @haveibeenpwned
check your company's domain in stealer logs: pwnsy.com/tools/osint/steale…
the fastest-growing security repo on github this week tells you if a video was filmed, AI-generated or coded
rea-video by @yao_june12106: +3k ⭐ in a week
#3 iOS-NOIR checks what your iPhone apps can see, no jailbreak (+233 in a day)
read the code before it gets near your phone
security people i have a lot of respect for (in no particular order):
- @troyhunt (haveibeenpwned)
- @briankrebs (krebsonsecurity)
- @maddiestone (0day research)
- @j00ru (project zero)
- @vxunderground (malware archive)
- @MalwareTechBlog (wannacry)
- @lcamtuf (afl)
one cyberattack, up to €250M in lost sales
ahold delhaize, owner of food lion and albert heijn, says october's attack takes €200M to €250M off Q4 sales
free cash flow guidance fell to about €2.1B, partly on the attack
it still hasn't said what kind of attack it was
sonicwall's SSL-VPN MFA bypass is being exploited
anyone with valid credentials for another login method can skip SAML MFA!
there's no workaround, so patch to sonicos 7.3.4-7013 or 8.2.3-8015
CISA gave federal agencies until nov 20, 13 days from now
🛡️️We added SonicWall SonicOS SSL VPN use of single-factor authentication vulnerability CVE-2026-19868 to our KEV Catalog. Visit go.dhs.gov/Z3Q & apply mitigations to protect your org. #Cybersecurity #InfoSec
ALT The image features an announcement from CISA stating "Known Exploited Vulnerabilities Catalog Updated." It includes the CISA logo and website URL, cisa.gov, set against a dark blue background.
I'm sorry, a senior FBI agent did what???
he took $2.4M in crypto from wallets in FBI cases
some of them belonged to hackers from 2 adversary nations
100 transfers across 79 wallets and 35 cases
his chatgpt chats showed the plan: retire to a vineyard in portugal
deepfake CEOs allegedly took $129M
prosecutors say three men used AI fakes of CEOs and big law firm attorneys to walk accounting staff into approving wires
one UK fintech lost almost $11.6M
does your finance team call the CEO back before a big wire?
Three foreign nationals arrested and charged with scheme to use super intelligence to defraud companies of $129 million: “SI technology offers tremendous potential. But the public should recognize that there are some who seek to use this emerging technology to pursue criminal goals,” said U.S. Attorney Jamie McDonald. “As alleged, Jacob Soall, Sharon Hazan, and Guy Sheetrit abused groundbreaking super intelligence technology to impersonate real people and deceive corporate executives into sending them and their co-conspirators approximately $129 million. I encourage individuals and the business community to consider how to best protect themselves from the emerging threat of SI-enabled crime. This Office and our law enforcement partners will do our part and continue to identify, investigate, and prosecute criminals, including those who use new technologies to defraud Americans.” @NewYorkFBI
justice.gov/usao-sdny/pr/thr…
Alpine 上跑 sshd 的赶紧看一眼：随便输一个257到1024字节的超长密码，就能登进那些本来没设密码的账户
前提是机器上还有别的账户设了真密码，官方云镜像里默认的 alpine 用户能免密 doas，那就直接 root 了
Debian、Ubuntu 这些 glibc 系统不受影响，升级完记得重启 sshd
1,465 AI hacking consoles sit on the open web
censys found them running ARTEX, the open-source framework used on south korean banks and connectwise
800+ of those setups don't even ask for a password
the hackers left their own back office unlocked
ARTEX is making headlines. What does its infrastructure look like?
Censys ARC identified 1,465 hosts exposing ARTEX consoles. 155 ARTEX hosts also run at least one other threat that Censys detects.
@silascutler breaks down the findings and how defenders can use Censys to hunt for ARTEX: bit.ly/4AfYb6E #CensysARC
