Independent cybersecurity news and opinion since 2012. Open DMs. Subscribe: https://nitter.cf/t.co/syJiqzBv0P | BlueSky: https://nitter.cf/t.co/9FLV5vGgWa
Boston, MA
Joined August 2012
- Tweets13.8K
- Following2.2K
- Followers4.4K
- Likes604
A student researcher at @Northeastern gained root access to an @LGUS LB70 24” smart television during a hackathon earlier this month, exposing LG’s extensive digital fingerprinting of smart TVs as part of “Automatic Content Recognition” (ACR). That included the apparent transmission of street address, geographic coordinates and designated market areas, according to a report published by the @FuluFoundation on Thursday. Read our coverage here: securityledger.com/2026/10/c…
#SmartHome #CyberSecurity #DataPrivacy #surveillance
In this clip from our latest podcast
@silascutler of @censysio talks about what #php2shell attacks exploiting newly disclosed flaws might look like from the targeted organization’s POV. #mustwatch. Check out the full interview here: securityledger.com/2026/10/s…
In our latest Security Ledger podcast, host @paulfroberts interviews @silascutler of @censysio on both the #php2shell attacks and the hack of refrigeration control systems in France earlier this mont (and - maybe - on U.S. military bases back in August?!). Check out the full post here: securityledger.com/2026/10/s…
Justin Moore from @AWNetworks talks to @paulfroberts about an analysis of 400 incidents in which attackers used mail bomb spam campaigns combined with exploits of @MicrosoftTeams default-enabled “external access” feature to carry out phishing attacks using fake IT support identities that trick victims into downloading and executing malicious payloads. Check out the story here: securityledger.com/2026/10/f…
securityledger retweeted
‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real.
Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet.
Mitigate now:
→ Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart
→ Tighten SSH access rules to the users/devices that need them
Read: thehackernews.com/2026/10/un…
Is China already inside our growing surveillance infrastructure? 🤔 In this clip from our latest podcast, @paulfroberts asks @Gainsec to weigh in. Jon uses it to call out the bigger problem: that the security bar is so low that China isn’t even the biggest concern. Instead, its the low-skill “Joe Schmos” with an axe to grind. #CyberSecurity #TechTalk #Infosec
AI powered surveillance cameras have a lot of potential...for good and bad. In this clip from our recent podcast, @GainSec explores the untapped potential of @Flock cameras: from image- and facial recognition --as well as rooting and manipulated detection. The risks and possibilities are endless! 🌐🚀 #surveillance #FlockCameras #EmbeddedSystems
Check out the full interview here: securityledger.com/2026/10/b…
Is @Flock practicing security through obscurity with its surveillance cameras? You bet. In this clip from @paulfroberts recent interview with @GainSec on his work exploring security risks in Flock devices, Jon says that Flock cameras are best thought of as dressed up @Android phones ...with all the security debt that comes with that. #surveillance #internetofthings Then check out the full interview here: securityledger.com/2026/10/b…
Are tech products rushed out the door with security an afterthought? 🤔 @GainSec’s talk with @paulfroberts about @flocksafety cameras calls out the larger issue facing our society: security is a low priority. #CyberSecurity #Surveillance securityledger.com/2026/10/b…
Full episode here: securityledger.com/2026/10/b…
What Are the Latest Internet-Facing Edge Device posing a Security Risk? You got it ... #AI! 🫠 Check out this clip with @GreyNoiseIO’s Nishawn Smagh on the threats posed by #edgedevices youtube.com/shorts/_oNWs9Ief… via @YouTube
securityledger retweeted
⚡️ NEW: Our team at @BlackLotusLabs just published new research on the JDY botnet, a covert network linked to Volt Typhoon.
Hackers are targeting developers...and the AI that writes their code. A malicious campaign by North Korea's Famous Chollima #APT saw a malicious npm package dependency slipped into a crypto trading agent by @claudeai Opus AI coding agent. securityledger.com/2026/04/h… @ReversingLabs
The @Stranger_Things concept of the “Upside Down” is a useful way to think about the risks lurking in the software we all rely on. A new report from @ReversingLabs shines a light into that dark world. securityledger.com/2026/01/t… #appsec #cybersecurity
Report: Epidemic of Flaws in Commercial and Open Source Code Fuels Attacks @ReversingLabs #OSS #softwaresupplychain #cybersecurity #appsec #report securityledger.com/2025/03/r… via @securityledger
In this clip from our latest #podcast, David Kellerman the Field #CTO at Cymulate explains how the company's attack simulation feature works - helping organizations test security products in real life attack scenarios. Check out the full interview here: lnkd.in/efyEiJRe
In this clip from our latest podcast, host @paulfroberts
asks David Kellerman, Field #CTO @Cymulateltd about security tool overload and the need for optimization. Check out the full interview here: securityledger.com/2025/01/s… #podcast #sponsored