securityledger (@securityledger) header
securityledger (@securityledger) profile picture

Independent cybersecurity news and opinion since 2012. Open DMs. Subscribe: https://nitter.cf/t.co/syJiqzBv0P | BlueSky: https://nitter.cf/t.co/9FLV5vGgWa

Boston, MA
Joined August 2012
securityledger retweeted
‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real. Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet. Mitigate now: → Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart → Tighten SSH access rules to the users/devices that need them Read: thehackernews.com/2026/10/un…
55
196
50
1,059
145,541
securityledger retweeted
CFP is OPEN! 🎉 If you've broken (or built) something interesting or learned a hard lesson while working in the field, we want to hear about it. 20-min lightning talks / 45-min full talks. Accepted speakers get free admission. #MinuteCon #CFP #Infosec #Boston
6
4
365
securityledger retweeted
⚡️ NEW: Our team at @BlackLotusLabs just published new research on the JDY botnet, a covert network linked to Volt Typhoon.
1
1
2
231
securityledger retweeted
A great job by @themadstone covering the ongoing travesty of #Massachusetts voters having their votes cancelled by automakers, who have for 2 years blocked an automotive #righttorepair law that 75% of MA voters approved. Justice delayed is justice denied! gizmodo.com/automakers-have-…
1
8
6
1,089
securityledger retweeted
#RT @EFF: RT @CRAdvocacy: By the end of 2022, New York could be the first state to say goodbye to costly tech support and hello to #RighttoRepair. But we need your help to urge @GovKathyHochul to sign this bill into law asap! Will you send her a message?… act.consumerreports.org/pd25…
securityledger retweeted
Check out my conversation with Matt Salisbury whose new start-up, Honey Badger HQ, is re-visiting knowledge-based authentication using #AI and #ML. Part of @securityledger “Life after the Password” podcast series.
Host @paulfroberts speaks with Matt Salisbury, the #CEO of #anti-fraud firm HoneybadgerHQ. #podcast securityledger.com/2022/11/e…
securityledger retweeted
Did you know that 73% of #software producers can't confidently attest to what components, #softwaresupplychain attacks or third-party risks reside in their software? Don't fall short of visibility. Get a free #SBOM, on us. hubs.ly/Q01p2HRc0
4
1
securityledger retweeted
Mysterious new hacking group found infecting a Middle East telecom and ISPs and universities in the Middle East and Africa is baffling researchers about why it hasn't been discovered before now and who is behind it zetter.substack.com/p/myster…
4
43
4
80
securityledger retweeted
So @defcon is coming and #RightToRepair is on the agenda. Check out my panel with Kyle Wiens (@kwiens) of @iFixit, Louis Rossmann (@fighttorepair) of Rossmann Repair Group, Corynne McSherry (@cmcsherr) of @EFF & @joegrand of Grand Idea Studio Saturday morning at 10 AM.
2
14
2
56
securityledger retweeted
Join me and @Xtemporality at noon to ask your questions about the #Astralocker 2 “direct to #Ransomware attacks!
Happening TODAY at 12pm EST ➡️ ConversingLabs latest talk: Smash n' Grab - #AstraLocker Breach, featuring @ReversingLabs #Malware Researcher Joseph Edwards (@Xtemporality). Register now: hubs.ly/Q01gy9N10
1
2
3
In our latest #podcast, @youmei65725307 of @CyberSixgill talks about how Russia’s war of attrition with Ukraine is spilling into the cyber criminal underground, to the benefit of #China and Chinese threat actors. securityledger.com/2022/06/e…
1
1
Widespread Atlassian Confluence CVE-2022-26134 exploitation, specifically that is *confirmed functional*, has just started. 23 unique IPs so far. -Tags available to all @GreyNoiseIO users now - Create an account to deploy a dynamic block list to block it viz.greynoise.io/query/?gnql…
3
74
8
149
securityledger retweeted
Cynerio CTO @db_doskey joins @paulfroberts on the @securityledger #podcast to discuss the JekyllBot:5 vulnerabilities in hospital robots and what they reveal about the state of healthcare IoT security right now. Tune in! #iomt #ioT securityledger.com/2022/05/e…
1
1
In our latest #podcast @paulfroberts speaks with Daniel Brodie of @Cynerio about #JekyllBot:5 the flaws found in the TUG medical robot by Aethon and about the growing #cyberrisk posed by medical devices. securityledger.com/2022/05/e…
securityledger retweeted
The hack of @BeanstalkFarms is no anomaly. 3 of the 10 biggest #DeFi hacks occurred in the last 18 months. Check out my #podcast with @enjenneer of @NCCGroupInfosec where we talk about the #cybersecurity debt plaguing DeFi apps and platforms. content.blubrry.com/the_secu…
2
6
securityledger retweeted
#BREAKING #ESETresearch warns about the discovery of a 3rd destructive wiper deployed in Ukraine 🇺🇦. We first observed this new malware we call #CaddyWiper today around 9h38 UTC. 1/7
24
611
85
1,149
securityledger retweeted
In a recent article published by @securityledger, our CEO @jack_naglieri is sharing how today’s cloud-centric and data-driven environments make the SIEM technologies of the past inadequate and demand new approaches to security monitoring. securityledger.com/2022/02/w…
1
2
securityledger retweeted
#Ransomware attacks continue to rise. Don't miss this @securityledger podcast if you are a #heathcare #cybersecurity pro.
Check out our #podcast interview with @justinembone of @MedSecTeam on how #healthcare organizations facing threats from #ransomware and #software #supplychain attacks. zcu.io/JBdF
1
1