securityledger retweeted
‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real.
Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet.
Mitigate now:
→ Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart
→ Tighten SSH access rules to the users/devices that need them
Read: thehackernews.com/2026/10/un…
securityledger retweeted
CFP is OPEN! 🎉
If you've broken (or built) something interesting or learned a hard lesson while working in the field, we want to hear about it.
20-min lightning talks / 45-min full talks. Accepted speakers get free admission.
#MinuteCon #CFP #Infosec #Boston
securityledger retweeted
⚡️ NEW: Our team at @BlackLotusLabs just published new research on the JDY botnet, a covert network linked to Volt Typhoon.
securityledger retweeted
A great job by @themadstone covering the ongoing travesty of #Massachusetts voters having their votes cancelled by automakers, who have for 2 years blocked an automotive #righttorepair law that 75% of MA voters approved. Justice delayed is justice denied! gizmodo.com/automakers-have-…
securityledger retweeted
#RT @EFF: RT @CRAdvocacy: By the end of 2022, New York could be the first state to say goodbye to costly tech support and hello to #RighttoRepair. But we need your help to urge @GovKathyHochul to sign this bill into law asap! Will you send her a message?… act.consumerreports.org/pd25…
securityledger retweeted
Check out my conversation with Matt Salisbury whose new start-up, Honey Badger HQ, is re-visiting knowledge-based authentication using #AI and #ML. Part of @securityledger “Life after the Password” podcast series.
Host @paulfroberts speaks with Matt Salisbury, the #CEO of #anti-fraud firm HoneybadgerHQ. #podcast securityledger.com/2022/11/e…
securityledger retweeted
Did you know that 73% of #software producers can't confidently attest to what components, #softwaresupplychain attacks or third-party risks reside in their software? Don't fall short of visibility. Get a free #SBOM, on us. hubs.ly/Q01p2HRc0
securityledger retweeted
Mysterious new hacking group found infecting a Middle East telecom and ISPs and universities in the Middle East and Africa is baffling researchers about why it hasn't been discovered before now and who is behind it zetter.substack.com/p/myster…
securityledger retweeted
Episode 238: #Robots Are The Next Frontier In #Healthcare #Cyber Risk securityledger.com/2022/05/e… via @securityledger
#RiskManagement #CIO #tech #cyberspace #cybersecurity
securityledger retweeted
Join me and @Xtemporality at noon to ask your questions about the #Astralocker 2 “direct to #Ransomware attacks!
Happening TODAY at 12pm EST ➡️ ConversingLabs latest talk: Smash n' Grab - #AstraLocker Breach, featuring @ReversingLabs #Malware Researcher Joseph Edwards (@Xtemporality). Register now: hubs.ly/Q01gy9N10
securityledger retweeted
In our latest #podcast, @youmei65725307 of @CyberSixgill talks about how Russia’s war of attrition with Ukraine is spilling into the cyber criminal underground, to the benefit of #China and Chinese threat actors. securityledger.com/2022/06/e…
securityledger retweeted
Widespread Atlassian Confluence CVE-2022-26134 exploitation, specifically that is *confirmed functional*, has just started. 23 unique IPs so far.
-Tags available to all @GreyNoiseIO users now
- Create an account to deploy a dynamic block list to block it
viz.greynoise.io/query/?gnql…
securityledger retweeted
Cynerio CTO @db_doskey joins @paulfroberts on the @securityledger #podcast to discuss the JekyllBot:5 vulnerabilities in hospital robots and what they reveal about the state of healthcare IoT security right now. Tune in! #iomt #ioT securityledger.com/2022/05/e…
securityledger retweeted
In our latest #podcast @paulfroberts speaks with Daniel Brodie of @Cynerio about #JekyllBot:5 the flaws found in the TUG medical robot by Aethon and about the growing #cyberrisk posed by medical devices. securityledger.com/2022/05/e…
securityledger retweeted
The hack of @BeanstalkFarms is no anomaly. 3 of the 10 biggest #DeFi hacks occurred in the last 18 months. Check out my #podcast with @enjenneer of @NCCGroupInfosec where we talk about the #cybersecurity debt plaguing DeFi apps and platforms.
content.blubrry.com/the_secu…
securityledger retweeted
#BREAKING #ESETresearch warns about the discovery of a 3rd destructive wiper deployed in Ukraine 🇺🇦. We first observed this new malware we call #CaddyWiper today around 9h38 UTC. 1/7
securityledger retweeted
In a recent article published by @securityledger, our CEO @jack_naglieri is sharing how today’s cloud-centric and data-driven environments make the SIEM technologies of the past inadequate and demand new approaches to security monitoring. securityledger.com/2022/02/w…
securityledger retweeted
#Ransomware attacks continue to rise. Don't miss this @securityledger podcast if you are a #heathcare #cybersecurity pro.
Check out our #podcast interview with @justinembone of @MedSecTeam on how #healthcare organizations facing threats from #ransomware and #software #supplychain attacks. zcu.io/JBdF


























