-> https://github.com/github/audit-actions-workflow-runs

This looks super useful for auditing when, and what was used.
Great for security hygiene and investigating potential incidents within your CI/CD pipelines.
#devsecops #github #security #automation #devsecops

Rückschau secIT 2025 – alte Gefahren in neuem Gewand

Auf der IT-Security-Konferenzmesse zeigt sich KI weiter als Gefahrenmultiplikator. Die moderne Cloud- und Lieferkettenkomplexität potenziert Sicherheitsrisiken.

https://www.heise.de/hintergrund/Rueckschau-secIT-2025-alte-Gefahren-in-neuem-Gewand-10354246.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Cybersecurity #IT #Security #news

Companies that use different (sub-)domains for registering an account and logging in – a perfect way to break your password manager.

Today's example: registration.atupri.ch and login.atupri.ch.

Why?

Yeah, *I* can edit the entry in the password manager to allow the log-in domain.

But my mom? Unlikely. So even if she uses an automatically generated password (good) and saves it in her password manager (good), it won't be offered when she tries to log in (bad).

#accessibility #security

heise+ | Raus aus der US-Cloud: Souveräne SaaS-Angebote im Überblick

Für europäische Firmen ist der Einsatz US-basierter SaaS-Angebote riskant. Wer auch künftig sicheren Zugriff will, sollte auf EU-Alternativen setzen.

https://www.heise.de/hintergrund/Raus-aus-der-US-Cloud-Souveraene-SaaS-Angebote-im-Ueberblick-10342483.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#CloudDienste #IT #Microsoft #Recht #Security #SoftwareasaService #news

🧵 THREAD by Matt Johansen: A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read.

He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords

Media's coverage wasn't detailed enough so I dug into his testimony:
https://threadreaderapp.com/thread/1913023007263543565.html

#DOGE #USA #russia #cybersecurity #security

“Five iPhone Security Features You Should Be Using”

1. Two-Factor Authentication on your #icloud account
2. Stolen Device Protection
3. Private Relay
4. Advanced Data Protection
5. Lockdown Mode

Source: https://www.macrumors.com/2025/04/16/iphone-security-features/

#security #privacy #ios

How Americans Are Surveilled During #Protests

Here's what you need to know about #surveillance technology and protests—and how you can best protect yourself.
#privacy #security

https://www.wired.com/story/uncanny-valley-podcast-how-americans-are-surveilled-during-protests/