it is the year of our lord 2026, and MIT has no DMARC policy set.
I am getting "send me all your employees' W2s" phishing spam from [email protected]
EM Forster vibing so hard right meow
@securityaffairs Hmm... so this was discovered at 1 provider.
What are the odds there are still compromised providers out there, intercepting and supplanting malicious updates?
it is the year of our lord 2026, and MIT has no DMARC policy set.
I am getting "send me all your employees' W2s" phishing spam from [email protected]
EM Forster vibing so hard right meow
@haveibeenpwned @troyhunt Here's an interesting fun fact.
We had an email and password appear in this dataset for an account that has never existed in our domain.
However, somebody has been password spraying that username against us since at least October of 2023.
Noem firing cybersecurity employees 6 months ago.
Today: Clearly this is IT's fault, and not leadership.
In case anybody cares, there's a new Truth Social App spoof that's a decent clone of the real thing truthsocial[.]com
The clone, truthsocialapp[.]com
Was registered on April 25, 2025
But the first time it hosted anything that's been crawled was 2 weeks ago.
Currently the entire thing appears to be built to spoof P07U5 account, and that's it.
This is probably a problem.
@GossiTheDog K. Krithivasan, also known as Krithi, aka the face of quality IT, that you can trust.
Hash tag
These Indian, "IT", call centers probably do double time as scamming operations.
Hilarious twist would be that it was an inside job, faked to look like a compromise.
meanwhile: in reality
ai in danger of being replace by hoo-mons
Geneva Conventions don't apply to laboratory testing in space
Just saiyan... that irl Venom arc is yours for the taking
CISA’s threat hunting division plans to cease use of Google-owned VirusTotal on April 20.
“We understand the importance of these tools in our operations and are actively exploring alternative tools to ensure minimal disruption,” said the email sent to several hundred CISA cyber threat hunters.