63 Followers
246 Following
211 Posts
Part-time security person just trying to keep up.
PSA: If you are not browsing the interwebs with a VPN enabled and you suddenly find your browser sessions are frequently stymied by constant CAPTCHA requests, that's one potential sign that your system may be compromised by something that is routing other peoples' Web traffic through your computer. It's not a dead giveaway of a compromise by any stretch, but it is something that you should probably investigate further.
Just two days left until the first hearing in Newag's lawsuit against us (Dragon Sector members) and SPS. It will take place on 28.08.2024 at 10:00. In case you've missed it, we're being accused of infringing upon Newag's intellectual property and unfair competition. This is, of course, bullshit and a great example of a SLAPP case.

Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. networks and laying the groundwork for the ability to disrupt communications between the United States and Asia during any future armed conflict with China.

https://krebsonsecurity.com/2024/08/new-0-day-attacks-linked-to-chinas-volt-typhoon/

New 0-Day Attacks Linked to China’s ‘Volt Typhoon’ – Krebs on Security

The Crowdstrike update failure is nuts! Be patient with your IT staff today, they're going to have a lot to deal with if the org is running Crowdstrike.
In case you need a free trial of Crowdstrike rn....
The XDR vendor sales pitches are going to be insufferable for a while
Oh, Fatima. I bet you wish you'd stayed in ballet now, don't you.
#CrowdStrike

Can we do security awareness or education via electronic dance music? IDK, but you gotta hand it to these guys: they have some catchy tunes, like "Better Patch Your Network," which isn't as campy as it sounds.

https://www.youtube.com/watch?v=VL57hVgsq9g

Here's one on DDoS attacks. "Teardrop Falling": https://www.youtube.com/watch?v=cjCSInz1Sqg

"I am Tracking You" https://www.youtube.com/watch?v=qLkgKzqZY2s

Patch Your Network (feat. AENDZI)

YouTube
I've verified that a set of leaked documents which show what phones Cellebrite can (and can't) unlock are authentic. Shows company could not unlock a sizeable chunk of modern iPhones just recently. Also shows some issues with Google Pixels 6-8 https://www.404media.co/leaked-docs-show-what-phones-cellebrite-can-and-cant-unlock/
Leaked Docs Show What Phones Cellebrite Can (and Can’t) Unlock

The leaked April 2024 documents, obtained and verified by 404 Media, show Cellebrite could not unlock a large chunk of modern iPhones.

404 Media

“On Friday, Microsoft announced that it would be making multiple dramatic changes to its rollout of its Recall feature”

https://www.wired.com/story/microsoft-recall-off-default-security-concerns/

Microsoft Will Switch Off Recall by Default After Security Backlash

After weeks of withering criticism and exposed security flaws, Microsoft has vastly scaled back its ambitions for Recall, its AI-enabled silent recording feature, and added new privacy features.

WIRED