GeorgeVHulme

9 Followers
55 Following
65 Posts
Storyteller | Cybersecurity | Enterprise Technology | Current meatspace: Minneapolis
Current workSecurityBoulevard, DarkReading, DigitalCxO, DevOps.com, others
Muckrack Profilehttps://muckrack.com/george-v-hulme
Another day, another conversation with the press team where I explain that I did not give the quote in that story and the whole thing is AI slop. This happens once every few weeks now.
Volt Typhoon Takedown Highlights Critical Infrastructure Security Complexities

The Volt Typhoon takedown highlights the challenges the world faces in defending against such threats and the private industry/government collaboration that's necessary to succeed.

Nexus
A Love Letter To Embedded Systems By V. Hunter Adams

Today we’re going to make a little digression from things that we do to look at perhaps why we do the things that we do. This one is philosophical folks, so strap yourselves in. We’ve h…

Hackaday

I got ahold of the Copilot+ software.

Recall uses a bunch of services themed CAP - Core AI Platform. Enabled by default.

It spits constant screenshots (the product brands then “snapshots”, but they’re hooked screenshots) into the current user’s AppData as part of image storage.

The NPU processes them and extracts text, into a database file.

The database is SQLite, and you can access it as the user including programmatically. It 100% does not need physical access and can be stolen.

Appears Microsoft has decided to circle back to 1999 when it comes to dealing with its software vulnerabilities.

Check out this article¹ from
@George_V_Hulme @Claroty Nexus which discusses cyber security risks to the bulk electric system & how utilities are managing these risks, especially using the Idaho National Labs CCE methodology.

Quotes from yours truly.

For more reading, check out the findings from the 2023 NERC State of Reliability Technical Assessment² and INL CCE³.
__
¹https://nexusconnect.io/articles/bulk-power-system-risks-span-complexity-vulnerabilities-advanced-actors
²https://nerc.com/pa/RAPA/PA/Performance%20Analysis%20DL/NERC_SOR_2023_Overview.pdf
³https://inl.gov/cce/

If you're an employer and have to force employees into the office through mandates, maybe you should ask yourself why you have to drag your workers back into the environment you created.
Number of Victims Breached Via MOVEit Zero-Day Keeps Climbing

How bad is the breach of the MOVEit zero-day to businesses, government agencies and their customers? The short answer is that the known fallout from the Clop

I just paired my smart watch to my coffee cup. What an age to be alive.
Still true