Mastodawn

NEW: Iran's government has now admitted that it took down the internet in the country, arguing that it did to protect against Israeli cyberattacks.

I spoke to two Iranians who live abroad and can't communicate with their loved ones back home because of the blackout.

"I haven’t heard from them in two days, but someone is supposed to update me. I hope everything is okay," Amir Rashidi told me.

https://techcrunch.com/2025/06/20/irans-government-says-it-shut-down-internet-to-protect-against-cyberattacks/

Iran's government says it shut down internet to protect against cyberattacks | TechCrunch

The government cited the recent hacks on Bank Sepah and cryptocurrency exchange Nobite as reasons to shut down internet access to virtually all Iranians.

TechCrunch

Jessica Beffa Jun 13

DEF CON Jun 12

Less than two months until #DEFCON33! Time to start planning to make the most of your #DEFCON experience.

One of the best parts of DC is meeting other humans and bonding over shared interests. On the Parties, Meetups and Events page you’ll find a shockingly comprehensive list of group hangs. Whether you’re into Running or Ham Radio, Blanket Forts or Karaoke, we’ve got you covered.

Set aside some time for fun and
connection. Your people are waiting.

https://defcon.org/html/defcon-33/dc-33-pmne.html#nav

#defconparties #defconevents #defcon meetups

DEF CON® Hacking Conference - Events, Parties, & Meetups

DEF CON 33 Events, Parties, & Meetups

Jessica Beffa Jun 13

mhoye Jun 13

I have to admit I'm surprised to learn that apparently Victoria's actual Secret is... a skilled infosec response team?

I'm genuinely curious in how they run their shop, and this incident, that let them respond to this much more quickly and effectively than many other and seemingly more critical-role organizations.

https://www.bleepingcomputer.com/news/security/victorias-secret-restores-critical-systems-after-cyberattack/

Victoria’s Secret restores critical systems after cyberattack

Victoria's Secret has restored all critical systems impacted by a May 24 security incident that forced it to shut down corporate systems and the e-commerce website.

BleepingComputer

Jessica Beffa Jun 9

IoT Botnet Jun 9

Jessica Beffa Jun 5

New today: @ESETresearch analyzed a #cyberespionage campaign conducted by BladedFeline, an Iran-aligned #APT group with likely ties to OilRig 🔎

https://www.welivesecurity.com/en/eset-research/bladedfeline-whispering-dark/

BladedFeline: Whispering in the dark

ESET researchers analyzed a cyberespionage campaign conducted by BladedFeline, an Iran-aligned APT group with likely ties to OilRig.

Jessica Beffa May 23

More 📰! @ESETresearch participated in global disruption of notorious infostealer #Danabot by the US DOJ, DOD and FBI, and others. Since 2018, @ESET Research has tracked the evolution of this powerful malware-as-a-service operation. 🔎💻

More👀: https://www.welivesecurity.com/en/eset-research/danabot-analyzing-fallen-empire/

Danabot: Analyzing a fallen empire

ESET Research shares its findings on the workings of Danabot, an infostealer recently disrupted in a multinational law enforcement operation.

Jessica Beffa May 21

@ESETresearch supports global disruption of Lumma Stealer - one of the most prevalent infostealers. 🕵‍♀️ The operation targeted Lumma Stealer infrastructure making the botnet, in large part, inoperative.

@ESET Rocks. #ProgressProtected Check out www.welivesecurity.com/en/eset-rese... to learn more 🤩

Jessica Beffa May 15

ESET Research May 15

#ESETresearch publishes its investigation of Operation RoundPress, which uses XSS vulnerabilities to target high-value webmail servers. We attribute the operation to Sednit with medium confidence. https://www.welivesecurity.com/en/eset-research/operation-roundpress/
In 2023, Operation RoundPress only targeted Roundcube, but in 2024 it expanded to other webmail software including Horde, MDaemon, and Zimbra.. For MDaemon, Sednit exploited the zero-day XSS vulnerability CVE-2024-11182.
Most victims were governmental entities and defense companies in Eastern Europe, although we have observed governments in Africa, Europe, and South America being targeted as well.
Our blogpost provides an analysis of the JavaScript payloads, which we named SpyPress. They are able to steal webmail credentials, and exfiltrate contacts and email messages from the victim’s mailbox. IoCs available in our GitHub repo: https://github.com/eset/malware-ioc/tree/master/operation_roundpress 5/5

Operation RoundPress targeting high-value webmail servers

ESET researchers uncover a Russia-aligned espionage operation that they named RoundPress and that targets webmail servers via XSS vulnerabilities.

Jessica Beffa Sep 10, 2024

Hacker News Sep 10, 2024

Ford seeks patent for tech that listens to driver conversations to serve ads
L: https://therecord.media/ford-patent-application-in-vehicle-listening-advertising
C: https://news.ycombinator.com/item?id=41501630
posted on 2024.09.10 at 11:17:06 (c=0, p=7)

Ford seeks patent for tech that listens to driver conversations to serve ads

A Ford Motoer Company patent application filed in February and published last month proposes software that would monitor in-car conversations and other data to help serve up advertisements.

Jessica Beffa Nov 6, 2023