Patrick C Miller 

@patrickcmiller@infosec.exchange
4.4K Followers
1.5K Following
42.5K Posts
Critical Infrastructure & Industrial Security Advisor. Recovering regulator. Airport dweller. #PDX-based. @ampyxcyber President and CEO. CCI US Coordinator. @beerisac coin 001. #ICS #OT #NERCCIP #NIST #TSASD #DHSCPG #IEC62443
Websitehttps://www.patrickcmiller.com/
Companyhttps://www.ampyxcyber.com/
LinkedInhttps://www.linkedin.com/in/millerpatrickc/
Podcasthttps://rss.com/podcasts/amperesec/
catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities https://blog.talosintelligence.com/catdoc-zero-day-nvidia-high-logic-fontcreator-and-parallel-vulnerabilities/
catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three zero-day vulnerabilities in catdoc, as well as vulnerabilities in Parallel, NVIDIA and High-Logic FontCreator 15.

Cisco Talos Blog
Your Meta AI prompts might be public - here's how to check https://www.zdnet.com/article/our-meta-ai-prompts-might-be-public-heres-how-to-check/
Your Meta AI prompts might be public - here's how to check

People are sharing Meta AI prompts that are not intended for the public.

ZDNET
European Journalists Targeted by Paragon Spyware, Citizen Lab Confirms https://www.infosecurity-magazine.com/news/european-journalists-paragon/
European Journalists Targeted by Paragon Spyware, Citizen Lab Confirms

This is the first forensic evidence that journalists’ devices have been infected with Paragon’s Graphite spyware

Infosecurity Magazine
Danish government agency to ditch Microsoft software in push for digital independence https://therecord.media/denmark-digital-agency-microsoft-digital-independence
Danish government agency to ditch Microsoft software in push for digital independence

Denmark's digital affairs ministry says it plans to switch to the open source LibreOffice software and away from Microsoft products as part of an effort to make the government more digitally independent.

Industrial cyber risk assessment evolving into operational imperative with focus on consequence and resilience - Industrial Cyber https://industrialcyber.co/features/industrial-cyber-risk-assessment-evolving-into-operational-imperative-with-focus-on-consequence-and-resilience/
Industrial cyber risk assessment evolving into operational imperative with focus on consequence and resilience - Industrial Cyber

Industrial cyber risk assessment is evolving into an operational imperative with increased focus on consequence and resilience.

Industrial Cyber
Canada’s second-largest airline WestJet is containing a cyberattack https://securityaffairs.com/179027/uncategorized/canadas-airline-westjet-is-containing-a-cyberattack.html
Canada’s second-largest airline WestJet is containing a cyberattack

Canada's airline WestJet has suffered a cyberattack that impactd access to some internal systems and the company app.

Security Affairs
Another one for the graveyard: Google to kill Instant Apps in December

It was a good idea that arrived too late to matter.

Ars Technica
Labshock - OT Cybersecurity Lab https://labshock.github.io/
Labshock - OT Cybersecurity Lab

Build your OT lab, emulate ICS systems, run realistic attacks, detect and defend, and test SIEM correlations.

CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers https://hackread.com/cisa-remote-control-flaws-sinotrack-gps-trackers/
CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto