| processing of security/tech content | impression-less posts |
Joined November 2019
- Tweets5.3K
- Following226
- Followers590
- Likes8.1K
Pro tip: protect the site even if it’s purely public info/marketing and connects to nothing…
(…to fulfill a company’s security requirements per reg or biz agreement(s) and to avoid qualitative ie reputational impacts)
rs- retweeted
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
rs- retweeted
Tomorrow I will be interviewed on Euro News! With Inge Bryan & the Head of the Moldovan Cyber Authority 🤩🇷🇴🇲🇩 at #BCC2026
See you all on television 😀
rs- retweeted
Was iPhone security broken just with Bluetooth?
iPhone was always known for its high security, second only to GrapheneOS. But a leaked Cellebrite document might show they found a way to break their protection.
The device is more vulnerable in AFU (After First Unlock) than in BFU (Before First Unlock).
Cellebrite's "Advanced Unlock" allegedly has the capability to unlock devices in the AFU state. As a response to rising USB port protection, they answered with a method capable of bypassing encryption over the Bluetooth radio.
No pairing, no user interaction. The Bluetooth attack sends an L2CAP packet to the target that hijacks the Bluetooth daemon and gains kernel-level control.
What is interesting is that Apple patched this with the iPhone 17 and TOLD NO ONE. They implemented MIE (Memory Integrity Enforcement), which might also be proof that these alleged capabilities are real, and that devices older than the iPhone 17 are vulnerable to these attacks.
GrapheneOS documentation states that this attack vector is known and won't work on up-to-date GrapheneOS devices.
GrapheneOS will always be the safest option.
rs- retweeted
The potential impact of the ConnectWise supply chain attack is massive.
One compromised OAuth application with elevated permissions could give attackers access to emails, files, and directory data across hundreds of Microsoft 365 tenants.
Even worse, attackers could establish persistent access by adding credentials to other applications, surviving the revocation of the original compromised credentials.
And with MSPs involved, the potential blast radius could extend even further to downstream customers.
We don't know the full extent of the compromise yet, but this could affect far more organizations than those directly using ConnectWise Cloud Backup.
linkedin.com/posts/microsoft…
Pro tip- many an IT MSP or IT break-fix will say that they know security, but it doesn’t actually mean they can do security (or, that they have any business delving into the domain beyond referring you to actual experts)
A great many security and IT products are likely to be affected due to product appliances running the OS
?
rs- retweeted
We're live now with No Agenda episode 1907 #@pocketnoagenda
pod.link/aHR0cHM6Ly9mZWVkcy5…
rs- retweeted
are mail services required to allow cyberscams to pass via low-effort spoofing of brands
@HarborFreight
@AceHardware
@HeyEpic
@gmail
Information Security’s Administrative Controls of Mandatory Vacay and Rotation or Separation of Duties, Two-Person Control, etc. help to prevent
(Not the trendiest security topic, so use caution bringing it up professionally… questions of relevance are likely- especially by those in security roles that were social or entrenched anointments)
$53,000,000 STOLEN FROM A TOWN OF 16,000 PEOPLE. 22 YEARS. 22 AUDITS. NOBODY NOTICED. SHE PICKED UP THE MAIL.
Dixon, Illinois has about 16,000 people and the boyhood home of Ronald Reagan. It also had a bookkeeper named Rita Crundwell, who by the FBI's account took 53 million dollars of taxpayer money over 22 years.
Look at how long that is. Five city councils, three finance commissioners, three mayors, and 22 audits. Roughly 200,000 dollars a month, every month, and not one person noticed.
0:22 "$53 million of taxpayer money over a period of 22 years."
0:52 "$200,000 per month over the course of all of those years."
0:57 "Rita Crundwell had almost complete control over the city finances."
1:08 "the city clerk accidentally intercepted a bank statement that came in the mail."
Here is the mechanism. She had almost complete control over the city finances, and she also picked up the city's mail, so nothing arrived that could contradict her own ledger. The control and the evidence came from the same desk.
Then a city clerk intercepted one bank statement that did not tie to any city account, and within weeks the FBI was involved. Twenty-two years of silence ended with one piece of paper that arrived in the wrong hands.
Read that against the four stages. A small failure nobody escalated. Concealment that grew routine. Compensation, because the lifestyle kept demanding more. And a reveal that was not a market event at all, just a statement that did not reconcile.
And note who the dangerous person turned out to be. Not a stranger, not an outsider. The farmer's daughter who had everyone's trust, was friendly, and could put her hands on any document in seconds. Control weakens exactly where it should be strongest.
are mail services required to allow cyberscams to pass via low-effort spoofing of brands
@HarborFreight
@AceHardware
@HeyEpic
@gmail
rs- retweeted
We're live now with No Agenda episode 1906 #@pocketnoagenda
pod.link/269169796/live/TkEt…
🤖 Made with AI
rs- retweeted
I will be on on the No Agenda Show again this Thursday. That is if the talent booker @adamcurry remembers.
The echo may or may not be fixed by then.
Don't forget to donate.
ITM!
@NA_Announce
ai is accelerating peak-vulnerability- on its way to finite and exhaustive testing of all products, components, code
Cyber is having a moment
Across 21 major software companies, including Apple, AWS, Microsoft, and Google:
- Reported critical vulnerabilities never cleared 100 per month in four years
- Since spring they've jumped to over 600 per month
Charts of the Week: a16z.news/p/chart-of-the-wee…
