Catalin Cimpanu / is on Nostr

Cybersecurity reporter for Risky Business

#infosec #cybersecurity #security

Newsletter:: https://news.risky.biz/
Podcast:: https://risky.biz/

Last Notes

2024-07-21 16:26:01

- reply

https://x.com/techAU/status/1814919887267242391

2024-07-21 16:24:09

- reply

just saw it earlier... gimme 5

2024-06-06 14:16:51

According to reports from the New York Times and Haaretz, the Israel Ministry of Diaspora Affairs paid a private company named STOIC $2 million for a social media influence campaign that targeted US politicians. (1/2)
https://www.nytimes.com/2024/06/05/technology/israel-campaign-gaza-social-media.html
https://www.nytimes.com/2024/06/05/technology/israel-campaign-gaza-social-media.html

2024-06-05 01:11:43

- reply

important note here: contrary to what Microsoft has stated. They pretend like Recall data is inaccessible

2024-06-04 17:15:51

Security researcher Alexander Hagenah has released TotalRecall, a tool that extracts and displays data from the Recall feature in Windows 11.
https://github.com/xaitax/TotalRecall
https://files.mastodon.social/media_attachments/files/112/559/479/057/254/936/original/e05fb804e08cd64c.png

2024-06-04 01:34:41

Mobile operating system GrapheneOS is adding support for a duress password.
The feature will allow users to set a special password that deletes all their data when entered.
GrapheneOS says the duress-initiated wipe does not require a reboot and cannot be interrupted.
https://grapheneos.org/features#duress

2024-05-30 19:56:09

Microsoft not saying a peep about the Recall privacy scandal is a huge tell of how much the company is focused on security
We should have had a statement by now that Recall is either re-engineered or removed

2024-05-22 17:21:32

Just think about it!
In just 14 days, Microsoft pivoted from "do security" in an internal memo on May 5 to "let's install spyware on everyone's PC" on May 21.
That must be a world record in bad corporate management

2024-05-16 18:12:51

NetBSD follows Gentoo and bans AI-generated code
"Code generated by a large language model or similar technology, such as GitHub/Microsoft's Copilot, OpenAI's ChatGPT, or Facebook/Meta's Code Llama, is presumed to be tainted code, and must not be committed without prior written approval by core."
https://www.netbsd.org/developers/commit-guidelines.html

2024-05-12 12:28:10

Is Gmail useless these days? I keep marking domains as spam, yet they're back the next day in my inbox with literally the same email/domain I marked as spam a few hours ago

2024-04-21 00:50:24

Minecraft RANDAR exploit lets you find the in-game location of any player by looking at how pieces of a broken block fall
Write-up: https://github.com/spawnmason/randar-explanation
Video: https://www.youtube.com/watch?v=maMpMOnIJDE
https://files.mastodon.social/media_attachments/files/112/306/462/035/554/392/original/5d67b50cdef747be.png

2024-04-17 23:08:10

Gentoo has banned AI-generated code
https://www.mail-archive.com/gentoo-dev@lists.gentoo.org/msg99042.html

2024-04-16 19:14:21

A Russian court has sentenced an FSB officer to nine years in a maximum security penal colony.
Russian authorities say Grigory Tsaregorodtsev took a bribe of $1.7 million from the Infraud cybercrime group.
The bribe was to arrange the group's release from prison and dismissal of their criminal case.
The court also fined Tsaregorodtsev with double the bribe he took.
The Russian state will also confiscate his gold bars, real estate, and expensive cars.
https://www.kommersant.ru/doc/6649351

2024-04-06 23:26:59

The developers of the Notepad++ text editor have asked users to help report a new website impersonating its brand and ranking high in search results
https://notepad-plus-plus.org/news/help-to-take-down-parasite-site/

2024-03-28 18:07:25

The US Federal Communications Commission is asking for public comments on how to telcos should approach securing the Signaling System 7 (SS7) and Diameter protocols.
Both protocols have been abused over the past years to track users' locations through their mobile devices.
https://www.fcc.gov/document/pshsb-seeks-comment-implementation-security-protocols

2024-03-28 00:12:18

JetBrains has rolled out a new TeamCity feature that will automatically download critical security updates.
>>>>>>>>> "This approach helps to keep your system fortified against emerging risks and to swiftly tackle major vulnerabilities. Note that after an update is downloaded automatically, a system administrator still needs to approve its installation."
https://blog.jetbrains.com/teamcity/2024/03/teamcity-202403/