@southflpalace.bsky.social Are there any good CPFC bars near Miami to watch the Community Shield next weekend?

AI model logics flaws are the new open S3 buckets

On vibe coding:

The sheer stress of my dyscalculia brain having to enter the right MFA code before it rotates

Billion-dollar cyberscam industry spreading globally, UN says www.reuters.com/world/china/...

Use one of our exercise templates to test your response to an attack on one of your key SaaS providers that could for instance cause an outage of one of your important business services. www.linkedin.com/posts/lisa-f...

Hacktivism is back – but don't be fooled, it's often state-backed goons in masks

Infosec people: anyone know how to tag critical assets in S1 Singularity SIEM? Any docs on this?

This is one of the few things DOGE is looking to blow up I have very direct personal experience with and HOO BOY if they mess with NIST American manufacturing isn’t going to recover in my lifetime.

👇!!!!! The most insider of insider threats! Remember, during the 1st term, the counterintel folks kept finding Stingers attached to cell towers & other structures near the White House because everyone was trying to collect on Trump's calls using his unsecure personal cell phone. This is even worse.

Does anyone use MailEnable? Is it trustworthy? #infosec #IT

My friend’s business got spammed by horrendous & false Google Reviews, and Google took his company off Maps & Reviews entirely. This is a huge hit on his business. He’s already appealed to Google, but not getting any response. Anyone know what he can do??

Guess it's time to work on irresponsible and unsafe AI

Equality isn’t women talking about women in cyber it is women talking about cyber.

Podcast: risky.biz/RBNEWS393/ Newsletter: risky.biz/risky-bullet... -Trump administration stops treating Russian hackers as a threat -Meta seeks permanent NSO ban -New Cellebrite 0-days come to light -3rd-party breaches are now a headache for cyber insurers -WazaWaka and Ermakov get home detention

Keep speaking up about shoddy security and privacy practices. Keep going. This doesn’t exactly feel like a “win” for privacy but it at least indicates we can, at times, vote with our voices and our consumer choices. thehackernews.com/2025/03/mozi...

ICYMI, I explained Apple's big new update for parents coming later this year, and why it may be a breakthrough in the fight over kids' online safety: youtu.be/iydHkvk5xmw

Volodymyr Zelensky's Oval Office visit ended early when Donald Trump and JD Vance began angrily yelling at him. Here's why women like Kamala Harris and Hillary Clinton are too emotional to be president.

This is why I do NOT link SIGNAL to any device! It's on its own! :D

If you give a mouse a browser cookie…

Scoop: The databases powering DOGE.gov are insecure, and people outside the government have already pushed their own updates to the site to prove it: www.404media.co/anyone-can-p...

Newspaper headline from 1915: "Constant Surveillance Has Depressing Effect"

Rut roh www.csoonline.com/article/3820...

I will never admit how many times a day I google “synonym for ____” while writing security reports

PSA 📢 Mozilla’s offline reader Pocket gives you access to complete Wired articles 🎁

So will this teach us to stop deprioritizing infrastructure/ network security for feature development? Will anything?

Johannes Bader has released Rösti (Repackaged Öpen Source Threat Intelligence), a tool that scans infosec reports and extracts IOCs and YARA rules rosti.bin.re

Just imagine how many insider risk cases you’d be dealing with if your company had this “deferred resignation” thing the US govt is doing

volunteering or anything task-centric is a great way to break out of isolation without having to make a big effort to talk to people. you just show up and do the thing. and also you’re helping make one small corner of the world a little better

New: SonicWall says hackers are exploiting a new zero-day bug in one of its products to breach corporate networks. This is the latest in a long list of bugs in security products that allow the hacking of big networks, which these devices are tasked with protecting. techcrunch.com/2025/01/27/s...

Good write-up on cybersecurity focus at the World Economic Forum by Dan Lohrmann: www.govtech.com/blogs/lohrma...

If your reaction is “lol why now” you are correct. By leaving this til the last minute, the SEC is handing the mess to the incoming administration, letting Trump decide whether to pursue a case against a top donor www.nytimes.com/2025/01/14/t...

CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List

Well, she can fucking try. And it’s a low bar since it could not be worse than the current boneheaded management.

CISA orders federal agencies to secure Microsoft cloud systems after ‘recent’ intrusions

Tic TAC Alert: A Remote Code Execution Vulnerability in Medical Imaging

San Francisco: do you want to learn more about ICS incident response, SOC, and threat hunting? I will be teaching SANS ICS515: ICS Visibility, Detection, and Response in person and virtual next month. Sign up: https://www.sans.org/cyber-security-training-events/san-francisco-winter-2025/

Typeface of the moment: Times New Dumbass timesnewdumbass.co

Podcast: risky.biz/RBNEWS370/ Newsletter: news.risky.biz/risky-biz-ne... -Declassified documents reveal Russia's election info-ops in Romania -Salt Typhoon telco hack count reaches eight -Another Scattered Spider member detained -Turla hacked 6 other APTs -Iranian hackers target FBI director pic

🚨 Breaking: White House official Anne Neuberger reveals Salt Typhoon hacking campaign has compromised at least 8 US telecom providers - far more extensive than initially reported. Campaign impacts dozens of nations.

Inherited permissions can be risky. Just think about all the annoying traits you got from your parents.

I say “please” and “thank you” to GenAI. I can’t help it and won’t stop.

What are the best starter packs you’ve found?

my favorite Tech Tip is to let all the black friday emails pile up today, and then use gmail's "promotions" tab to select-all and unsubscribe. it's the best day of the year to catch 'em all