Nobody is immune from phishing attacks. Not even Signal users. Signal has published a good article warning about phishing risks on their platform. Remember to always setup a Signal username instead of sharing your phone number. support.signal.org/hc/en-us/art...

Using AI to process sensitive files?it happens also to the best (clowns). #US #infosec #AI www.politico.com/news/2026/01...

As the year wraps up, here’s a roundup of the year’s worst, weirdest, and most impactful data breaches. Enjoy the break and keep your infosec antennas up during the holidays. www.eff.org/deeplinks/20...

Welcome to the US. But first, hand over your social media life. www.theguardian.com/us-news/2025... #usa #trump #tourism

Yesterday’s event with Trump and Mohammed  bin  Salman was already a horror show, and it got even worse when it was followed by a dinner with the tech bros, Cristiano Ronaldo, and a whole crew of suck‑ups. www.nytimes.com/2025/11/18/u...

In the new multi-channel social engineering landscape, LinkedIn is one of the main breeding grounds for phishing attacks. This article, even if biased given its sponsor, gives a good overview of the risks. www.bleepingcomputer.com/news/securit... #socialengineering #phishing #infosec #linkedin

Very good article by the excellent Cory Doctorow about how digital activism and climate activism actually have a ton in common - really interesting connections between the two movements and how they’re tackling similar challenges. #climate #environment #activism doctorow.medium.com/https-plural...

Germany has committed to oppose the EU’s controversial “Chat Control” regulations which means most likely that this law will not be accepted by the EU council next week. Germany’s position was influenced by huge pressure from multiple activists.  www.theregister.com/2025/10/08/g... #infosec

Sora and AI generated videos are a game changers in terms of mis/disinformation: they are making it impossible to trust what we see in videos—deepfakes are now mainstream and everyone needs to be skeptical. #ai #deepfakes #sora #openai #disinformation www.nytimes.com/2025/10/09/t...

Geeez…. The US administration is really running out of funds. They don’t even have enough money to buy privacy screens. www.theguardian.com/us-news/2025... #infosec #shouldersurfing

The EU “Chat Control” law would scan everyone’s messages, breaking encryption and risking digital rights for all—kids included. Experts & civil groups say it’s dangerous. Sign to stop mass surveillance: crm.edri.org/stop-scannin...

Original post: mastodon.archive.org/@internetarc...

Attackers move beyond email-based phishing, personal accounts (messengers, social media, etc.) are being targeted more often than work ones and regular phishing campaign trainings might create a false sense of security. #phishing #socialengineering #infosec www.bleepingcomputer.com/news/securit...

Amazing news in the activism and human rights world edition.cnn.com/2025/09/22/m...

GPS jamming at work… www.politico.eu/article/ursu...

And now… Bad bad UK!! Cracking down on VPNs is a horrible idea. gizmodo.com/uk-official-...

Well done UK (although it took US pressure…) www.theverge.com/news/761240/...

📣 Are you aware of journalists being harassed at immigration courts? Officers photographing them or their press badges? Being asked to sign in when others aren't? @freedom.press and our partner organizations want to know about it. Reach out on Signal to ssugars.01 or via DM.

Imagine if AI chatbots’ popularity had started just before COVID… futurism.com/man-poisons-...

Nobody is immune to deepfakes, and definitely not the current US administration www.theguardian.com/us-news/2025... #ai #infosec #deepfakes #marcorubio #socialengineering

Very good article by @micahflee.com about using Signal groups for activism. Some new tips there like creating announcement-only groups for rapid response and using QR codes during physical meetings. micahflee.com/using-signal... #infosec #signal #activism #security #privacy

Researchers found out that recently a million SMS two-factor authentication codes and login information were intercepted!  As expected, authenticator apps or security keys are the best solution. www.lighthousereports.com/investigatio... #infosec #2FA #leaks #sms

More on how to secure your phone before a protest. www.theverge.com/21276979/pho... #protest #activism #surveillance #USA #privacy #infosec

Interesting WIRED article about how law enforcement uses facial recognition and phone tracking at protests. www.wired.com/story/how-to... #protest #surveillance #infosec #USA

New forensic research proves two Italian journalists were hacked using government spyware made by Israeli surveillance tech provider Paragon. techcrunch.com/2025/06/12/r... #spyware #paragon #journalists #italy #infosec

Frontline Defenders have updated their Guide to Protect Information while Traveling. Although the guide’s target audience is usually at-risk human rights defenders, it’s still a great article for general security guidelines. securityinabox.org/en/assess-pl... #infosec #opsec

Besos investing in Saudi Arabia, the country guilty of killing one of his journalists, is as disgusting as it sounds. #amazon #bezos #saudiarabia #mbs #ai #humanrights #kashoggi www.theverge.com/amazon/66791...

Apple sent notifications this week to several people who the company believes were targeted with government spyware. techcrunch.com/2025/04/30/a... #infosec #apple #spyware

AI has been a gift from Heaven for social engineers... www.securitymagazine.com/articles/101... #deepfakes #socialengineering #infosec

U.S. governmental visits turning deadly

A new US company, Massive Blue, is helping law enforcement agencies deploy AI-powered social media bots to interact with suspected criminals. Unfortunately this can also be used against activists… www.wired.com/story/massiv... #activism #ai #deepfakes #socialengineering

Just lovely… Spyware maker NSO, still on the US Commerce Department’s “blacklist,” has hired a new lobbying firm with direct ties to the Trump administration. www.wired.com/story/nso-gr... #spyware #nso #trump #infosec

For almost two years,Chinese hackers stole sensitive data and captured 10% of the incoming and outgoing emails of the Belgian intelligence service (VSSE). According to sources, it’s the most serious security incident ever experienced by the VSSE. www.lesoir.be/657866/artic...

I decided to "bridge" my Mastodon account to Bsky, so my posts will appear here: @gillo.infosec.exchange.ap.brid.gy If you want your Bluesky account to be discoverable on Mastodon, just follow @ap.brid.gy here on Bluesky