Interlock ransomware gang exploited Cisco firewall zero-day weeks before disclosure: Amazon via @jgreig.bsky.social & @therecordmedia.bsky.social

Malicious Chrome extension brings its own JS interpreter to bypass Chrome's MV3 limitations www.okta.com/blog/threat-...

We've removed the paywall from this guide so everyone can access it. 👇 Stay safe.

“Android users can detect Catwatchful, even if it is hidden from view, by dialing 543210 into your Android phone app’s keypad and then hitting the call button. If Catwatchful is installed, the app should appear on your screen.” techcrunch.com/2025/07/02/d...

NEW: President Trump moved Tuesday to punish a law firm for providing pro bono legal services to Jack Smith as he prepared to face a potential investigation from the Trump administration. He is stripping security clearnces and govt funding from the firm. www.politico.com/news/2025/02...

It is perfectly legal to know your rights and to educate others about them, too. EVERYONE in the United States, citizen or not, has rights. I will not allow this administration to intimidate us from helping you know about them. Here’s our shareable guide ⬇️: (pt. 1/2)

NEW: The chief information officers of at least three major government agencies have been replaced by Silicon Valley executives, including from Palantir and Elon Musk's SpaceX.

I have one caller confirmed, and another pending. Looking to fill the last slot for next Friday afternoon!

And here's the link to EFF's security guides again. The trick about digital security that most people learn the hard way: You learn your threat model is worse than you know about 8 months too late. 😬 ssd.eff.org

+100 points for prompt injection goes to @mcuban.bsky.social

Friends, FBI has responded to my FOIA request for Kevin Mitnick's files, and have made them available to everyone via the FBI public portal here: vault.fbi.gov/kevin-mitnic...

Let's Encrypt has announced plans to start issuing TLS certificates with a maximum lifespan of just six days. The new certs are coming next year. letsencrypt.org/2024/12/11/e...

Person makes website that lets you take selfies through NYC's network of traffic cameras. NYC Department of Transportation sends cease and desist. Creator sticks the cease and desist to a pole and holds it up to one of the cameras to take a photo of it www.404media.co/traffic-cam-...

Discord added a BlueSky account linking feature and I can set roles in my server to require accounts here 😏

If you want to understand why healthcare pricing is horrific, the first thing to know is that our system puts 100% of the credit risk for deductibles, copays and co-insurance on hospitals and doctors. That's insane. We have turned them into Sub Prime Lenders 🧵

Omg my database building and api monitoring bot is so insanely amazing now I worked so hard on it for too long to refactor and it’s so much better and useful now and I am so excited and omgomgomg

New from 404 Media: Bluesky may have said it won't use user data to train generative AI, but someone else just published a dataset of million Bluesky posts for "machine learning research". Already very popular dataset, your data may be scraped www.404media.co/someone-made...

I wish them great luck and great success in breaking their bounds

I am currently refactoring and editing my CVE tracking infrastructure projects and there may be short service outages while I move hosts next week Bot for here shouldnt be affected more than any outage before, and I will be closely monitoring. Will keep you posted 🙂 @cve-notifications.bsky.social

My static html website went down Thursday because I tried to integrate an API I built into it and murdered it dead with certificate shenanigans So I built a React app now that is => the old one with a lot of plans for further improvements and it’s live now and what am I doing with my life send skeet

Just gonna throw this out there…you’re a douchebag if you hack a ventilator. Full stop.

Almost 6 months old now, over 14k CVEs, and over 100 followers (+10x my account 😂)

www.vice.com/en/article/d... Important, now more than ever.

I will fight them with knives.

This is a crazy bug; CIS would have saved you though :)

If you work on the AT Protocol, including the documentation, I just want to say thanks. Your work is important and so are you.

State Dept: '$10M for info on Russian propaganda group Rybar.' Rybar admins sweating as they realize their spicy Kremlin memes might be worth more than their annual salary. Time to see if loyalty to the Motherland pays better than cash rewards. cyberscoop.com/rybar-russia...

there's also a helpful setting in Settings > Accessibility that can help remind you. you'll have to set it on each client/device you're on, though

Hi new Bluesky users. Semi-annual reminder to follow my favorite part of this website: the Gift Links feed. It shows any free link to an otherwise paywalled article that’s shared by anyone on Bluesky. It has legit changed how I read the news. bsky.app/profile/did:...

This article makes it crystal clear why you should be supporting the @archive.org if you’re not - it’s absolutely vital. (And FTR I’m a supporter.)

Welcome new Bluesky users. This is the official Bluesky account of the United States Consumer Product Safety Commission.

Scoop: Anonymous Sudan, an extraordinary cyberattack for hire gang, has been taken down by the US and unnamed other governments after in-depth investigations by U.S. companies that lost millions to the gang's work. GIFT LINK: wapo.st/3BMTlF2

Alright, noted… add error email notifications to python scripts cause my bot is posting like 1200 CVE’s from the last 10 days rn and i am so sorry lol

We wrote a thing

PayPal is updating their ToS to let themselves give your data to merchants starting in November and they're certainly banking on people not knowing to opt out, SO to opt out before they start: go to Settings > Data & Privacy > Manage shared info > Personalized shopping, and toggle that shit off

NEW: The U.S. government has indicted five Russian government hackers, and one civilian, accusing them of targeting multiple Ukrainian government agencies, an unnamed U.S. government agency, and 26 NATO countries. techcrunch.com/2024/09/05/u...

My bot is about 3 months and 1 week old and has posted over 7,000 CVE’s since launch. As far as I know, it is the 1st bot on Bluesky designed for timely CVE notifications including their severity. I worked crazy hard on it and I am so happy that people find it useful ❤️ bsky.app/profile/cve-...

CrowdStrike is the reason everyone in America learned the terms "Fancy Bear" and "Cozy Bear" in 2016 instead of what they actually were, Russia's GRU and SVR agencies respectively. My understanding is today's events are God's belated wrath.

ID: CVE-2024-5321 CVSS V3.1: MEDIUM A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs. #security #infosec #cve-alert

First time I have seen a none, I thought my bot was broken 😂

This CVE is interesting, number assigned in 2022, initial publication according to AMD was 6-11-24. I wonder what the story is. Reported by Oracle researcher, AMD couldn't patch until now? Who knows! Check for BIO's updates AMD peeps. #amd #gaming #development #security www.amd.com/en/resources...

@pfrazee.com hey duder, is there anyway to make the tag's real hashtags via the api? im basically doing text_builder.tag( 'thing' ) which does add a hash to the front via api, but it is not like a hashtag on the normal posts. I am not sure if this feature isnt working yet via api, or if i am wrong?

I am very close to finishing a security project that I have been laboring on for the better part of a week and a half. I may or may not share more later, but if I have some free time this week, it should be done. It includes some neat tricks, and I have a lot of plans for the future. See you soon :)

LASD deputies have been forming their own violent criminal gangs--complete with tattoos--for some time, often with little or no consequence to them. This particular deputy gang picked a fight with teenagers in a bowling alley parking lot after a night of drinking. www.latimes.com/california/s...