How about you f*** off instead
Notices by Catalin Cimpanu (campuscodi@mastodon.social)
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Saturday, 01-Jun-2024 18:17:48 JST Catalin Cimpanu -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Friday, 31-May-2024 05:25:34 JST Catalin Cimpanu Microsoft not saying a peep about the Recall privacy scandal is a huge tell of how much the company is focused on security
We should have had a statement by now that Recall is either re-engineered or removed
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Friday, 31-May-2024 04:01:56 JST Catalin Cimpanu Cloudflare has shut down accounts on its platform used by a Russian threat actor known as FlyingYeti to launch phishing attacks on Ukrainian users and organizations.
https://blog.cloudflare.com/disrupting-flyingyeti-campaign-targeting-ukraine
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Thursday, 30-May-2024 18:19:47 JST Catalin Cimpanu A coalition of international law enforcement agencies have taken down servers from multiple malware-loader botnets
Listed "victims" include:
-IcedID
-SystemBC
-Pikabot
-Smokeloader
-Bumblebee
-TrickbotLEA calls the campaign Operation Endgame: https://operation-endgame.com/
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Friday, 24-May-2024 02:46:00 JST Catalin Cimpanu More than three months after NIST stopped enriching the NVD database, the organization has yet to resume its normal activity.
93% of all vulnerabilities added to the NVD database over the last three months still lack crucial information.
According to a report from security firm VulnCheck, NIST's involvement with the NVD is slowing down, with fewer vulnerabilities processed with each passing week.
In conversation from mastodon.social permalink Attachments
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Thursday, 23-May-2024 16:45:54 JST Catalin Cimpanu Just think about it!
In just 14 days, Microsoft pivoted from "do security" in an internal memo on May 5 to "let's install spyware on everyone's PC" on May 21.
That must be a world record in bad corporate management
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Tuesday, 21-May-2024 06:49:48 JST Catalin Cimpanu Russian security firm FACCT has spotted a threat actor targeting Russian companies with a leaked version of the LockBit ransomware.
The most interesting part is that FACCT refers to the group using a "werewolf" moniker.
The werewolf term is typically used by Russian security firms to refer to state-sponsored groups.
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Saturday, 18-May-2024 21:11:38 JST Catalin Cimpanu @metacurity yeah there is.... it's called DDG
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Friday, 10-May-2024 16:50:21 JST Catalin Cimpanu This is just of the many tweets that are flooding Twitter these days praising Telegram and discouraging users from using Signal with stupid NSA and FBI conspiracy theories.
Under no scenario you should have Telegram installed on your phone. It's basically the Hulk Hogan of E2EE apps
In conversation from mastodon.social permalink Attachments
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Friday, 10-May-2024 03:38:45 JST Catalin Cimpanu LockBitSupp doing the media tour with the same boring ass "you got the wrong guy" routine that all the previous ransomware dudes attempted and failed
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Monday, 06-May-2024 00:31:27 JST Catalin Cimpanu A Prospect article argues that News of the World, a newspaper owned by Rupert Murdoch, didn't just hack the phones of celebrities and politicians to get scoops, but also stole data to help its owner's business empire commercial endeavors.
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Friday, 26-Apr-2024 18:18:27 JST Catalin Cimpanu @metacurity that's a little bit excessive 🫠
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Tuesday, 23-Apr-2024 20:08:44 JST Catalin Cimpanu @simontsui Kaspersky has said a while back they will stop doing attribution—most likely because they'd just have to attribute most groups to RU allies like Iran, DPRK, and China and they don't wanna rock the political boat.
They know exactly who this is
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Tuesday, 23-Apr-2024 15:29:27 JST Catalin Cimpanu Police chiefs from 32 European countries have called on governments and industry groups to stop tech companies from rolling end-to-end encryption (E2EE)
In conversation from mastodon.social permalink Attachments
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Sunday, 21-Apr-2024 19:10:35 JST Catalin Cimpanu Minecraft RANDAR exploit lets you find the in-game location of any player by looking at how pieces of a broken block fall
In conversation from mastodon.social permalink Attachments
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Sunday, 21-Apr-2024 05:11:40 JST Catalin Cimpanu Gentoo has banned AI-generated code
https://www.mail-archive.com/gentoo-dev@lists.gentoo.org/msg99042.html
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Friday, 19-Apr-2024 03:31:46 JST Catalin Cimpanu It has now been officially two months since the NIST NVD stopped enriching CVEs with additional metadata and details, and we still don't know what exactly happened.
According to VulnCheck's Patrick Garrity, the infosec community isn't waiting for NIST to get its business in order, and unprocessed CVEs are piling up more each day.
https://www.linkedin.com/feed/update/urn🇱🇮activity:7184577753583673344/
In conversation from mastodon.social permalink Attachments
-
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Tuesday, 16-Apr-2024 19:53:15 JST Catalin Cimpanu MGM Resorts sued the FTC to stop an investigation into how it dealt with a cybersecurity attack last year
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Tuesday, 16-Apr-2024 08:11:36 JST Catalin Cimpanu Cisco Duo discloses a data breach
In conversation from mastodon.social permalink -
Embed this notice
Catalin Cimpanu (campuscodi@mastodon.social)'s status on Thursday, 11-Apr-2024 07:01:49 JST Catalin Cimpanu The Natto Thoughts team has published a profile on APT-doxing group Intrusion Truth.
https://nattothoughts.substack.com/p/intrusion-truth-methods-how-can-they
In conversation from mastodon.social permalink