Skip to main content

Items tagged with: InfoSec

Search

Items tagged with: InfoSec



The problem Aral is that US news is *searching hard* to demonstrate phishing attacks, keylogging, and backdoors / OS malware as somehow issues with #signal. Just saw an NBC piece that was atrocious where they blamed bogus QR codes as somehow a Signal problem. They'll find #infosec people to either scramble the facts or talk about phishing and be taken out of context.


“If these idiots are accidentally roping in the editor of the Atlantic on secret war deliberations, what are the chances they’re making other serious information-security mistakes, including ones that create openings for foreign intelligence agencies? Probably pretty high.” #trump #infosec #signal

thebulwark.com/p/high-cost-of-…


#SignalGate #USpol #Infosec

I'd like to reply to that with the following quote from #PeteHegseth himself:

mastodon.social/@flexghost/114…


Remember when Pete Hegseth said anyone reckless with sensitive government information should be fired on the spot and criminally prosecuted?

Pepperidge Farm remembers.

#ButHerEmails



If you also use BlueSky I have provided you a Short Stack there:

tisiphone.net/2025/03/25/blues…

It is mostly a duplicate of the Short Stack here:

tisiphone.net/2025/03/18/updat…

These are intel-ish news feeds mostly consisting of people who post a lot of relevant articles, commentary, and punditry. tldr; follow these and keep updated on cyber stuff.

#cybersecurity #infosec


Moral of the story: be sure to first sweep your hot cars for any AirTags, LowJacks, etc #privacy #InfoSec

[…] detectives used GPS on a [stolen] car identified during the robberies to trace it back to a meeting spot used by the group. [who] would […] move “large pry bars and jaws of life tools” into stolen vehicles used in the robberies while intentionally leaving their cellphones [behind] to avoid being caught. They returned to the meeting locations.

washingtonpost.com/dc-md-va/20…


Federal Judge Deborah L. Boardman has blocked #DOGE / #OPM from accessing large swathes of data at the Depts of #Education & #Treasury, ruling that DOGE has no right under the #Privacy Act to unjustified access to large-scale amounts of personal identifying information.

#law #USpol #Trump #Musk #InfoSec
storage.courtlistener.com/reca…


December 2023: US District Attorney Jessica Aber indicts 4 Russians for war crimes in #Ukraine

September 2024: US District Attorney Jessica Aber indicts Russian cryptocurrency money launderer / cybercriminal #SergeyIvanov

November 2024: US District Attorney Jessica Aber accuses Virginia based companies of running "three different schemes to illegally transship sensitive American technology to Russia," including sending equipment to a Russian telecommunications company linked to the #Kremlin and Russia's notorious #FSB security agency.

March 2025: Former US District Attorney Jessica Aber found dead at age 43

More: newsweek.com/jessica-aber-deat…

#Putin #VladimirPutin #JessicaAber #Russia #UkraineWar #Virginia #Vapol #crime #alexandria #TrueCrime #uspol #eupol #eu #AsifRahman #infosec #ransomware #cybersecurity


…As the #Trump admin’s war on the federal bureaucracy throws key agencies into #chaos, CISA’s turmoil could have underappreciated consequences for #NationalSecurity & #economic prospects. The agency, part of #DHS, has steadily built a reputation as a #nonpartisan source of funding, guidance, & even direct defensive support for #cities, #businesses, & #nonprofits reeling from #cyberattacks.

#InfoSec #NationalSecurity #Musk


Inside #CISA, vital support staff are gone, international partnerships have been strained, & workers are afraid to discuss #threats to #democracy that they’re now PROHIBITED from countering. Employees are even more overworked than usual, & new assignments from the admin are interfering w/important tasks. Meanwhile, CISA’s temporary leader is doing everything she can to appease #Trump, infuriating employees who say she’s out of touch & refusing to protect them.

#InfoSec #NationalSecurity #Musk


Apple patched CVE-2024-54471, a macOS vulnerability that allowed NetAuthAgent to leak file server credentials and iCloud API tokens due to missing sender verification. Update to macOS 15.1, 14.7.1, or 13.7.1 to stay protected.

wts.dev/posts/password-leak/

#macOS #CyberSecurity #Apple #InfoSec


This dumb password rule is from Hetzner.

- 8 or more characters
- At least one uppercase and one lowercase letter
- At least one number or special character

Okay, fair enough, but after putting in a password with some special characters this message appears:
- Invalid characters, allowed are: A-Z a-z 0-9 ä ö ü ß Ä Ö Ü ^ ! $ % / ( ) = ?...

dumbpasswordrules.com/sites/he…

#password #passwords #infosec #cybersecurity #dumbpasswordrules