
#CIO #CISO. CEO of TCE Strategy. Technology and #cybersecurity advisor. Professional speaker and #author of "Secure Enough? 20 Questions on Cybersecurity".
Minneapolis, MN
Joined October 2008
- Tweets9.6K
- Following707
- Followers1.3K
- Likes873
"'It does not appear that a customer can buy a new car that does not track you.' To find out what kind of driver data was being collected, and by what companies, the team of privacy researchers from Northeastern University tested 21 vehicles and..." buff.ly/GBiaPgA
This is genuinely a big deal. Patch PHP on your website NOW. Like, right now. Immediately. buff.ly/stvmh0C
This is another very novel attack vector. CAPTCHA screen that trick you into installing malware. Yikes... buff.ly/2x7oRUf
AI was caught submitting tips on a murder case. This is not good. "One [Anthropic AI] agent submitted a tip to the Philadelphia Police Department about an unsolved homicide despite having no information about the case." buff.ly/7fU7TJl
Warning, WSJ paywall: The case highlights a harsh reality for the growing number of Americans left financially devastated by scammers: Even when the government is able to seize stolen crypto, with no clear standards around who gets what, the recovery..." buff.ly/RptNj7X
Warning, WSJ paywall: “There’s more money being stolen with that phone than there’s ever been with a gun.” buff.ly/9a6xXna
1400 vulns addressed one actively exploited zero-day fixed. Patch early, patch often. buff.ly/qoAoIZ6
"The complaint alleges that Reiber repeatedly asserted that the company traced its ownership to Cyprus when in fact Davydov and additional Russian nationals owned and controlled the company." buff.ly/paWWUBk
"The data breach is thought to be the biggest in the country’s history. It follows similar cyberattacks targeting government national identity databases, including a 2016 breach affecting millions of Turkish citizens and several exposures of..." buff.ly/QHmn9bm
"This hacking operation, dubbed QTFY by U.S. officials, has been run since 2018 by a private company based in China, called Nanjing Xinjiuwei Network Technology, which sells access to hacked networks and stolen information to..." Warning, WSJ paywall. buff.ly/E2E5xLl
It had never occurred to me to use a defrost cycle to attack the food supply. Apparently it did for these cybercriminals. buff.ly/yooFsFP
"When their targets refused to send them money, they coerced them into making the payments using various manipulation tactics, including threats of publishing sensitive photos of the victim online." buff.ly/t7Kcz6l
"To their surprise, these tokens were valid on ChatGPT, and some of them belonged to OpenAI employees. The tokens could also be used to access OpenAI’s GitHub service, a software repository." buff.ly/DBAOQ7P
Want to know more about the inner workings of a Flock camera? Here is a very interesting look by unknown hackers and WIRED on the inner workings of the cameras. buff.ly/j0o3CjF
"On a macOS browser, your-domain[.]com showed a fake "MacOS Security Center" claiming 4 viruses & selling a counterfeit McAfee renewal at 55% off. On another macOS render, yoursite[.]com showed a counterfeit ZDF article advertising an investment scheme." buff.ly/IiUrFnF
"In our test tenant, every sign-in completed normally while our server received passwords with timestamps and source IP addresses. Resetting a captured password did not remove the rogue provider. It remained in the authentication flow and captured the..." buff.ly/kU5JkiD
"Using the stolen credentials and spoofed email addresses, the men redirected payments to and from victims into bank accounts they controlled. The men were stationed at Dover, Delaware Air Force base when they conducted the scams." buff.ly/xt2ukjx
"Cryptographers have worked furiously in recent years to devise alternative cryptosystems that aren’t vulnerable to quantum computing attacks. The new attack will further increase the urgency of completely moving away from the cryptosystem." buff.ly/ZjuEf40
Glad to see a level of responsibility in this, but what's stopping other companies that care less about safety from publishing their questionable models? buff.ly/sV5WEMK
This will be a landmark case, no question about it. Interesting that Hugging Face did not initiate it. buff.ly/xvjliUJ













