@rjmacfarlane

Associate Professor Cyber Security, Edinburgh Napier University. Course Leader for NCSC certified MSc Cyber Security courses. CSC @SecScotland Moderator.

napier-repository.worktribe.com/person/110757/rich-macfarlane
Joined November 2011
  • Tweets4.2K
  • Following1.1K
  • Followers1.5K
506Media
🎂👨‍🎓Our #MScASDF in Cyber Security is 10 years old this year... from 2009 working on the first modules with @billatnapier @DrJamieGraves & Lionel... teaching practicals in new virtual environments... one of the first courses to be @NCSC accredited in 2014... @ComputingNapier
2
8
5
37
That’s a header 🤷‍♂️
209
151
52
2,067
241,983
There's only 7 days remaining until Le Tour Du Hack 2026! Tickets are still available at ltdh26.eventbrite.com while stocks last! @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
ltdh26 one week left

ALT ltdh26 one week left

3
3
133
Studying cyber security? Or are you considering it? Come along to Le Tour Du Hack 2026! Tickets are available at ltdh26.eventbrite.com while stocks last! @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
ltdh26 ticket reminder

ALT ltdh26 ticket reminder

1
75
Only two weeks left until Le Tour Du Hack 2026! Watch this space; we'll soon start dropping info about our speakers... Tickets available at ltdh26.eventbrite.com while stocks last! @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
ltdh26 two weeks left

ALT ltdh26 two weeks left

2
1
116
Studying cybersecurity? Whether you're a first year or approaching graduation, Le Tour Du Hack 2026 has something for everyone! Get your tickets now at ltdh26.eventbrite.com while stocks last! @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
ticket reminder cyber students

ALT ticket reminder cyber students

1
1
79
As our first sponsor for Le Tour Du Hack, we are thrilled to announce @Bugcrowd as a silver sponsor for LTDH 2026! #LTDH26
Meet the spinsor

ALT Meet the spinsor

Bugcrowd

ALT Bugcrowd

Socials

ALT Socials

2
3
1,170
Only 3 weeks left until Le Tour Du Hack 2026! If you still need a ticket, head over to ltdh26.eventbrite.com Or, if you want to know more, ltdh.enusec.org/ has everything you need to know! @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
ltdh 26 ticket reminder

ALT ltdh 26 ticket reminder

1
66
Times almost up to get your talk proposals in for Le Tour Du Hack 2026. We’re still accepting proposals for talks for LTDH26 but only for the rest of the week. Be sure to get in touch, we’d love to hear from you.
CfP Last call

ALT CfP Last call

3
1
123
Do you know your stuff? Come and give a talk at Le Tour Du Hack 2026! Please submit your talk at speak.enusec.org/ Submission deadline is 27/04/26! @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
LTDH 26 call for speakers

ALT LTDH 26 call for speakers

5
5
293
You don't need to be an experienced speaker to talk at Le Tour Du Hack 2026! Short slots of 15 and 30 minutes are available! Submit your talk now at speak.enusec.org @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
LTDH 26 call for papers reminder

ALT LTDH 26 call for papers reminder

2
3
88
Rich Macfarlane retweeted
The Hacker News
@TheHackersNewsApr 9
⚠️ Attackers are exploiting a 0-day in Adobe Reader via malicious PDFs. Opening the file runs hidden JavaScript to steal data and stage further exploits, including possible RCE. It works on the latest version & has been active since Dec 2025. 🔗 Read → thehackernews.com/2026/04/ad…

Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

Adobe Reader zero-day exploited since Dec 2025 via malicious PDFs, enabling data theft and potential RCE, prompting urgent security vigilance.

thehackernews.com
13
90
6
214
29,392
Are you a student looking to explore career paths? Come along to Le Tour Du Hack 2026! Buy your tickets now while stock lasts at ltdh26.eventbrite.com/ @EdinburghNapier @EdNapierSCEBE @rjmacfarlane @billatnapier @BasilonCyber
LTDH 26 ticket reminder

ALT LTDH 26 ticket reminder

5
4
525
Significant attack... several supply chain attacks recently, but this looks like a sophisticated attack, possibly APT grp behaviour. Unsure on how they compromised the developer, and looks like they were executing malware to perhaps prepare for future attacks...
The Hacker News
@TheHackersNewsMar 31
⚡ WARNING - Axios npm (83M weekly downloads) was compromised, turning installs into a malware delivery path. Versions 1.14.1 and 0.30.4 pulled a fake dependency that dropped a cross-platform RAT, then erased evidence. Published using stolen maintainer credentials. 🔗 What happened and how the attack worked → thehackernews.com/2026/03/ax…
90
Rich Macfarlane retweeted
The Hacker News
@TheHackersNewsMar 3
⚠️ 600+ FortiGate devices breached in an AI-assisted campaign. Team Cymru traced it to #CyberStrikeAI, an open-source Go tool bundling 100+ security utilities, run from 21 IPs across Asia and beyond. The maintainer shows ties to #China’s vulnerability ecosystem. 🔗 Details → thehackernews.com/2026/03/op…
5
68
5
201
24,728
Rich Macfarlane retweeted
The Hacker News
@TheHackersNewsFeb 27
🔥 You can now ask Kali Linux tools in plain English — powered by Anthropic Sonnet 4.5. Through MCP, Claude SSHs into Kali to run tools like nmap, gobuster, nikto, hydra, sqlmap, metasploit, john, wpscan, enum4linux-ng, checks dependencies, and returns results in-app. 🔗 Read about it here → thehackernews.com/2026/02/th…
43
292
27
1,624
186,337
Rich Macfarlane retweeted
BleepingComputer
@BleepinComputerFeb 27
APT37 hackers use new malware to breach air-gapped networks - @billtoulas bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

APT37 hackers use new malware to breach air-gapped networks

North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.

bleepingcomputer.com
2
38
1
83
9,926
Rich Macfarlane retweeted
GreyNoise
@GreyNoiseIOFeb 27
GreyNoise observed a coordinated campaign probing SonicWall firewalls to identify which devices have SSL VPN enabled — the prerequisite step before credential attacks. Four infrastructure clusters, a commercial proxy service rotating thousands of IPs, and near-zero exploitation. This is target mapping. 🔗greynoise.io/blog/active-rec…
2
11
26
3,357
Rich Macfarlane retweeted
SecurityWeek
@SecurityWeekFeb 23
Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS securityweek.com/hundreds-of…

Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS

Threat actors relying on AI have been exploiting exposed ports and weak credentials to take over FortiGate devices.

securityweek.com
7
22
2,522
Rich Macfarlane retweeted
The Hacker News
@TheHackersNewsFeb 10
🚨🛡️ Fortinet Fixes Critical FortiClientEMS RCE (CVE-2026-21643, CVSS 9.1). SQL injection flaw enables unauthenticated remote command execution via crafted requests. Affects EMS 7.4.4 (patch available). 🔗 See affected versions and patch guidance → thehackernews.com/2026/02/fo…

Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution

Fortinet fixes critical FortiClientEMS SQL injection flaw (CVSS 9.1) enabling code execution; separate SSO bug actively exploited.

thehackernews.com
5
51
3
131
38,797
CyberVolk’s ransomware debut stumbles on cryptography weakness - @billtoulas bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

CyberVolk’s ransomware debut stumbles on cryptography weakness

The pro-Russia hacktivist group CyberVolk launched a ransomware-as-a-service (RaaS) called VolkLocker that suffered from serious implementation flaws, allowing victims to potentially decrypt files...

bleepingcomputer.com
10
2
30
8,060
Load more