Strengthening digital security and technical excellence of Tibetan organizations via collaboration and knowledge sharing. TibCERT is a program of @tibetaction

Dharmsala, India
Joined January 2019
🚨 Tibetan communities face rising misleading content. Learn how to spot misinformation and find resources to combat it. #Misinformation #DigitalLiteracy
1
1
2
395
CRITICAL ALERT: 2 major vulnerabilities dubbed PHP2Shell (CVE-2026-109618/19, CVSS 9.2) allow unauth remote code execution in core PHP. Active exploits detected! Patch now to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35. #CyberSecurity #PHP
47
TibCERT retweeted
This is a phishing attempt. If you get this message on Signal, do not follow the instructions. Many anti-CCP activists have also received this phishing attempt. Beware and be aware.
3
46
1
84
10,395
QR phishing +146%. One scan is enough. Think before you scan. #CyberSecurity #Phishing #QRCode
1
1
124
Still using SMS codes for 2FA? Authenticator apps are faster, more reliable, and more secure against SIM swap attacks. Here’s why it may be time to switch. #2FactorAuthentication #2StepVerification #SMS #DigitalSecurity #CyberSecurity
1
90
Starting this month, Apple voluntarily tied age verification directly to your Apple ID in the UK. #Privacy #Apple #OnlineSafetyAct #DigitalRights #TechNews #UK
161
Google’s new AI update is scanning private Google Photos. Protect your sensitive documents and screenshots now: Open Photos > Settings > Preferences > Turn off Gemini/AI access. Don't see the menu? The rollout isn't there yet. #Gemini #Privacy
1
84
7/ Turns out, #GLITTERCARP is targeting all over Uyghurs, journalists, activists from Hong Kong like @carmenkamanlau, Tibetan orgs, journalists with @ICIJorg , Taiwanese groups etc. Their tactics & tricks vary depending on context, and boy are they persistent. Huge thanks to groups like @tibcert & victim orgs for helping to surface this targeting
1
4
18
1,316
NEW: we caught 🇨🇳Chinese hackers... again. Twist: they're hacking journalists & activists, but we suspect they're private contractors. State repression... with a profit margin. Thread + how to protect yourself 1/ By us @citizenlab in collab w/@ICIJorg
6
188
6
469
45,169
Browser extensions provide useful add-on tools to enhance our browsing experience, but not every extension is built to serve its users. In fact, many are designed to steal personal information. #browsersecurity #browserextension #onlinesecuritytips bleepingcomputer.com/news/se…
41
Tech Update: LinkedIn found to be secretly scanning your profile via your browser extensions. cybernews.com/privacy/linked…
54
AI isn't just for fun — it's also a new favourite tool for scammers. Learn all about AI voice clone phishing and how to defend against it in our latest blog. Link in bio! #VoiceCloning #SecurityTips #BlogPost
1
3
1
4
1,314
India bans Chinese CCTV giants #HIKVISION and #Dahua
63
Tech Update: @meta to remove end-to-end encryption feature from @instagram DM
47
TibCERT retweeted
🚨 Tibetan communities face rising misleading content. Learn how to spot misinformation and find resources to combat it. #Misinformation #DigitalLiteracy
1
1
2
395
WhatsApp / Signal / Telegram - all built to communicate but which one earns your trust?
1
1
67
How can Tibetans and supporters can respond to online disinformation? Take a moment to check your social media. Fake accounts spread disinformation and thrive on engagement. Report them. Block them. Don’t debate them.
2
5
7
940
ལོ་གསར་བཀྲིས་བདེ་ལེགས། Losar Tashi Delek
Losar Message and E-card Offering from Tibet Action's Co-founder and Director, Lhadon Tethong @lhadon *Courage and Fortitude in the Year of the Fire Horse* The Fire Horse embodies courage and dynamic energy, capable of overcoming obstacles and sparking transformative change.
1
48