Profile avatar
cyberdef.bsky.social
5 posts 15 followers 95 following
Regular Contributor

Employees going onto social media to express confusion over their network being hit by Qilin ransomware Indeed, "Fun day at the office"

Two years after Apple introduced an encrypted storage feature for iPhone users, the company is pulling those security protections in Britain rather than comply with a government request that it create a tool to give law enforcement organizations access to customers’ cloud data.

Yeesh. I suspect the same could happen here. www.theguardian.com/technology/2...

Mullvad labels us adult-content. You cannot visit vx-underground if "Adult Content' option is enabled. Malware is now erotic

The U.K. government doesn't want you to encrypt your iCloud data, which means you should definitely turn on Advanced Data Protection under Settings and iCloud. freedom.press/issues/secre...

Finally, after a very long review process, our new paper (with @ikiga1.bsky.social, @scinawa.bsky.social and @johnmc88.bsky.social) is out! We explore how promising is Quantum Machine Learning for cybersecurity applications. www.sciencedirect.com/science/arti...

film still #40 The Founder. #severance

30M users 1B posts 🤝 bluesky milestone achieved this week

Just read Google's report on APTs abusing Gemini, where they claim their guardrails prevented development of a Chrome infostealer. Either the threat actors they're dealing with are dumb as hell, or Google is way overstating their anti-abuse capabilities. This was literally my first attempt.

😭

Here we are! 🥳 ISSA International is trying our hand at the BlueSky platform, and this is our first post! 🎊 Due to Member requests, we have added this profile to our Social Media portfolio. Follow us and let us know what you would like to see more of posted here! #cybersecurity #ISSAIntl

Marc is one of the best humans I met in the hacking world. I promise: even if you don’t know, he probably protected you (your freedom, your rights and/or your data) at least once. He will fight like hell, and the least we can do is to have his back this time: gofund.me/334b8f7e

I'm creating a proactive Defender AV performance monitoring solution, and we can now query potential AV impacts! :) This uses a script (Live response, Intune, etc) to send MPLog EstimatedImpact events to Log Analytics via Logs Ingestion API Setup/script: github.com/nathanmcn...

This article documents some interesting tactics, including using the voices of prominent professors to create synthetic audio content, overlaid onto images and videos, in ways that suggest the professor and their academic institution have created/endorsed the message.

Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncs...

Nice and unconventional use of line charts (or area?) from @washingtonpost.com #dataviz

New: Cellebrite is being used as doorway to install malware. Amnesty finds multiple cases where police used Cellebrite to unlock phone; cops then used that access to infect with spyware which takes screenshots, turns on mic, etc, give phone back to target. In Serbia www.404media.co/cellebrite-u...

Russia's Roskomnadzor trying to get Bellingcat removed from Mastodon and failing.

L’opérateur Orange reçoit 50 millions d’euros d’amende de la CNIL pour des publicités non consenties

Weekly summary is out.. ctoatncsc.substack.com/p/cto-at-ncs...

The Annual Report for the National Cyber Security Centre is out www.ncsc.gov.uk/collection/n... Threat assessment: www.ncsc.gov.uk/collection/n...

RED ALERT! All hands to battle stations. I saw the first “year in review” AND the first 2025 cybersecurity predictions post. In the same morning. So it begins!

I wrote a very timely introduction to digital security for journalists for @gijn.org, this guidance may also apply to activists, lawyers, and anyone else doing at-risk work these days. gijn.org/resource/int...

New from 404 Media: Bluesky may have said it won't use user data to train generative AI, but someone else just published a dataset of million Bluesky posts for "machine learning research". Already very popular dataset, your data may be scraped www.404media.co/someone-made...

Yesterday Banshee Stealer, the MacOS-based Malware-as-a-Service infostealer, had their source code leaked online. As a result of the leak they've shut down their operations. We've archived the leak and made it available for download on GitHub. github.com/vxundergroun...

MS Word and Excel is Using You to Train AI: How to turn off AI-scraping from your Word documents to protect your work from trillion dollars corporations. the feature is hidden through a series of popup menus in your settings medium.com/illumination...

Here is a nice starter pack with all the RB members of Black Hat! go.bsky.app/EcFrgu8

I have been so out of infosec social for a while. I’ve been pursuing an adventure of becoming a web-based graphic novel/comic creator. Life is too short not to pursue a dream.