Mastodon

404 posts165 participants52 posts today

InfoSecSherpaMy 2025 Q3 <a href="https://infosec.exchange/tags/Africa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Africa</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> & <a href="https://infosec.exchange/tags/DataPrivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataPrivacy</a> news roundup is available! News items curated to keep you on top of <a href="https://infosec.exchange/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyber</a> in this region!Africa Information Security News Roundup for July-September 2025 <a href="https://sherpaintelligence.substack.com/p/africa-information-security-news-104" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://sherpaintelligence.substack.com/p/africa-information-security-news-104</a>

Neil CraigPleasantly surprised to find out that our commercial web CDN partner for www.bbc.com & www.bbc.co.uk has enabled Post-Quantum Crypto.So if you're using a modern web browser (Chromium & Firefox both support it) & are outside the UK, you'll automatically be using a quantum computer-resistant TLS key exchange mechanism (ML-KEM AKA Kyber) and (as far as we know) your traffic cannot be intercepted, stored & latterly decrypted when viable quantum computers come along.<a href="https://mastodon.social/tags/TLS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TLS</a> <a href="https://mastodon.social/tags/PQC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PQC</a> <a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mastodon.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a>

aliosNever fuck up user experience with information security arguments, because users will start looking for workarounds to fix fucked up user experience and if they succeed, the introduced attack vector is often much worse then the attack vector you tried to close.So if you are trying to close an attack vector by implementing $something, evaluate if it fucks up the UX, if it does, provide an alternative, if you are not able to, drop $something and start again.<a href="https://23.social/tags/ChatControl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ChatControl</a> <a href="https://23.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Shodan SafariASN: AS197540 Location: Nürnberg, DE Added: 2025-09-30T12:45<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

CTI.FYI🚨New ransom group blog post!🚨Group name: incransom Post title: callhci.com Info: <a href="https://cti.fyi/groups/incransom.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cti.fyi/groups/incransom.html</a><a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> <a href="https://infosec.exchange/tags/cti" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cti</a> <a href="https://infosec.exchange/tags/threatintelligence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatintelligence</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Diego Córdoba 🇦🇷¿Que las redes TCP/IP son aburridas?Acabo de hacer un ping desde un cliente virtual, hasta un servidor remoto, con una IP de origen modificada de un tercer equipo, llamémosle X.El ping pasa por un firewall que no tiene sNAT activado.El ping llega al servidor remoto, y éste lo responde a X.Un ataque "ICMP reflection flood" casero 🙂<a href="https://mstdn.io/tags/gnu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gnu</a> <a href="https://mstdn.io/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://mstdn.io/tags/learning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#learning</a> <a href="https://mstdn.io/tags/juncotic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#juncotic</a> <a href="https://mstdn.io/tags/educacion" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#educacion</a> <a href="https://mstdn.io/tags/softwarelibre" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#softwarelibre</a> <a href="https://mstdn.io/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://mstdn.io/tags/freesoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freesoftware</a> <a href="https://mstdn.io/tags/sysadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sysadmin</a> <a href="https://mstdn.io/tags/devops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#devops</a> <a href="https://mstdn.io/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a> <a href="https://mstdn.io/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mstdn.io/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://mstdn.io/tags/tcpip" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tcpip</a>

Shodan SafariASN: AS135377 Location: Taipei, TW Added: 2025-09-30T13:07<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Quad9DNSHeading to <a href="https://mastodon.social/tags/OARC45" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OARC45</a> next week? We'll be there! 🇸🇪 Join us for the ADoT/ADoQ: Deployment Collaboration Table Topic<a href="https://mastodns.net/@dnsoarc/115295189910398791" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mastodns.net/@dnsoarc/115295189910398791</a><a href="https://mastodon.social/tags/DNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DNS</a> <a href="https://mastodon.social/tags/LoveDNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LoveDNS</a> <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Neil CraigWe're seeing requests to www.bbc.com return to normal-looking levels from Afghanistan - since about midday UTC today (1st Oct 2025).<a href="https://mastodon.social/tags/Afghanistan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Afghanistan</a> <a href="https://mastodon.social/tags/Censorship" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Censorship</a> <a href="https://mastodon.social/tags/WebDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebDev</a> <a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mastodon.social/tags/Taliban" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Taliban</a>

Ge0rGSecurity is like fashion. Old trends come back periodically.Exhibit A: "security" appliance vendors suffering from ../../ exploits in 2025Exhibit B: <a href="https://wiretap.fail/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wiretap.fail/</a> is just <a href="https://social.treehouse.systems/@bunnie" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bunnie</a> 's 2002 sniffing of HyperTransport on the first Xbox - <a href="https://www.bunniestudios.com/bunnie/proj/anatak/AIM-2002-008.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bunniestudios.com/bunnie/proj/anatak/AIM-2002-008.pdf</a><a href="https://chaos.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://chaos.social/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReverseEngineering</a> <a href="https://chaos.social/tags/WiretapFail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WiretapFail</a>

ZaufanaTrzeciaStrona.plPoznaj prawne i etyczne aspekty działalności hakerskiej - od wolności słowa, przez kwestie przestępstw komputerowych, po regulacje dotyczące inżynierii wstecznej. Zbigniew Krüger, pełnomocnik Dragon Sector w sprawie Newagu, omówił te kwestie podczas <a href="https://infosec.exchange/tags/OMH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OMH</a> 2024! ▶️ <a href="https://www.youtube.com/watch?v=RvhPjXpA2qI" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.youtube.com/watch?v=RvhPjXpA2qI</a> Najgorętsze tematy z branży <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> - więcej na <a href="https://infosec.exchange/tags/OhMyHack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OhMyHack</a> 2025! 🎫 Nie przegap konferencji - rejestracja w toku ➡️ <a href="https://bit.ly/OMHbilet" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://bit.ly/OMHbilet</a> <a href="https://infosec.exchange/tags/OMHconf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OMHconf</a> <a href="https://infosec.exchange/tags/cyberbezpieczenstwo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyberbezpieczenstwo</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

OWASP Foundation🚨 Attention AppSec pros!OWASP Global AppSec US 2025 is coming to Washington, D.C. this November, and it’s the must-attend event for anyone in application security.🔗 Register now: <a href="https://owasp.glueup.com/event/131624/register/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://owasp.glueup.com/event/131624/register/</a><a href="https://infosec.exchange/tags/OWASP2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OWASP2025</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/GlobalAppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GlobalAppSec</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/WashingtonDC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WashingtonDC</a>

Shodan SafariASN: AS5607 Location: Worcester, GB Added: 2025-09-30T12:48<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

CTI.FYI🚨New ransom group blog post!🚨Group name: incransom Post title: Climatron Info: <a href="https://cti.fyi/groups/incransom.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cti.fyi/groups/incransom.html</a><a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ransomware</a> <a href="https://infosec.exchange/tags/cti" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cti</a> <a href="https://infosec.exchange/tags/threatintelligence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatintelligence</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

FastRuby.ioToday, October 1st, <a href="https://ruby.social/tags/Rails" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rails</a> 7.1 reaches the end of its security support. That means that if you're running this version in production, you won't get any more security patches from the core team.Need to upgrade to Rails 7.2? Follow our step by step guide: <a href="https://www.fastruby.io/blog/upgrade-rails-7-1-to-7-2.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.fastruby.io/blog/upgrade-rails-7-1-to-7-2.html</a> <a href="https://ruby.social/tags/UpgradeRails" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UpgradeRails</a> <a href="https://ruby.social/tags/TechDebt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechDebt</a> <a href="https://ruby.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://ruby.social/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevSecOps</a>

Stephen FoskettHere’s a really great open report on the use of <a href="https://techfieldday.net/tags/GenAI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GenAI</a> by scammers. Required reading for <a href="https://techfieldday.net/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> pros and similar folks. And a decent read for normals too. <a href="https://datasociety.net/library/scam-gpt/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://datasociety.net/library/scam-gpt/</a>

BeyondMachines :verified:Superior Vision Services hit by email phishing attack, exposes data of health plan membersSuperior Vision Services, a New York-based vision benefit provider, suffered an email phishing attack on July 9, 2025 that granted attackers access to internal email accounts containing sensitive member information. The company disclose dthe incident to regulators in late September 2025, offering affected individuals one year of credit monitoring services.**** <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/incident" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#incident</a> <a href="https://infosec.exchange/tags/databreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#databreach</a> <a href="https://beyondmachines.net/event_details/superior-vision-services-hit-by-email-phishing-attack-exposes-data-of-health-plan-members-g-n-u-h-9/gD2P6Ple2L" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://beyondmachines.net/event_details/superior-vision-services-hit-by-email-phishing-attack-exposes-data-of-health-plan-members-g-n-u-h-9/gD2P6Ple2L</a>

Shodan SafariASN: AS55990 Location: Shanghai, CN Added: 2025-09-30T12:52<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

BeyondMachines :verified:Scanning campaign targets critical Palo Alto GlobalProtect vulnerabilitySecurity researchers detected a significant surge in exploitation attempts targeting CVE-2024-3400, a critical arbitrary file creation vulnerability in Palo Alto Networks PAN-OS GlobalProtect that allows unauthenticated attackers to execute arbitrary code with root privileges on firewalls running versions 10.2, 11.0, and 11.1. Thousands of automated scanning attempts have been observed since late September 2025.**If you still haven't patched your Palo Alto Networks firewalls with GlobalProtect VPN since 2024, you are probably hacked. Nevertheless, make sure to update IMMEDIATELY. Also check for indicators of compromise and if you have any suspicion, make a full factory-reset per Palo Alto support instructions.** <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/attack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#attack</a> <a href="https://infosec.exchange/tags/activeattack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#activeattack</a> <a href="https://beyondmachines.net/event_details/scanning-campaign-targets-critical-palo-alto-globalprotect-vulnerability-m-9-v-8-z/gD2P6Ple2L" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://beyondmachines.net/event_details/scanning-campaign-targets-critical-palo-alto-globalprotect-vulnerability-m-9-v-8-z/gD2P6Ple2L</a>

Shodan SafariASN: AS14956 Location: Miami, US Added: 2025-09-30T12:46<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Recent searches

Search options

Administered by:

Server stats:

#infosec

Recent searches

Search options

Administered by:

Server stats:

INFOSEC

#infosec