Zum Inhalt der Seite gehen

Suche

Beiträge, die mit infosec getaggt sind

Download this pdf now before it is taken down by Trump/Musk:

Mobile communications best practices guide from the Federal Cybersecurity and Infrastructure Security Agency. (2/x)

#Resistance #Infosec

https://www.cisa.gov/sites/default/files/2024-12/guidance-mobile-communications-best-practices.pdf
#infosec #resistance

(Rebooting this chain from last month - with updates.)

Recommendation #1: This is a priority: Practice security culture.

The Electronic Frontier Foundation has a fabulous on-line guide to Surveillance Self-Defense. (1/x)

#Resistance #Infosec

ssd.eff.org
#infosec #resistance

This has to be actionable.

#Musk aides lock #GovernmentWorkers out of computer systems at #US #FederalAgency

Aides to #ElonMusk charged have locked career #CivilServants at #OPM out of computer systems that contain the #personal #data of millions of federal #employees…

Since taking office, #Trump has embarked on a massive govt makeover, firing & sidelining hundreds of civil servants & installing more loyalists.

#law #cybersecurity #oversight #NationalSecurity #InfoSec
https://www.reuters.com/world/us/musk-aides-lock-government-workers-out-computer-systems-us-agency-sources-say-2025-01-31/
#trump #musk #elonmusk #data #us #cybersecurity #law #infosec #nationalsecurity #personal #employees #opm #governmentworkers #federalagency #civilservants #oversight

#ElonMusk staff Have #Infiltrated Another #Government Agency - Elon Musk’s former employees are trying to use #WhiteHouse #credentials to access General Services Administration #GSA tech, giving them the potential to remote into #laptops, read #emails, and more, sources say. mass #cybercrime attack against the federal government #infosec this #cybersecurity breach by non government agents is a crime. the damage will be irreparable. https://www.wired.com/story/elon-musk-lackeys-general-services-administration/

Elon Musk’s Friends Have Infiltrated the General Services Administration

Elon Musk’s former employees are trying to use White House credentials to access General Services Administration tech, giving them the potential to remote into laptops, read emails, and more, sources say.
Makena Kelly (WIRED)
#elonmusk #cybersecurity #infosec #government #whitehouse #cybercrime #emails #laptops #infiltrated #credentials #gsa

#WhatsApp confirms that nearly 100 journalists and "other #civilsociety members" have been targeted and possibly compromised on a zero-click attack (meaning they didn't do anything on their own to let the malware in).

If Meta's boss new political leanings were not enough to convince folks that none of its platforms are trustworthy enough as to manage sensitive information and conversations in them, maybe this is your #Signal

#journalism #infosec

https://www.theguardian.com/technology/2025/jan/31/whatsapp-israel-spyware
#signal #journalism #infosec #whatsapp #civilsociety

Data Deletion: How to Stay Safe & Clean-Up Your Online Presence
Who is this for?
This is for you if:
- You have someone to protect
- You have something to protect
- You're being harassed/stalked/DV
- You're a journalist, activist, advocate
- You're concerned about your digital footprint
https://lockdownyourlife.as.me/data-deletion

#security #privacy #community #training #safety #tech #infosec #journalist #education

Lock Down Your Life

Schedule your appointment online Lock Down Your Life
lockdownyourlife.as.me
#privacy #education #tech #community #infosec #security #training #safety #journalist

Guten Morgen liebe*r Fediversebwohner*in,

Werbung ist nicht nur nervig. Sie verbraucht auch eine Menge Daten und verlangsamt damit Webseiten und Apps. Werbeplätze werden in automatischen Auktionen an die Meistbietenden verkauft. Dazu werden verschiedenste Daten über dich gesammelt und verkauft. Außerdem gibt es immer wieder Fälle, in denen Werbung für eine Anwendung gar nicht vom Anbieter stammt sondern von Angreifer*innen, die dich zu Seiten mit Trojanern locken. Oder es wird sogar in der Werbung selbst Schadcode auf seriösen Seiten ausgeliefert.
Es gibt daher gute Gründe, warum du einen Werbeblocker nutzen solltest. Besonders gut ist zum Beispiel uBlock Origin https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/ Neben Werbung unterbindet uBlock Origin auch Tracker, die deine Daten sammeln, oder bekannte Seiten mit Schadcode.
Webseiten werden schneller geladen und sind ohne die ganze Werbung viel besser zu lesen. Ich bekomme jedes mal einen kleinen Schock, wenn ich Webseiten mal ohne Werbeblocker sehe.
Da Google in Chrome die Schnittstelle für Erweiterungen so geändert hat, das Werbeblocker nicht mehr richtig arbeiten, solltest du Firefox eine Chance geben. Hier funktionieren die Erweiterungen wie sie sollen.
Sowohl Firefox als auch uBlock Origin sind OpenSource. Du kannst sie also kostenlos nutzen und bei Problemen auf eine breite Community zurückgreifen.
Wenn du einer Webseite Geld zukommen lassen möchtest, weil du jetzt keine Werbung mehr siehst und damit deren Einnahmequelle wegfällt, gibt es meistens auch andere Wege. Z.B. Abos, Spenden, Mitgliedschaften oder Dienste wie Patreon. Gerade in Zeiten von Fakenews und KI, die alles frisst was erreichbar ist, ist eine unabhängige Finanzierung guter Angebote von Qualität notwendig.
Nimm den heutigen Tag als Anlass und probiere Firefox mit uBlock Origin.

Habt einen wundervollen Tag

#infosec #itsecurity #goodmorning #shakeupitsecurity #wisdomoftheday
Eine Postkarte mit dem Logo von seism0saurus auf der linken Seite. Ein gezeichneter Seismosaurus im Comicstil. Neben seinem langen Hals steht nicht ganz ernst gemeint "Shake up it-security" und seine Homepage seism0saurus.de Rechts daneben der Spruch des Tages: "Schon das Werbefreie Internet getestet? Nutze Firefox und uBlock Origin."

uBlock Origin – Get this Extension for 🦊 Firefox (en-US)

Download uBlock Origin for Firefox. Finally, an efficient wide-spectrum content blocker. Easy on CPU and memory.
addons.mozilla.org
#infosec #goodmorning #itsecurity #shakeupitsecurity #wisdomoftheday

So using a non-google maps app is possible & probably a good idea. Giving your location to google is not safe going forward.

Been using & experimenting with some & I think you might want to find some too.

Apps: https://european-alternatives.eu/category/navigation-apps

https://www.cnbc.com/amp/2025/01/27/google-maps-to-show-gulf-of-america-after-government-updates.html

cc @european_alternatives

#maps #navigation #google #infosec #USpol #location #DataEthics
#google #uspol #infosec #maps #Navigation #dataethics #location @european_alternatives

Could any #privacy , #infosec people weigh in on whether the you tube guy Rob Braxman is legit. The usual searches don't lead to much.
https://www.youtube.com/@robbraxmantech

Rob Braxman Tech

Alt-Tech. The Internet Privacy Guy. Public interest hacker and technologist. I use my extensive knowledge of cybersecurity and tech to serve the public good. I care about privacy.
YouTube
#privacy #infosec

Guten Morgen liebe*r Leser*in,

Gerade bei mobilen IT-Geräten wie Laptops, Smartphones oder Tablets werden viele persönliche Daten durch die Gegend getragen. Um diese zu schützen, solltest du die Geräte verschlüsseln. Zum Glück musst du dafür heute nicht mehr manuell mit kryptografischen Befehlen hantieren. Android und iOS verschlüsseln Smartphones und Tablets automatisch. Selbst Laptops sind inzwischen meistens mit Windows BitLocker oder Apples FileVault verschlüsselt. Falls deine Version von Windows kein BitLocker unterstützt oder du ein externes Laufwerk so verschlüsseln möchtest, dass du es auch unter MacOS oder Linux entschlüsseln kannst, kannst du VeraCrypt einsetzen. VeraCrypt ist ein OpenSource Tool, dass sich auf die Verschlüsselung von Partitionen konzentriert.
Nimm den heutigen Tag als Anlass und verschlüssele deine Daten.

Habt einen guten Tag!

#infosec #itsecurity #goodmorning #shakeupitsecurity #wisdomoftheday
Eine Postkarte mit dem Logo von seism0saurus auf der linken Seite. Ein gezeichneter Seismosaurus im Comicstil. Neben seinem langen Hals steht nicht ganz ernst gemeint "Shake up it-security" und seine Homepage seism0saurus.de Rechts daneben der Spruch des Tages: "Hast du deine Festplatte verschlüsselt? Schütze deine Daten vor unbefugtem Zugriff."
#infosec #goodmorning #itsecurity #shakeupitsecurity #wisdomoftheday

Cisco: Critical Meeting Management Bug Requires Urgent Patch - https://mwyr.es/TjChAf0q #darkreading #infosec
#infosec #darkreading

Conduent Confirms Cyberattack After Government Agencies Report Outages - https://mwyr.es/jCKF1Puc #securityweek #infosec
#infosec #securityweek

Browser (Firefox): Bitwarden, CanvasBlocker, Decentraleyes, D̶i̶s̶a̶b̶l̶e̶ ̶J̶a̶v̶a̶S̶c̶r̶i̶p̶t̶,̶ ̶D̶o̶n̶'̶t̶ ̶T̶r̶a̶c̶k̶ ̶M̶e̶ ̶G̶o̶o̶g̶l̶e̶,̶, Containers, P̶r̶i̶v̶a̶c̶y̶ ̶B̶a̶d̶g̶e̶r̶, uBlock Origin, S̶e̶a̶r̶c̶h̶ ̶b̶y̶ ̶I̶m̶a̶g̶e̶.

Self-hosted: SearXNG, Redlib, NextCloud, Immich.

Network: Pi-hole + Unbound DNS, VPN, DNS leak tests.

Email: ProtonMail, alias sign-ups.

What am I missing? Any tips?
Just go Tor 24/7 at this point?

Edit:
added strike-through

#Privacy #Anonymity #Infosec #CyberSecurity
#privacy #cybersecurity #infosec #anonymity

Hey, what about I start spinning off some threads 🧵 with quick and easy tips for #journalist and #activist to improve their workflow ( #opsec & #infosec focus ). You know that you can click an hashtag and choose "See #tips posts by user" to see all my posts with that specific hashtag. (bsky only)
#infosec #tips #journalist #opsec #activist

7-Zip-Entwickler Igor Pavlov behebt Sicherheitsproblem: Neue Version 24.09 schließt Lücke, die Windows "Mark-of-the-Web"-Schutz umgeht. #InfoSec https://winfuture.de/news,148320.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

7-Zip behebt einen Fehler, der Windows-Sicherheitswarnungen umgeht

Eine kritische Sicherheitslücke in 7-Zip ermöglicht Angreifern die Umgehung wichtiger Windows-Schutzmaßnahmen. Obwohl ein Patch verfügbar ist, bleiben viele Nutzer aufgrund fehlender Updates gefährdet. IT-Experten raten zur sofortigen Aktualisierung.
John Woll (WinFuture.de)
#infosec

There's a "Signal deanonymized" thing going around:
https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117

Stay calm. Deep breaths.

👉 while this is a real consideration, the only thing the attacker gets from this is a very rough (kilometers or tens of kilometers radius) location

👉 other communication platforms that use any kind of caching CDN to deliver attachments are just as affected

👉 you almost certainly should continue to use Signal, unless you specifically know that this is a big problem for you.

#Signal #InfoSec

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform - research.md
Gist
#signal #infosec

Hello fellow fediverse denziens. I just deleted my #Facebook account and moved here. I didn't use #Twitter or #Instagram, so if I do weird things here that's probably why. I will, for example, use full sentences and the Oxford comma.

I live in #Portland, #Oregon with my wife and cat. I am currently trying to escape the corporate world, where I work as an #infosec professional. I am an #OSU Apprentice #Beekeeper and have two hives of #bees. And they're still alive!

#introduction
#introduction #twitter #bees #infosec #facebook #Instagram #Oregon #portland #OSU #Beekeeper

Hey, Doug. 👊🏻 Maybe add #infosec to your collection of #hashtags
#infosec #hashtags

Update:
Proton removed their response (link below) from Mastodon, seems they realized it exploded into their face.

Original toot:
After I had given #Protonmail the benefit of the doubt for one board member making inconsiderate and alarming statements on #MAGA #Trump, they have doubled down officially:
https://mastodon.social/@protonprivacy/113833073219145503

I therefore consider this official opinion of Proton. Focussing on one aspect and completely ignoring the bigger picture of a luming fascist period in the most militarized economy of the world is just inacceptable. Proton just could have kept their mouth shut, but they decided not to.
Thanks for revealing yourselves and happy to end my subscription, I won't support a company like you until you do better @protonprivacy

Please boost to spread this news if you find this important.

@kuketzblog @chpietsch @aral
@linuzifer

#ProtonExodus #Proton #E2E #Email #Privacy #Infosec
#trump #privacy #maga #ProtonMail #infosec #email #e2e #proton #protonexodus @Aral Balkan @Mike Kuketz 🛡 @Proton @Christian Pietsch @linuzifer

The rsync utility in Linux, *BSD, and Unix-like systems are vulnerable to multiple security issues, including arbitrary code execution, arbitrary file upload, information disclosure, and privilege escalation. Hence, you must patch the system ASAP https://www.cyberciti.biz/linux-news/cve-2024-12084-rsyn-security-urgent-update-needed-on-unix-bsd-systems/

#infosec #security #linux #unix
A critical vulnerability (CVE-2024-12084 and five others) requires immediate patching on Linux, *BSD, macOS, and Unix-like systems to protect your systems from attacks. Update Rsync now!
#infosec #linux #security #unix

Nutzer-Standorte aus Zehntausenden Apps stehen zum Verkauf

https://www.tagesschau.de/investigativ/br-recherche/standortdaten-apps-datenhandel-100.html

>> Millionen von #Standortdaten aus Apps fließen an #Datenhändler ab - das zeigen Recherchen des BR mit internationalen Partnermedien.[...] Experten sprechen von "Kontrollverlust".

>> [...] Wetter Online, Flightradar24, Kleinanzeigen oder Focus Online.

#InfoSec

Nutzer-Standorte aus Zehntausenden Apps stehen zum Verkauf

Millionen von Standortdaten aus Apps fließen an Datenhändler ab - das zeigen Recherchen des BR mit internationalen Partnermedien. In Deutschland sticht eine populäre Wetter-App besonders hervor. Experten sprechen von "Kontrollverlust".
tagesschau.de
#infosec #standortdaten #datenhandler

#osint - Open-source intelligence is the foundation on which we'll rebuild non-billionaire real news, because we now have to.

Interested folks can learn valuable research skills for free, online. Bellingcat is the best place to start.

#journalism #infosec #research #librarian #internship #datamining #factchecking https://mstdn.social/@Bellingcat/113753859276481024

Bellingcat (@Bellingcat@mstdn.social)

Attached: 1 image Welcome to 2025! If your new years resolution is to learn a new skill why don't you have a look at some of our guides on open source research? https://www.bellingcat.
Mastodon 🐘
#journalism #research #infosec #librarian #osint #factchecking #internship #datamining

#GrapheneOS appears to be standing up to UK forensics, in this painful and "unprecedented" case which could see a UK journalist go to jail for not relinquishing the passphrase to his devices. Not only is withholding his basic human right, but he does it to protect his sources, and as ratified in the European Court of Human Rights.

https://www.ilfattoquotidiano.it/in-edicola/articoli/2025/01/02/british-journalist-could-face-years-in-prison-for-refusing-to-hand-over-his-passwords-to-the-police/7822432/

#humanrights #infosec #privacy

British journalist could face years in prison for refusing to hand over his passwords to the police

Richard Medhurst is the first reporter arrested and under investigation under Section 12 of the Terrorism Act 2000. The UK police have sought to obtain the passwords to his phones, including a highly secure phone with a Graphene operating system.
Stefania Maurizi (Il Fatto Quotidiano)
#privacy #grapheneos #humanrights #infosec

Beware of sympathy scams. Every conflict brings scammers tugging at heartstrings to get donations. This has been happening for years. Always research campaigns asking for money—sadly, your generosity might not be helping the actual victims. Stay vigilant. #Cybersecurity #InfoSec #Scam #Ukraine #Gaza
#ukraine #cybersecurity #infosec #scam #gaza

LockBit Ransomware Developer Arrested in Israel

#Israel #infosec
https://www.darkreading.com/cyberattacks-data-breaches/lockbit-ransomware-developer-arrested-israel

LockBit Ransomware Developer Arrested in Israel

Dual Russian-Israeli national Rostislav Panev was arrested last August and is facing extradition to the US for playing a critical role in LockBit's RaaS activities, dating back to the ransomware gang's origins.
Becky Bracken, Senior Editor, Dark Reading (Dark Reading)
#israel #infosec

Un cybercriminel membre du célèbre gang de hackers Lockbit se cachait en Israël
https://www.numerama.com/cyberguerre/1869958-un-cybercriminel-membre-du-celebre-gang-de-hackers-lockbit-se-cachait-en-israel.html

#Infosec #Security #Cybersecurity #CeptBiro #Cybercriminel #Lockbit #Israel

Un cybercriminel membre du célèbre gang de hackers Lockbit se cachait en Israël - Numerama

Un membre du groupe de hackers Lockbit, responsable de cyberattaques contre la France, a été arrêté en Israël. Il était chargé de développer des moyens de pression pour forcer à payer la rançon.
Bogdan Bodnar (Numerama)
#cybersecurity #israel #infosec #security #Ceptbiro #cybercriminel #LockBit

Cellebrite Unlocked This Journalist’s Phone. Cops Then Infected it With Malware Just another day in dystopian paradise. www.404media.co/cellebrite-u...#infosec #malware #spyware #opsec #ethics #journalism

Cellebrite Unlocked This Journ...

Cellebrite Unlocked This Journalist’s Phone. Cops Then Infected it With Malware

A new report from Amnesty International reveals multiple cases where Serbian authorities used Cellebrite devices to access targets' mobile phones before loading them with spyware.
Joseph Cox (404 Media)
#journalism #infosec #ethics #malware #spyware #opsec

Want To Make The Most Of Tails Amnesiac Linux OS "Pull Out" Feature?

💡 Try My Idea: USBSTICK "Pull The Plug" Bracelet (ideal for Tails)

This idea allows you to attach yourself to the inserted Tails disk, by bracelet (on demand)

If your arm ever gets too far from the computer: *POOF* there goes forensics! 😁

#HumanRights #Journalism #Tails #Linux #privacy #forensics #ideas #tech #GNU #fun #bracelet #jewelry #RAM #coldbootattack #infosec #cybersecurity #TorProject

https://tube.tchncs.de/w/q2Vdv11aTrmgAjKrrAULw2

Tails Amnesiac "Pull The Plug" Coldboot Protection Bracelet

Today sharing my new tails on bracelet concept / idea with everyone - Tails on bracelet I call the "RightToPrivacy Pull The Plug Tails Bracelet". My idea for wearing Tails usbstick detachable brace...
tchncs
#privacy #journalism #humanrights #cybersecurity #tech #infosec #linux #ideas #gnu #Fun #jewelry #forensics #bracelet #tails #ram #coldbootattack #torproject

I'm not sure what it says about me that the first thought I had when I heard about the "david meyer" chatgpt kerfuffle, was "woah, that would be so easy to weaponize!" And it is! Because OpenAI chose to go with the cheapest option: blocking the offending term through an asynchronous, case insensitive exact match against a deny list, and doing it asynchronously to ensure it doesn’t impact latency.

#openai #chatgpt #Enshittification #infosec

https://centreforaileadership.org/resources/analysis_the_curious_case_of_one_david_mayer/

Updated:The Curious Case of David Mayer, the man ChatGPT cannot name.

ChatGPT users have noticed a curious behavior: It refuses to talk about a 'David Mayer'. We have the explanation and point out less obvious implications.
centreforaileadership.org
#chatgpt #infosec #enshittification #openai

Hacker In Snowflake Extortions May Be A US Soldier - https://mwyr.es/aLTNK6i2 #infosec

Hacker in Snowflake Extortions May Be a U.S. Soldier

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues…
mwyr.es
#infosec

I'm looking for a new job doing security assessments / research.

I spent the last 6 years building advanced security assessment capabilities around hardware/IoT, industrial, marine OT, and x86 platforms. Before that I spent 5 years as a pentester. I excel at weird and novel stuff with no template.

I'm in the UK and I'm looking for a full-time remote role.

CV: https://poly.nomial.co.uk/graham_sutherland.pdf

Please get in touch if you know of any available roles! :)

#getfedihired #fedihire #fedihired #infosec
#infosec #FediHire #getfedihired #fedihired

Here is a list of journalists to follow on Mastodon. Added to frequently.

Managed by @tchambers

https://docs.google.com/spreadsheets/d/13No4yxY-oFrN8PigC2jBWXreFCHWwVRTftwP6HcREtA/htmlview

One note:
Taylor Lorenz is taylorlorenz@mastodon.social

#journalism #journalists #infosec #techie #womenintech #reporters #follow

Journalists on Mastodon and Fediverse (Responses)

Google Docs
#journalism #journalists #infosec #reporters #womenintech #follow #techie @Tim Chambers

Tweede Kamer verkeerd geïnformeerd over aanschaf van Israëlische afluistersystemen voor de politie die miljoenen kosten en na jaren nog steeds niet werken
#TK #Politie #infosec #Israël #privacy #MinJenV #yesilgöz #Schoof
https://www.nrc.nl/nieuws/2024/11/25/kamer-verkeerd-geinformeerd-over-aanschaf-van-israelische-afluistersystemen-voor-de-politie-die-miljoenen-kosten-en-na-jaren-nog-steeds-niet-werken-a4874410

Kamer verkeerd geïnformeerd over aanschaf van Israëlische afluistersystemen voor de politie die miljoenen kosten en na jaren nog steeds niet werken

Tappen: Nederland heeft heimelijk een nieuw tapsysteem gekocht van Israëlische makelij. Dat zou een ander systeem, dat niet werkt, moeten vervangen.
Bas Haan (NRC)
#privacy #israel #infosec #Schoof #yesilgoz #politie #tk #minjenv

The fact that media outlets are falling for impersonator accounts on Bluesky highlights how much the media’s ability to fact-check and verify information has declined. This issue isn’t just about Bluesky’s verification system—it’s also about journalistic responsibility.
#journalism #infosec
1/5
#journalism #infosec

Security Compliance ✅
#InfoSec
Photo of a flat bed with a big pile of dirt that has a strap "holding it down". Caption reads: Let's all take a moment to appreciate the time and effort this guy spent putting a strap on his dirt so it wouldn't fall off.
#infosec

⇧