Suche
Beiträge, die mit SECURITY getaggt sind
Second US-Russia meeting in next 2 weeks, Russian media reports
“A dialogue on strategic stability and arms control is possible” at the expected meeting, Russia’s Deputy Foreign Minister Sergei Ryabkov was quoted as saying by RIA news agency.Marianne Gros (POLITICO)
https://www.upi.com/Top_News/US/2025/02/21/Marshals-Musk-Security-Detail/1351740152373/
#MUSK #MARSHALS #USA #TRUMP #DOGE #SECURITY #PRESS
U.S. Marshals Service reportedly deputizes Elon Musk's private security detail - UPI.com
Elon Musk's private security detail was reportedly deputized by the U.S. Marshals Service, giving it extra rights while on federal property while he performs work for the Department of Government Efficiency.Clyde Hughes (UPI)
Die EU-Kommission hat eine Reihe von Maßnahmen zur Stärkung der Widerstandsfähigkeit von Unterseekabeln als kritischer Kommunikationsinfrastruktur vorgelegt.
https://www.heise.de/news/Schutz-von-Unterseekabel-EU-will-staerker-auf-Praevention-und-Abschreckung-setzen-10291797.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Internet #Security #Spionage #news
Für eine quantensichere Kommunikation haben Swisscom und Quantum Optics Jena die Übertragung von Schlüsseln für symmetrische Verschlüsselung getestet.
https://www.heise.de/news/Swisscom-und-deutsches-Start-up-testen-Quantum-Security-Loesung-10291699.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Quantencomputer #Security #news
few lessons from here:
1. Apple are not your friends when it comes to privacy, and they never will be
2. encrypt and backup with your own keys and independently of the big tech platforms
3. campaign against such surveillance requests by govts
https://www.bbc.com/news/articles/cgj54eq4vejo
#Privacy #Security #Apple #iOS #Mac #UnitedKingdom #Tech #Technology
Apple pulls data protection tool after UK government security row
Customers' photos and documents stored online will no longer be protected by end to end encryption.Zoe Kleinman (BBC News)
Durch eine Sicherheitslücke in Ciscos Video-Codec OpenH264 können Angreifer Schadcode einschmuggeln. Auch Firefox ist gefährdet.
https://www.heise.de/news/OpenH264-Sicherheitsluecke-in-Ciscos-Video-Codec-gefaehrdet-Firefox-10291399.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Firefox #Security #Sicherheitslücken #news
Die redaktionell ausgewählten Workshops auf der secIT 2025 halten wertvolles Wissen für Admins bereit. Jetzt schnell Tickets sichern! Die Plätze sind begehrt.
https://www.heise.de/news/secIT-2025-Aktuelle-Malware-Trends-kennen-und-Attacken-vorbeugen-10287766.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Cyberangriff #NIS #Ransomware #Security #news
Angreifer können unter anderem Atlassians Bitbucket Data Center and Server mit Schadcode attackieren.
https://www.heise.de/news/Sicherheitsupdates-Atlassian-Attacken-auf-Bamboo-Data-Center-and-Server-moeglich-10290543.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Patchday #Security #Sicherheitslücken #Updates #news
Angreifer missbrauchen Sicherheitslücken im Craft CMS sowie in Palo Altos PAN-OS, um verwundbare Systeme zu attackieren.
https://www.heise.de/news/Cyberangriffe-auf-Palo-Alto-PAN-OS-und-Craft-CMS-laufen-10290478.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Cyberangriff #Cybercrime #Security #Sicherheitslücken #news
Microsoft hat Ihr Windows 11 von der Versorgung mit Sicherheits-Updates abgeschnitten? Es gibt Auswege, etwa der Doppelklick auf eine Datei in diesem Artikel.
https://www.heise.de/ratgeber/Windows-11-Wege-aus-der-Upgrade-Falle-10260824.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Betriebssystem #Microsoft #Security #Updates #Windows #news
https://talkingpointsmemo.com/edblog/doge-dives-into-core-national-defense-and-data-systems-across-government
"DOGE currently has far deeper and far more extensive access to US #government computer systems — and is far deeper into the #NationalSecurity space — than is conceivably necessary for anything related to their notional brief & goals...
( #CISA), the agency charged w/the defense of the federal government’s civilian computer networks"
#ElonMusk #Musk #Coup #Politics #Data #Security #News #US #USA
DOGE Dives Into Core National Defense and Data Systems Across Government
To share confidential tips about events unfolding in the federal government you can contact me on Signal at joshtpm dot 99 or via encrypted mail at joshtpm (at)…Josh Marshall (TPM - Talking Points Memo)
DOGE techs Edward Coristine—the 19-yr-old known online as #BigBalls —& Kyle Schutt are now listed as staff at the #Cybersecurity & Infrastructure #Security Agency.
https://www.wired.com/story/doge-cisa-coristine-cybersecurity/
"working his way through numerous federal agencies & depts... access to systems containing sensitive #information about diplomats & many sources around the world who provide the US #government with #intelligence & expertise."
#Musk #Coup #News #US #USA
The Office of Personnel Management has just limited access to certain government records on #ElonMusk and his #DOGE minions.
https://newrepublic.com/post/191663/elon-musk-opm-privacy-team
"The Trump administration has fired members of the “privacy team” at the #OPM, a move that will hinder #public access & scrutiny over #government records related to the #security clearances of #ElonMusk & Doge."
#Musk #Coup #Trump #Corruption #Politics #Privacy #USPol #News #US #USA
A new security feature for Android blocks device owners from changing sensitive settings when a phone call is in progress. The in-call anti-scammer protections include preventing users from turning on settings to install apps from unknown sources and granting accessibility access.
https://www.androidauthority.com/android-16-phone-call-protections-3526068/
#android #it #security #privacy #engineer #media #tech #news
![[ImageSource: blogger.googleusercontent.com]
The development comes after Google expanded restricted settings to cover more permission categories in order to prevent sideloaded apps from accessing sensitive data.
<https://source.android.com/docs/compatibility/15/android-15-cdd#restricted-settings>
It has also rolled out the ability to automatically block sideloading of potentially unsafe apps in markets like Brazil, Hong Kong, India, Kenya, Nigeria, Philippines, Singapore, South Africa, Thailand and Vietnam to tackle fraud.](https://nerdculture.de/system/media_attachments/files/114/036/275/791/742/088/original/4b92d4b8305a8b1c.png "[ImageSource: blogger.googleusercontent.com]
The development comes after Google expanded restricted settings to cover more permission categories in order to prevent sideloaded apps from accessing sensitive data.
<https://source.android.com/docs/compatibility/15/android-15-cdd#restricted-settings>
It has also rolled out the ability to automatically block sideloading of potentially unsafe apps in markets like Brazil, Hong Kong, India, Kenya, Nigeria, Philippines, Singapore, South Africa, Thailand and Vietnam to tackle fraud.")
Android 16 has a new tool for keeping scammers at bay - Android Authority
A new security feature in Android 16 could block you from changing certain sensitive settings during phone calls.Mishaal Rahman (Android Authority)
Google warnt vor Angriffen auf ukrainische Signal-Nutzer. Doch die Methode funktioniert auch bei anderen populären Apps und Nutzern.
https://www.heise.de/news/Signal-Gefaehrliche-Gruppeneinladungen-vom-Gegner-10289404.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Cyberangriff #Google #Security #Signal #UkraineKrieg #news
#degoogle #fediverse #change #NosVamosJuntas #desconexion #mail #google #gmailproblems #privacy #security
@blackvoices
@politics @palestine@a.gup.pe @palestine@lemmygrad.ml @gazawatch @flawed @lebanon @irannachrichten @yemen
#tiktok
#blackmastodon
#canada
#germany
#eu
#uk
#africa
#democracy
#socialism
#anarchism
#antifascism
#resistance
#humanrights
#security
#safety
#unitedstates
#propaganda
#media
#journalism
#china
#russia
#hasbara
@blackmastodon
The closest thing I found is the list
https://community.signalusers.org/t/overview-of-third-party-security-audits/13243
which only cites research papers and some evidence that in 2018 Signal paid Doyensec, but nothing got published as the result. Even then, it looks like the apps were not audited for more than 5 years since then.
Overview of third-party security audits
Let’s collect past security audits here: Formal audits Year Auditor(s) Sponsor App/Component Published Link Last update / extended 2013 iSEC Partners (NCC Group) Open Technology Fund RedPhone and TextSecure ❌ Blog post 2014 Frosch et al.Signal Community
Very cool (open source) project
More extensive videos covering this / usage / getting started coming soon!
#buskill #hardware #security #cybersecurity #journalism #activist #activism #tech
VIDEO:
https://tube.tchncs.de/w/dPXT9X8h9y9Uvxz3ToGgoG
Unboxing Buskill: First Impression
Buskill is a configurable laptop killcord. If ever pulled away from your laptop, or, your laptop is ever pulled away from you, buskill's magnetic connector detects this, automatically taking action...tchncs
https://www.jwz.org/xscreensaver/google.html
#privacy #security #infosec #Android #screensaver
Über eine Funktion zum gemeinsamen Sammeln klauen Gauner derzeit in einer Bonus-App Guthaben und versilbern es im Markt. Was hinter der Masche steckt.
https://www.heise.de/news/Punkteklau-im-Supermarkt-Cyberkriminelle-stehlen-Rewe-Bonuspunkte-10287640.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Datenleck #Malware #Security #news
Der Universal Boot Loader U-Boot ist von Schwachstellen betroffen, durch die Angreifer beliebigen Code einschleusen können.
https://www.heise.de/news/Bootloader-U-Boot-Sicherheitsluecken-ermoeglichen-Umgehen-der-Chain-of-Trust-10287480.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Security #Sicherheitslücken #news
https://www.fastcompany.com/91280360/need-a-bodyguard-now-theres-an-app-for-that
Protector, a new on-demand security app launching in New York City and Los Angeles, lets users hire elite bodyguards with just a tap—for a hefty price.
KEWL🌀NEWS
#PROTECTOR #APPS #SECURITY #PRESS
For a newbie, I would suggest Ultramarine Linux (KDE Plasma) or MX Linux (KDE Plasma). But ultimately, your goal should be to try using Linux.
If you need to keep a copy of Windows for gaming, that's fine. But still try using Linux too.
#Project2025 #Fascism #Nazis #DonaldTrump #Trump #ElonMusk #Musk #Privacy #Security #UsJurisdiction
Anlässlich der Bundestagswahlen hat die AG KRITIS die Positionen der Parteien zur Cybersicherheit analysiert.
https://www.heise.de/news/Unzureichende-Antworten-AG-KRITIS-analysiert-Parteipositionen-zur-IT-Sicherheit-10286516.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Bundestagswahl #Cybersecurity #Security #news
Einige Zeit war es ruhig um die Mac-Malware XCSSET. Nun hat Microsoft neue aktive Varianten entdeckt, die Xcode-Projekte befallen.
https://www.heise.de/news/XCSSET-macOS-Malware-ist-wieder-aktiv-10285697.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#macOS #Malware #Security #Xcode #news
In den Versalink-Multifunktionsdruckern von Xerox wurden Schwachstellen entdeckt, durch die Angreifer Zugangsdaten abgreifen können.
https://www.heise.de/news/Xerox-Versalink-Multifunktionsdrucker-geben-Zugangsdaten-preis-10285610.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#Multifunktionsgeräte #Security #Sicherheitslücken #Xerox #news
https://www.the-reframe.com/the/
"What he's doing is illegal, if you care about #law... It's a #NationalSecurity crisis, if you care about national #security. It's unconstitutional, if you care about the #Constitution. It's likely to be devastating to the #economy, if you care about the economy... It's the most corrupt activity in the history of our country, if you care about #corruption."
- @JuliusGoat
#Musk #Coup #Republicans #Trump #Politics #USPol #US #USA #Media
The Worst and the Dimmest
It's not a coincidence that we're being led by the least qualified monsters available; it's a deliberate strategy. Facing the Worst - a series about directional alignment.A.R. Moxon (The Reframe)
Elon Musk’s minions posted classified data on their website for anyone to see.
https://newrepublic.com/post/191580/elon-musk-doge-classified-us-intel-data-website
"this incident doesn’t speak well of the pseudo-agency’s #security procedures. The website has already been hacked by Thursday evening thanks to #coding vulnerabilities. And since #DOGE has gotten into all kinds of sensitive #data, every #American could be at risk."
#ElonMusk #Coup #Musk #GOP #Politics #News #USPol #Press #USA
DOGE site is apparently not running on government servers.
https://arstechnica.com/tech-policy/2025/02/doges-gov-site-lampooned-as-coders-quickly-realize-it-can-be-edited-by-anyone/
"DOGE appears to have skipped #security steps that are expected of #government websites. That pattern is troubling some federal workers...
makes it possible for bad actors to alter official databases of government information."
#ElonMusk #Musk #Doge #Programming #Tech #Data #Fail #News #US #USA
Elon Musk’s #DOGE subordinates received approval to use #software at the Labor Dept that could be used to transfer large amounts of #data...
https://www.nbcnews.com/tech/security/doge-software-approval-alarms-labor-department-employees-data-security-rcna191583
"The approval for Musk’s team to use the remote-access and file-transfer software, known as PuTTY, has alarmed... #Labor Dept’s career employees...
“This is completely opposite of what we’d do to protect #privacy.”"
#Musk #Doge #Coup #Corruption #Tech #Security #News #USA #US
DOGE software approval alarms Labor Department employees
Elon Musk’s DOGE received approval from the Department of Labor to use software that could allow it to transfer vast amounts of data.David Ingram (NBC News)
British MPs already want a vote on sending troops to Ukraine – POLITICO
But they said the administration said they won't 'get ahead' of itself. POLITICO asked Starmer on a trip to Kyiv last month if he'd commit to a vote on any British peacekeepers. He declined to give such a commitment.BYTESEU (Bytes Europe)
British MPs already want a vote on sending troops to Ukraine – POLITICO - EUROPE SAYS
But they said the administration said they won't 'get ahead' of itself. POLITICO asked Starmer on a tripEUROPE SAYS (EUROPESAYS.COM)
British MPs already want a vote on sending troops to Ukraine – POLITICO - EUROPE SAYS
But they said the administration said they won't 'get ahead' of itself. POLITICO asked Starmer on a tripEUROPE SAYS (EUROPESAYS.COM)
Das BSI hat Wearables mit medizinischen Funktionen auf den Zahn gefühlt. Viele der getesteten Geräte sind potenziell hochgradig anfällig für Angriffe.
https://www.heise.de/news/BSI-Bericht-Erhebliche-Schwachstellen-bei-Fitness-Trackern-Co-10285313.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#BSI #FitnessTracker #Security #Sicherheitslücken #Wearables #news
A new audit of DeepSeek's iOS app has found glaring security issues, the foremost being that it sends sensitive data over the internet without any encryption.
[⚠️This exposes your data to interception and manipulation attacks.⚠️]
https://www.nowsecure.com/blog/2025/02/06/nowsecure-uncovers-multiple-security-and-privacy-flaws-in-deepseek-ios-mobile-app/
#deepseek #ai #llm #ios #app #it #security #privacy #engineer #media #tech #news
![[ImageSource: NowSecure]
"The DeepSeek iOS app globally disables App Transport Security (ATS) which is an iOS platform level protection that prevents sensitive data from being sent over unencrypted channels," NowSecure said. "Since this protection is disabled, the app can (and does) send unencrypted data over the internet."
The findings add to a growing list of concerns that have been raised around the artificial intelligence (AI) chatbot service, even as it skyrocketed to the top of the app store charts on both Android and iOS in several markets across the world.
The app's Chinese links, much like TikTok, have prompted U.S. lawmakers to push for a nation-wide ban on DeepSeek from government devices over risks that it could provide user information to Beijing.
<https://gottheimer.house.gov/posts/release-gottheimer-lahood-introduce-new-bipartisan-legislation-to-protect-americans-from-deepseek>
It's worth noting that several countries, including Australia, Italy, Netherlands, Taiwan, South Korea, government agencies in India and the United States (such as the Congress, NASA, Navy and Pentagon), have instituted bans on DeepSeek from government devices.](https://nerdculture.de/system/media_attachments/files/114/018/996/910/493/093/original/7e00d291d5e366a2.png "[ImageSource: NowSecure]
\"The DeepSeek iOS app globally disables App Transport Security (ATS) which is an iOS platform level protection that prevents sensitive data from being sent over unencrypted channels,\" NowSecure said. \"Since this protection is disabled, the app can (and does) send unencrypted data over the internet.\"
The findings add to a growing list of concerns that have been raised around the artificial intelligence (AI) chatbot service, even as it skyrocketed to the top of the app store charts on both Android and iOS in several markets across the world.
The app's Chinese links, much like TikTok, have prompted U.S. lawmakers to push for a nation-wide ban on DeepSeek from government devices over risks that it could provide user information to Beijing.
<https://gottheimer.house.gov/posts/release-gottheimer-lahood-introduce-new-bipartisan-legislation-to-protect-americans-from-deepseek>
It's worth noting that several countries, including Australia, Italy, Netherlands, Taiwan, South Korea, government agencies in India and the United States (such as the Congress, NASA, Navy and Pentagon), have instituted bans on DeepSeek from government devices.")
NowSecure Uncovers Multiple Security and Privacy Flaws in DeepSeek iOS Mobile App - NowSecure
A NowSecure mobile application security and privacy assessment has uncovered multiple security and privacy issues in the DeepSeek iOS mobile app that lead As the top iOS app since Jan 25, 2025, the DeepSeek iOS app has already been downloaded and use…Andrew Hoog (NowSecure, Inc.)
Kriminelle Server werden durch Firewalls oder Malware-Blocker begrenzt. Doch Regierungen können sie ohne Netzwerk-Kontakt auch gänzlich verstummen lassen.
https://www.heise.de/hintergrund/Blockadekonzepte-Unerwuenschte-Internetdienste-und-Server-sperren-10273884.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon
#DNS #Firewall #Internet #Security #Software #news
https://www.bbc.com/news/articles/cx242lw21jwo
KEWL🌀NEWS
#SECURITY #PRESS
Five takeaways from the Munich Security Conference
The Munich conference exposed tensions between the US and Europe over Nato and Ukraine - the BBC's Frank Gardner explains why this was a watershed in relations.Frank Gardner (BBC News)
UK’s Starmer to attend emergency European summit in Paris – POLITICO - EUROPE SAYS
'It's clear Europe must take on a greater role in NATO as we work with the United StatesEUROPE SAYS (EUROPESAYS.COM)