Mathstodon

Pyrzout :vm:RaaS Explained: How Cybercriminals Are Scaling Attacks Like Startups – Source:hackread.com <a href="https://ciso2ciso.com/raas-explained-how-cybercriminals-are-scaling-attacks-like-startups-sourcehackread-com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ciso2ciso.com/raas-explained-how-cybercriminals-are-scaling-attacks-like-startups-sourcehackread-com/</a> <a href="https://social.skynetcloud.site/tags/1CyberSecurityNewsPost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#1CyberSecurityNewsPost</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/CyberCrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCrime</a> <a href="https://social.skynetcloud.site/tags/Ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ransomware</a> <a href="https://social.skynetcloud.site/tags/Hackread" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hackread</a> <a href="https://social.skynetcloud.site/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://social.skynetcloud.site/tags/Startups" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Startups</a> <a href="https://social.skynetcloud.site/tags/RaaS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RaaS</a>

Peter N. M. Hansteenerspan(4) committed to -current <a href="https://www.undeadly.org/cgi?action=article;sid=20250515044548" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.undeadly.org/cgi?action=article;sid=20250515044548</a> <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/erspan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#erspan</a> <a href="https://mastodon.social/tags/pcap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pcap</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networking</a> <a href="https://mastodon.social/tags/packetcapture" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#packetcapture</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/monitoring" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#monitoring</a> <a href="https://mastodon.social/tags/development" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#development</a> <a href="https://mastodon.social/tags/newfeature" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#newfeature</a> <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://mastodon.social/tags/freesoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freesoftware</a> <a href="https://mastodon.social/tags/libresoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#libresoftware</a>

heise SecurityDatenleck: Zehntausende BVG-Kundendaten betroffenKriminelle haben möglicherweise zahlreiche Kundendaten bei einem BVG-Dienstleister erbeutet. Die Untersuchung des Vorfalls läuft.<a href="https://www.heise.de/news/Datenleck-Zehntausende-BVG-Kundendaten-betroffen-10384126.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.heise.de/news/Datenleck-Zehntausende-BVG-Kundendaten-betroffen-10384126.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon</a><a href="https://social.heise.de/tags/Datenleck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Datenleck</a> <a href="https://social.heise.de/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

LobstersBreaking out of restricted mode: XSS to RCE in Visual Studio Code <a href="https://lobste.rs/s/h9ypzn" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://lobste.rs/s/h9ypzn</a> <a href="https://mastodon.social/tags/editors" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#editors</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://starlabs.sg/blog/2025/05-breaking-out-of-restricted-mode-xss-to-rce-in-visual-studio-code/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://starlabs.sg/blog/2025/05-breaking-out-of-restricted-mode-xss-to-rce-in-visual-studio-code/</a>

Leon P SmithI've written major new sections concerning deployment issues surrounding the G3P in a typical client-side password hashing scenario.I touch on:1. Second Secrets and 2SKD2. Account Separation3. Vagaries of public salt servers 4. Private Salts5. Dynamic testing6. Login page testing7. Passphrase Generation8. Passphrase Assistance9. External Checksums10. Smartphone on-screen keyboards11. Virtual MemoryWhew! If you have any interest in these topics, let me know what you think!<a href="https://github.com/auth-global/self-documenting-cryptography/blob/26abe8f9c9a559c02304f8ab7b5b144c36668738/design-documents/g3pb2.md#deployment-considerations" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/auth-global/self-documenting-cryptography/blob/26abe8f9c9a559c02304f8ab7b5b144c36668738/design-documents/g3pb2.md#deployment-considerations</a><a href="https://ioc.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://ioc.exchange/tags/cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptography</a> <a href="https://ioc.exchange/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#password</a> <a href="https://ioc.exchange/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://ioc.exchange/tags/e2ee" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#e2ee</a>

Marcus AdamsHeadline: North Korea Stole Your JobSubtitle: For years, North Korea has been secretly placing young IT workers inside Western companies. With <a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a>, their schemes are now more devious—and effective—than ever.Source: <a href="https://www.wired.com/story/north-korea-stole-your-tech-job-ai-interviews/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.wired.com/story/north-korea-stole-your-tech-job-ai-interviews/</a>Archive Link: <a href="https://archive.is/j6LmH" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://archive.is/j6LmH</a><a href="https://mastodon.social/tags/NorthKorea" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NorthKorea</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a>

Pyrzout :vm:RaaS Explained: How Cybercriminals Are Scaling Attacks Like Startups <a href="https://hackread.com/raas-explained-cybercriminals-scaling-attacks-startups/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hackread.com/raas-explained-cybercriminals-scaling-attacks-startups/</a> <a href="https://social.skynetcloud.site/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://social.skynetcloud.site/tags/CyberCrime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCrime</a> <a href="https://social.skynetcloud.site/tags/Ransomware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ransomware</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/Startups" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Startups</a> <a href="https://social.skynetcloud.site/tags/RaaS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RaaS</a>

Paco Hope #resistOMG. <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> <a href="https://infosec.exchange/tags/Copilot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Copilot</a> bypasses <a href="https://infosec.exchange/tags/Sharepoint" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sharepoint</a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> so you don’t have to! “CoPilot gets privileged access to SharePoint so it can index documents, but unlike the regular search feature, it doesn’t know about or respect any of the access controls you might have set up. You can get CoPilot to just dump out the contents of sensitive documents that it can see, with the bonus feature* that your access won’t show up in audit logs.”The S in CoPilot stands for Security!<a href="https://pivotnine.com/the-crux/archive/remembering-f00fs-of-old/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://pivotnine.com/the-crux/archive/remembering-f00fs-of-old/</a>

IT News'Aggressive' Hackers of UK Retailers Are Now Targeting US Stores, Says Google - Google has warned that the hacker group known as "Scattered Spider," which recentl... - <a href="https://it.slashdot.org/story/25/05/14/224205/aggressive-hackers-of-uk-retailers-are-now-targeting-us-stores-says-google?utm_source=rss1.0mainlinkanon&utm_medium=feed" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://it.slashdot.org/story/25/05/14/224205/aggressive-hackers-of-uk-retailers-are-now-targeting-us-stores-says-google?utm_source=rss1.0mainlinkanon&utm_medium=feed</a> <a href="https://schleuss.online/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

Marcus AdamsSounds more like somebody probably figured out what service they used to send out SMS messages and were able to breach that third party vendor. If attackers had other information on specific users they were targeting this could have been a part of that. I know a friend whose Steam account recently got hacked despite having 2FA enabled.Headline: Following data leak, <a href="https://mastodon.social/tags/Valve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Valve</a> assures <a href="https://mastodon.social/tags/Steam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Steam</a> users that its systems were not breachedSource: <a href="https://www.neowin.net/news/following-data-leak-valve-assures-steam-users-that-its-systems-were-not-breached/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.neowin.net/news/following-data-leak-valve-assures-steam-users-that-its-systems-were-not-breached/</a><a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a>

GrapheneOSVanadium version 136.0.7103.125.0 released:<a href="https://github.com/GrapheneOS/Vanadium/releases/tag/136.0.7103.125.0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/GrapheneOS/Vanadium/releases/tag/136.0.7103.125.0</a>See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.Forum discussion thread:<a href="https://discuss.grapheneos.org/d/22476-vanadium-version-136071031250-released" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discuss.grapheneos.org/d/22476-vanadium-version-136071031250-released</a><a href="https://grapheneos.social/tags/GrapheneOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GrapheneOS</a> <a href="https://grapheneos.social/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://grapheneos.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://grapheneos.social/tags/browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browser</a>

unixbhaskarFor your curiosity's sake..😜Context: Yesterday's video shortcoming....fixed<a href="https://youtu.be/nEbb5aAS9cE" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://youtu.be/nEbb5aAS9cE</a><a href="https://mastodon.social/tags/linuxadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linuxadmin</a> <a href="https://mastodon.social/tags/tool" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tool</a> <a href="https://mastodon.social/tags/dmenu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dmenu</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a>

GamingOnLinuxThere's been reports of a Steam data breach recently, and instead of jumping the gun I reached out to Valve first to see what was going on. Here's a statement from Valve. <a href="https://www.gamingonlinux.com/2025/05/heres-a-statement-from-valve-on-the-reported-steam-data-breach/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.gamingonlinux.com/2025/05/heres-a-statement-from-valve-on-the-reported-steam-data-breach/</a><a href="https://mastodon.world/tags/Steam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Steam</a> <a href="https://mastodon.world/tags/Valve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Valve</a> <a href="https://mastodon.world/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://mastodon.world/tags/Misc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Misc</a>

Benjamin Carr, Ph.D. 👨🏻‍💻🧬Insight: Rogue communication devices found in <a href="https://hachyderm.io/tags/Chinese" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Chinese</a> <a href="https://hachyderm.io/tags/solar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#solar</a> power inverters Using the rogue communication devices to skirt firewalls and switch off inverters remotely, or change their settings, could destabilise <a href="https://hachyderm.io/tags/powergrids" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#powergrids</a>, damage <a href="https://hachyderm.io/tags/energy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#energy</a> infrastructure, and trigger widespread <a href="https://hachyderm.io/tags/blackouts" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blackouts</a>, experts said. "That effectively means there is a built-in way to physically destroy the grid," one of the people said. <a href="https://www.reuters.com/sustainability/climate-energy/ghost-machine-rogue-communication-devices-found-chinese-inverters-2025-05-14/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.reuters.com/sustainability/climate-energy/ghost-machine-rogue-communication-devices-found-chinese-inverters-2025-05-14/</a> <a href="https://hachyderm.io/tags/espionage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#espionage</a> <a href="https://hachyderm.io/tags/china" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#china</a> <a href="https://hachyderm.io/tags/itsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsec</a> <a href="https://hachyderm.io/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

ITSEC NewsGoogle Chrome to block admin-level browser launches for better security - Google is rolling out a change to Chromium that "de-elevates" Google Chrome so it does no... <a href="https://www.bleepingcomputer.com/news/google/google-chrome-to-block-admin-level-browser-launches-for-better-security/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/google/google-chrome-to-block-admin-level-browser-launches-for-better-security/</a> <a href="https://schleuss.online/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://schleuss.online/tags/google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#google</a>

IsThereAnyDealLots of rumors of a Steam user data leak. TL;DR so far seems to be: don't worry about it, just make sure you are using Steam app 2FA.<a href="https://totalgamingnetwork.com/valve/3537559-no-your-steam-account-details-werent-stolen-or-leaked" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://totalgamingnetwork.com/valve/3537559-no-your-steam-account-details-werent-stolen-or-leaked</a><a href="https://www.xda-developers.com/89-million-steam-account-details-leak/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.xda-developers.com/89-million-steam-account-details-leak/</a><a href="https://mastodon.social/tags/steam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#steam</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/2fa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2fa</a>

ITSEC NewsHackers behind UK retail attacks now targeting US companies - Google warned today that hackers using Scattered Spider tactics against retail chains in ... <a href="https://www.bleepingcomputer.com/news/security/google-scattered-spider-switches-targets-to-us-retail-chains/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/google-scattered-spider-switches-targets-to-us-retail-chains/</a> <a href="https://schleuss.online/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

heise online EnglishIntel: Another attack bypasses all previous CPU protection measuresIntel is on a roll: Another vulnerability opens up many processors to side-channel attacks again despite previous protective measures.<a href="https://www.heise.de/en/news/Intel-Another-attack-bypasses-all-previous-CPU-protection-measures-10383787.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.heise.de/en/news/Intel-Another-attack-bypasses-all-previous-CPU-protection-measures-10383787.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon</a><a href="https://social.heise.de/tags/Prozessoren" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Prozessoren</a> <a href="https://social.heise.de/tags/Intel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intel</a> <a href="https://social.heise.de/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a> <a href="https://social.heise.de/tags/MeltdownundSpectre" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MeltdownundSpectre</a> <a href="https://social.heise.de/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.heise.de/tags/Sicherheitsl%C3%BCcken" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sicherheitslücken</a> <a href="https://social.heise.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

LobstersIntroducing oniux: Kernel-level Tor isolation for any Linux app <a href="https://lobste.rs/s/q919pi" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://lobste.rs/s/q919pi</a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://blog.torproject.org/introducing-oniux-tor-isolation-using-linux-namespaces/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://blog.torproject.org/introducing-oniux-tor-isolation-using-linux-namespaces/</a>

ComputerBaseGoogle zur I/O: Android-Geräte sollen mit neuen Funktionen sicherer werden <a href="https://www.computerbase.de/news/betriebssysteme/google-zur-io-android-geraete-sollen-mit-neuen-funktionen-sicherer-werden.92637/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.computerbase.de/news/betriebssysteme/google-zur-io-android-geraete-sollen-mit-neuen-funktionen-sicherer-werden.92637/</a> <a href="https://mastodon.social/tags/google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#google</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/androidshow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidshow</a>

Recent searches

Search options

Administered by:

Server stats:

#security