Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)K

Kid

@ kid @sh.itjust.works

Posts
3009
Comments
35
Joined
2 yr. ago

  • Remote attack on pagers used by Hezbollah caused 9 deaths and thousands of injuries

    Jump

  • If you had to access an unfamiliar flash drive (or other data storage), what safety precautions would you take?

    Jump

  • FlightAware configuration error leaked user data for years

    Jump

  • Take that with a grain of salt.

  • Deleted

    Donald Trump interview with Elon Musk disrupted by DDoS Cyber Attack

    Jump

  • Agreed

  • The Illusion Of Reputational Damage

    Jump

  • I like to use the 2013 Target breach case. They lost $1 billion due to the attack, their stocks dropped significantly after the attack, had several lawsuits, they closed a few stores, and changed the CEO and CIO. But a few months later, all was forgiven, their stocks recovered, and life went on.

    Don't get me wrong, the risks of a cyber attack have to be taken seriously. But I feel that I have overestimated the impacts of reputational damage my whole life, as an infosec professional. My thinking was always like this: if you get reputational damage, you are done, no chance to recover, it is the end of it.

    I'm following the Crowdstrike case, but I would bet that they will lose some market share (mostly prospects), perhaps some layoffs, but stocks will come up eventually.

  • 332 Million Email Addresses Scraped from SOCRadar.io Dumped Online

    Jump

  • Not as much as if it contained passwords, for sure. Bu it gives a nice mailing list for phishing and so on.

  • Major Russian banks hit with DDoS attacks as Ukraine claims responsibility

    Jump

  • Depends of the country. Disrupt with Internet/communications may be a crime in some countries.

  • Cyber firm KnowBe4 hired a fake IT worker from North Korea

    Jump

  • Kudos to SOC team.

  • CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices

    Jump

  • Ivanti Patches Two Critical Avalanche Flaws in Major Update

    Jump

  • If anyone is still using it, anyways....

  • CISA Issues Emergency Directive After Midnight Blizzard Microsoft Hits

    Jump

  • Maybe cyber resilience? Quick identify, respond and recover from an incident.

  • LastPass: Hackers targeted employee in failed deepfake CEO call

    Jump

  • Hackers 10 - 1 LastPass

  • Microsoft left internal passwords exposed in latest security blunder

    Jump

  • From the article:

    Microsoft locked down a server last month that exposed Microsoft employee passwords, keys and credentials to the open Internet, as the company faces growing pressure to strengthen the security of its software. Microsoft was notified of the vulnerability on February 6th and the block on March 5th. It is unclear whether anyone accessed the exposed server during this period.

  • Rust addresses critical vulnerability on Windows

    Jump

  • Good bot