#infosec

Hi Fediverse 👋 We're CTI Forecast, an independent threat intel project from Lyon, France. What we do: • Scored IOC feeds (IPs, domains, hashes) over STIX/TAXII 2.1 • CVE exploitation forecasts, before CISA KEV listing • Our own honeypots: attackers who break in get reported to AbuseIPDB & shared on OTX Free public blocklists: https://ctiforecast.com/en/ #introduction #threatintel #infosec #CTI #honeypot #blueteam

NBC News reports that some top US cybersecurity firms are turning away new customers seeking emergency help as AI-aided attacks surge. Sophos, which sells incident response services, says other DFIR firms have asked it for overflow support when their teams reach capacity. Sophos's advice is to have a tested plan before you need outside help. https://www.sophos.com/en-us/blog/why-incident-response-demand-will-grow-faster-than-expected #DFIR #InfoSec

Hi infosec.exchange 👋 Computer scientist with a soft spot for self-hosting and security. Always happy to chat about Linux, privacy, and running your own services. #Introduction #Linux #Privacy #Security #SelfHosting #HomeLab #OpenSource #InfoSec

Security / privacy heads up: It looks like Google is now publicly linking the phone number on Google Pixel phones (or at least Pixel 6 and up) to any Gmail/Google account you've logged into that phone with.

"Phone number verification is turned on by default. We verify the phone number and add them to all Google Accounts that are signed in on the device. This applies to both current and future accounts and phone numbers. "

I.e., if you write erotica, have an Only Fans, do sex work, etc., and you have logged into your alt email addresses on your phone, Google will now make your personal phone number "findable" for anyone who has that email address.

This will potentially adversely affect a lot of (vulnerable and/or marginalized) people.

Everyone has been opted into this by default (because who has heard of consent or security in tech circles grrr).

To opt out:

1. On your phone, go to Settings, then next to your account name at the very top, go to "Google Services and Preferences".

2. Under “Privacy & security,” select Phone number verification.

3. Select whether to verify your phone number.

If you don't want your different identities linked and findable, make this change asap.

I hope that tech and especially infosec people and privacy advocates raise hell about this. (No one listens to the rest of us.)

*I don't work in tech, but I haven't seen tech people talk about this yet (from my limited Fedi vantage point).

Stay safe and keep your people safe.

Read more in the Google support pages.

https://support.google.com/android/answer/7521240

You're welcome to boost or share this post, but if you see tech professionasl discuss it, I'd much rather you quote them, and if you discuss this outside of Fedi, please do not give me credit. I don't need reply guys coming at me, I just want to flag people on what might be a problem. Thanks for your understanding.

#Infosec #Cybersecurity #Google #Pixel #Gmail

Is NetBSD affected by this new vulnerability? It's not in the list of affected systems, but I was able to reproduce anyway. Was this vulnerability found by AI? Probably. https://terminal2shell.com/ Upgrading to 11.1 does not remediate this. #NetBSD #vulnerability #infosec

Hello #infosec 👋 Think Red here. ~25 years keeping attackers out of identity systems; now I try to demonstrate how to ethically break in (with permission) and write down how to catch me. Every upcoming offensive post pays its defensive debt: ATT&CK-mapped, with detections and mitigations. Mostly identity and AI red teaming. Working on my first post soon. Follow along, or grab the RSS: https://thinkred.dev/index.xml #introduction #redteam #blueteam #AIsecurity

Want to know something funny? I routinely monitor GitHub for keywords, keys and domains related to the infrastructure and products I am responsible for protecting. This week I got an alert because one of those domains showed up in someone’s public repository. I looked into it. This was from what appears to be someone trying to start a competitive company - but the issue was that they’d created their entire stack in public repos, and our domain came up because they’d also committed the Claude prompts they’d used to generate said code - and those prompts included the instructions to copy the material on our domain - which is where the alert came from. Obviously this stuff happens all the time and has done for years, it’s just that now, it’s easier than ever to discover it at light speed because people are using tools they don’t understand to do it. Anyway I opened a PR suggesting they do their own work and also lock down their repo. #infosec

Hi Mastodon! I'm Ahmet, a developer from Türkiye. The operating system vulnerabilities of the past months made me want to build a safer Linux distribution and raise awareness about hardening. That became SedirOS, a hardened Debian-based server distro. 1.0 shipped this week. I'm here to get feedback and find out what's still missing. #introduction #linux #debian #infosec #selfhosted

#infosec #introduction #FediHire I lead a small data science team at a regional hospital network in the US Midwest. Asking from a place of total ignorance and respect for the infosec community on the Fedi. I'm looking for guidance on securing our laboratory infrastructure. Other teams at our institution shoulder this responsibility, but threats seem to be accelerating among lay users, and I want my team to be proactive. (1/)

Has anybody here solved the following conundrum?

• wanting a bluetooth/gps tracker to be able to recover a stolen bicycle (or other use case)
• not trusting Google, Apple and other companies to not use/sell/lose data
• using a deGoogled phone and Linux computer (in my case, LineageOS and Fedora)

That is, I would want to be able to recover my bicycle if stolen, while keeping my daily movements as private as possible. Enshittified web search has not helped much..

#askFedi #fediHelp #bikeTooter #bicycle #cycling #biking #security #privacy #infoSec #opSec #deGoogle #lineageOS #linux #fedora

Hi Infosec.Exchange. I'm Ilja Krasnjanski, an independent security researcher. This year I reconstructed UNK_DeadDrop, a fake-job-interview campaign aimed at developers, from retained artifacts without running a sample: a 14-part series, a paper, and an open-source static scanner with YARA rules. I'll post the findings here one at a time. https://krasforge.github.io/UNK_DeadDrop/ #introduction #infosec #ThreatIntel #malware

This is the best coverage I've found so far of the Claude Code for VS Code backdoor: https://www.stepsecurity.io/blog/claude-code-extension-trojanized T̵h̵e̵ ̵c̵o̵m̵p̵r̵o̵m̵i̵s̵e̵d̵ ̵v̵e̵r̵s̵i̵o̵n̵ ̵m̵a̵d̵e̵ ̵i̵t̵ ̵i̵n̵t̵o̵ ̵a̵l̵l̵ ̵o̵f̵ ̵t̵h̵e̵ ̵e̵x̵t̵e̵n̵s̵i̵o̵n̵ ̵r̵e̵g̵i̵s̵t̵r̵i̵e̵s̵.̵ EDIT: WRONG! It was just the Cursor Marketplace. Step Security has updated their article to remove statements to the contrary. It's unfortunate that they went off half-cocked and spread misleading information for a day. #infosec #ClaudeCode #ThreatIntelligence

Hi everyone! 👋 I'm Kushal, a cybersecurity student working toward a SOC analyst role. I built Intel60 (https://intel60.app) every 30 min it turns news from 8 security outlets + CISA KEV into 60-word, severity-rated briefs with CVSS, EPSS and "actively exploited" tags. Free, no sign-up, no ads. Here to learn from the blue team community. Feedback very welcome! #introduction #infosec #cybersecurity #blueteam #threatintel #SOC

** Help me find profiles to follow ... ***

Looking for these kinds of accounts to follow to keep informed on software and papers: ActivityPub and Fediverse hosters and software developers.Secure communication hosters and software developers.Usenet / NNTP hosters and software developers.Cryptographers, cryptanalysts, cipher code makers and breakers.Writers of papers and preprints.Textual Criticism buffs and translators, including producers of papers and software. #Introduction #ActivityPub #Fediverse #Usenet #NNTP #InfoSec #Papers #Cryptography #Cryptology #Encryption #Bible #TextualCriticism #Antiquities #Translation

Polymarket Supply Chain Attack Drains $2.7 Million via Hijacked Third-Party Script Polymarket reports a supply chain attack after hackers hijacked the DNS records of its performance monitoring vendor, DebugBear, to inject a wallet-draining script. The malicious code exploited active user sessions to steal approximately $2.7 million from 726 wallets before the platform removed the script and initiated full refunds. **** #cybersecurity #infosec #incident #databreach

Hi infosec.exchange 👋 #introduction I'm Seven. In the early 2000s I was writing AIM "progs" in VB6: punters, clone loaders, bots. Learned security by poking at AOL's protocols before most of the rules existed. These days: C#, PHP, web security and AI tooling. I'll be posting about web security, old-school exploits vs. modern defenses, and internet history. Archive: https://sevlegend.com Code: https://github.com/seven305/aim-progs-archive #infosec #websecurity #appsec #retrocomputing

@quixoticgeek@social.v.st if you're an Android user, I very much like Aegis for TOTP/HOTP https://github.com/beemdevelopment/Aegis#Security #InfoSec

Open-weight AI model GLM-5.3 cheated its way to correct answers https://www.helpnetsecurity.com/2026/10/30/irregular-glm-5-3-cyber-capabilities-evaluation/ #CyberSecurity #ArtificialIntelligence #InfoSec

#hackers have begun exploiting a critical #Brotli #vulnerability known as #Node2Shell, #Broccoli2Shell, and #HTTP2Shell. https://nvd.nist.gov/vuln/detail/cve-2026-111497 #infosec #security #cisa #exploit

Patch Sonar tracks zero-days and other flaws attackers are actively exploiting, in plain English, from CISA’s catalog and vendors’ own advisories. Follow for an automatic post each time a new one is confirmed, with exactly what to patch. Free weekly recap every Monday: patchsonar.com/weekly #zeroday #infosec #patchmanagement #introduction