CIRCLE WITH A DOT

@jonsnow Literally none of Meta's messaging platforms are end to end encrypted. They use the term for marketing hype. Meta's business is surveillence and selling user data.

PAN-OS-Lücke wird angegriffen, Updates erst in Wochen geplantPalo Alto Networks warnt vor einer bereits angegriffenen kritischen Sicherheitslücke in PAN-OS. Updates kommen frühestens Mitte Mai.https://www.heise.de/news/PAN-OS-Luecke-wird-angegriffen-Updates-erst-in-Wochen-geplant-11283352.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#Cyberangriff #Exploit #IT #Security #Sicherheitslücken #news

The alarming data point is that cryptographically relevant quantum computers could emerge within 10–15 years, posing an immediate legal exposure for SMBs handling regulated data.Where would 9 critical mistakes to avoid when implementing quant... break first in your environment?Read more: https://steelefortress.com/fortress-feed/9-critical-mistakes-to-avoid-when-implementing-quantum-resistant-cryptographyCyberSecurity #Compliance #InfoSec #Security Watch Teaser: https://steelefortress.com/4ruugc

🟢 Diplomatic | 6/10Netanyahu Shortens Testimony Due to Urgent Security ScheduleIsraeli Prime Minister Benjamin Netanyahu has requested the court to shorten the duration of his testimony in an ongoing criminal case. He proposed starting the session at 16:00, citing an urgent security-diplomatic schedule. This decision stems from the need to balance judicial proceedings with pressing state affairs. Netanyahu emphasized that the current security situation requires his direct involvement in several urgent measures. The court is expected to review this request in the near future.#OSINT #NewsGroup #Diplomatic #Israel #Security

@NZahn42 One overlooked factor: the lack of a standardized EU-wide security classification system forces startups to navigate 27 different national clearance processes, massively inflating compliance costs and timelines.

RFC 1178 (1990): Choosing a Name for Your Computer.Three decades later, the advice still holds. #cybersecurity #infosec #security #rfc #rfc1178

Shai-Hulud Worm Pivots to Multi-Cloud: intercom-client@7.0.4 Hijacked — 361,000 Weekly Downloads, AWS, GCP, and Azure Credentials Now in Scope https://www.stepsecurity.io/blog/shai-hulud-worm-pivots-to-multi-cloud-intercom-client-hijacked#Security #SupplyChain #DevSecOps

A Mini Shai-Hulud Has Appeared: Obfuscated Bun Runtime Payloads Hit SAP-Related npm Packages https://www.stepsecurity.io/blog/a-mini-shai-hulud-has-appeared#Security #SupplyChain #DevSecOps

Bitwarden CLI Hijacked on npm: Bun-Staged Credential Stealer Targets Developers, GitHub Actions, and AI Tools https://www.stepsecurity.io/blog/bitwarden-cli-hijacked-on-npm-bun-staged-credential-stealer-targets-developers-github-actions-and-ai-tools#Security #SupplyChain #DevSecOps

CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister https://www.stepsecurity.io/blog/pgserve-compromised-on-npm-malicious-versions-harvest-credentials#Security #SupplyChain #DevSecOps

Announcing Dependabot Configuration Enhancements: Cooldown and Group Support https://www.stepsecurity.io/blog/announcing-dependabot-configuration-enhancements-cooldown-and-group-support#Security #SupplyChain #DevSecOps

lightning: Obfuscated JavaScript Credential Stealer Bundled in PyPI Wheel https://www.stepsecurity.io/blog/lightning-obfuscated-javascript-credential-stealer-bundled-in-pypi-wheel#Security #SupplyChain #DevSecOps

elementary-data Compromised on PyPI and GHCR: Forged Release Pushed via GitHub Actions Script Injection https://www.stepsecurity.io/blog/elementary-data-compromised-on-pypi-and-ghcr-forged-release-pushed-via-github-actions-script-injection#Security #SupplyChain #DevSecOps

TeamPCP Injects Two-Stage Credential Stealer into xinference PyPI Package https://www.stepsecurity.io/blog/teampcp-injects-two-stage-credential-stealer-into-xinference-pypi-package#Security #SupplyChain #DevSecOps

@ProPublica that guy is a complete fraud. Worse than walrus boy.

Netzwerkanalysetool Wireshark: Zahlreiche Sicherheitslücken geschlossenIn zwei aktuellen Versionen von Wireshark haben die Entwickler mehrere Schwachstellen geschlossen.https://www.heise.de/news/Netzwerkanalysetool-Wireshark-Zahlreiche-Sicherheitsluecken-geschlossen-11280168.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#IT #Patchday #Security #Sicherheitslücken #Updates #Wireshark #news

Linux-Lücke „Copy Fail“ wird bereits angegriffenVor dem Wochenende wurde die Linux-Lücke „Copy Fail“ bekannt, die Angreifern root-Rechte verschafft. Die wird bereits attackiert.https://www.heise.de/news/Linux-Luecke-Copy-Fail-wird-bereits-angegriffen-11279850.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon#Exploit #IT #Linux #Security #Sicherheitslücken #Updates #news

RFC 1178 (1990): Choosing a Name for Your Computer.Three decades later, the advice still holds. #cybersecurity #infosec #security #rfc #rfc1178

🟡 Security Incident | 5/10Gunfire during funeral in Dahieh, LebanonThe Lebanese Army reported raids, armored patrols, and temporary checkpoints following gunfire during a funeral in the southern suburbs of Beirut. One shooter was arrested, weapons were seized.#OSINT #NewsGroup #Lebanon #Security #Beirut

Plus: The NSA tests Anthropic’s Mythos Preview to find vulnerabilities, a Finnish teen is charged over the Scattered Spider hacking spree, and more.