Social 📸 Photography

The New Oil<a href="https://mastodon.thenewoil.org/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> <a href="https://mastodon.thenewoil.org/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://mastodon.thenewoil.org/tags/Konfety" class="mention hashtag" rel="nofollow noopener" target="_blank">#Konfety</a> uses malformed APKs to evade detection<a href="https://www.bleepingcomputer.com/news/security/android-malware-konfety-uses-malformed-apks-to-evade-detection/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/android-malware-konfety-uses-malformed-apks-to-evade-detection/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

🌈 vanta rainbow black 🌈<a href="https://mastodon.thenewoil.org/@thenewoil" class="u-url mention" rel="nofollow noopener" target="_blank">@thenewoil</a> unpaywalled link so people can actually fucking read it<a href="https://web.archive.org/web/20250715025023/https://www.404media.co/hackers-can-remotely-trigger-the-brakes-on-american-trains-and-the-problem-has-been-ignored-for-years/" rel="nofollow noopener" translate="no" target="_blank">https://web.archive.org/web/20250715025023/https://www.404media.co/hackers-can-remotely-trigger-the-brakes-on-american-trains-and-the-problem-has-been-ignored-for-years/</a><a href="https://cyberpunk.lol/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://cyberpunk.lol/tags/trains" class="mention hashtag" rel="nofollow noopener" target="_blank">#trains</a>

The New OilHackers Can Remotely Trigger the Brakes on American <a href="https://mastodon.thenewoil.org/tags/Trains" class="mention hashtag" rel="nofollow noopener" target="_blank">#Trains</a> and the Problem Has Been Ignored for Years<a href="https://www.404media.co/hackers-can-remotely-trigger-the-brakes-on-american-trains-and-the-problem-has-been-ignored-for-years/" rel="nofollow noopener" translate="no" target="_blank">https://www.404media.co/hackers-can-remotely-trigger-the-brakes-on-american-trains-and-the-problem-has-been-ignored-for-years/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Heliograph<a href="https://mastodon.au/tags/TheCrux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TheCrux</a>'s DIY <a href="https://mastodon.au/tags/IoT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IoT</a> labelling scheme for <a href="https://mastodon.au/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> risks ✓ <a href="https://cybersecure.eigenmagic.com" rel="nofollow noopener" translate="no" target="_blank">https://cybersecure.eigenmagic.com</a> <a href="https://mastodon.au/tags/CyberSecure" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecure</a>™ <a href="https://mastodon.au/tags/iotAllianceAustralia" class="mention hashtag" rel="nofollow noopener" target="_blank">#iotAllianceAustralia</a>

Hacker NewsEncrypting files with passkeys and age<a href="https://words.filippo.io/passkey-encryption/" rel="nofollow noopener" translate="no" target="_blank">https://words.filippo.io/passkey-encryption/</a><a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/Encrypting" class="mention hashtag" rel="nofollow noopener" target="_blank">#Encrypting</a> <a href="https://mastodon.social/tags/files" class="mention hashtag" rel="nofollow noopener" target="_blank">#files</a> <a href="https://mastodon.social/tags/with" class="mention hashtag" rel="nofollow noopener" target="_blank">#with</a> <a href="https://mastodon.social/tags/passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#passkeys</a> <a href="https://mastodon.social/tags/and" class="mention hashtag" rel="nofollow noopener" target="_blank">#and</a> <a href="https://mastodon.social/tags/age" class="mention hashtag" rel="nofollow noopener" target="_blank">#age</a> <a href="https://mastodon.social/tags/Encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#Encryption</a> <a href="https://mastodon.social/tags/Passkeys" class="mention hashtag" rel="nofollow noopener" target="_blank">#Passkeys</a> <a href="https://mastodon.social/tags/DataSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataSecurity</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechNews</a>

Brian Greenberg :verified:OpenAI’s next step for ChatGPT is clear. The goal is to make it an operational assistant for real work. This includes managing schedules, handling communications, automating workflows, and connecting to devices. If they deliver, it will set a new bar for digital assistants. The hard part is user trust, privacy, and reliable performance at scale. Most fail here.TL;DR 🔍 Aims to manage calendars, email, and projects 🧱 Will automate code and workflow tasks ⚠️ Real risks for privacy and data security 🔄 Needs device integration and regulatory approval<a href="https://www.theverge.com/command-line-newsletter/677705/openai-chatgpt-super-assistant" rel="nofollow noopener" translate="no" target="_blank">https://www.theverge.com/command-line-newsletter/677705/openai-chatgpt-super-assistant</a> <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/automation" class="mention hashtag" rel="nofollow noopener" target="_blank">#automation</a> <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a>

Brian Greenberg :verified:Signal has introduced a default “Screen security” setting on Windows 11 that uses DRM to block Microsoft’s Recall from capturing private chats. This workaround brings up big concerns about OS-level AI features.TL;DR 🔍 Signal repurposed DRM meant for copyrighted content 🧱 Blocks screenshots at OS level by default ⚠️ Could affect accessibility tools that rely on screenshots 🔄 Signals need OS vendors to provide granular privacy controls<a href="https://arstechnica.com/security/2025/05/signal-resorts-to-weird-trick-to-block-windows-recall-in-desktop-app/" rel="nofollow noopener" translate="no" target="_blank">https://arstechnica.com/security/2025/05/signal-resorts-to-weird-trick-to-block-windows-recall-in-desktop-app/</a> <a href="https://infosec.exchange/tags/leadership" class="mention hashtag" rel="nofollow noopener" target="_blank">#leadership</a> <a href="https://infosec.exchange/tags/riskmanagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#riskmanagement</a> <a href="https://infosec.exchange/tags/AIgovernance" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIgovernance</a> <a href="https://infosec.exchange/tags/cyberstrategy" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyberstrategy</a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://infosec.exchange/tags/cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloud</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

IT NewsU.S. earmarks $1B for 'offensive cyber operations' despite broader efforts to slash cybersecurity spending - The "One Big Beautiful Bill Act" specifically looks to bols... - <a href="https://www.tomshardware.com/tech-industry/cyber-security/u-s-earmarks-usd1b-for-offensive-cyber-operations-despite-broader-efforts-to-slash-cybersecurity-spending" rel="nofollow noopener" translate="no" target="_blank">https://www.tomshardware.com/tech-industry/cyber-security/u-s-earmarks-usd1b-for-offensive-cyber-operations-despite-broader-efforts-to-slash-cybersecurity-spending</a> <a href="https://schleuss.online/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://schleuss.online/tags/techindustry" class="mention hashtag" rel="nofollow noopener" target="_blank">#techindustry</a>

Loki the CatHackers can remotely trigger train brakes via radio - a vulnerability known since 2012 but only recently addressed. American infrastructure: where "urgent" means "sometime in the next decade" 🚂The exploit knowledge exists online, AI can build it, you just need physical proximity. All aboard the cybersecurity express!<a href="https://it.slashdot.org/story/25/07/15/1814234/hackers-can-remotely-trigger-the-brakes-on-american-trains-and-the-problem-has-been-ignored-for-years" rel="nofollow noopener" translate="no" target="_blank">https://it.slashdot.org/story/25/07/15/1814234/hackers-can-remotely-trigger-the-brakes-on-american-trains-and-the-problem-has-been-ignored-for-years</a><a href="https://toot.community/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://toot.community/tags/Infrastructure" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infrastructure</a> <a href="https://toot.community/tags/TrainSafety" class="mention hashtag" rel="nofollow noopener" target="_blank">#TrainSafety</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/DOGE" class="mention hashtag" rel="nofollow noopener" target="_blank">#DOGE</a> Denizen Marko Elez Leaked API Key for <a href="https://mastodon.thenewoil.org/tags/xAI" class="mention hashtag" rel="nofollow noopener" target="_blank">#xAI</a><a href="https://krebsonsecurity.com/2025/07/doge-denizen-marko-elez-leaked-api-key-for-xai/" rel="nofollow noopener" translate="no" target="_blank">https://krebsonsecurity.com/2025/07/doge-denizen-marko-elez-leaked-api-key-for-xai/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

AAKLThis is a guest post.The New Stack: Generative AI Creates APIs Faster Than Teams Can Secure Them <a href="https://thenewstack.io/generative-ai-creates-apis-faster-than-teams-can-secure-them/" rel="nofollow noopener" translate="no" target="_blank">https://thenewstack.io/generative-ai-creates-apis-faster-than-teams-can-secure-them/</a> <a href="https://hachyderm.io/@TheNewStack" class="u-url mention" rel="nofollow noopener" target="_blank">@TheNewStack</a> <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

Loki the CatMicrosoft's "digital escorts" earning barely above minimum wage are supposed to supervise highly skilled Chinese engineers maintaining Defense Dept systems. One escort admits: "We really can't tell if what they're doing is malicious." Nothing says national security like bargain-basement oversight! 🤦‍♂️<a href="https://slashdot.org/story/25/07/15/1345208/microsoft-uses-chinese-engineers-to-maintain-defense-department-systems-under-minimal-us-oversight" rel="nofollow noopener" translate="no" target="_blank">https://slashdot.org/story/25/07/15/1345208/microsoft-uses-chinese-engineers-to-maintain-defense-department-systems-under-minimal-us-oversight</a><a href="https://toot.community/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> <a href="https://toot.community/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://toot.community/tags/DefenseDepartment" class="mention hashtag" rel="nofollow noopener" target="_blank">#DefenseDepartment</a>

CVE ProgramMinutes from the CVE Board teleconference meeting on June 25 are now available <a href="https://www.mail-archive.com/cve-editorial-board-list@mitre.org/msg00277.html" rel="nofollow noopener" translate="no" target="_blank">https://www.mail-archive.com/cve-editorial-board-list@mitre.org/msg00277.html</a> <a href="https://mastodon.social/tags/cve" class="mention hashtag" rel="nofollow noopener" target="_blank">#cve</a> <a href="https://mastodon.social/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> <a href="https://mastodon.social/tags/vulnerabilitymanagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerabilitymanagement</a> <a href="https://mastodon.social/tags/hssedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#hssedi</a> <a href="https://mastodon.social/tags/cisa" class="mention hashtag" rel="nofollow noopener" target="_blank">#cisa</a> <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Kevin Dominik KorteSometimes, it is incredible how few cybersecurity incidents there are. Leaving a security hole on a train open for 14 years must take an enormous amount of faith and prayers. <a href="https://fosstodon.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://industrialcyber.co/industrial-cyber-attacks/critical-cyber-flaw-linked-to-eot-module-ignored-in-us-rail-systems-for-12-years-fix-not-expected-until-2027/" rel="nofollow noopener" translate="no" target="_blank">https://industrialcyber.co/industrial-cyber-attacks/critical-cyber-flaw-linked-to-eot-module-ignored-in-us-rail-systems-for-12-years-fix-not-expected-until-2027/</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/UK" class="mention hashtag" rel="nofollow noopener" target="_blank">#UK</a> launches vulnerability research program for external experts<a href="https://www.bleepingcomputer.com/news/security/uk-launches-vulnerability-research-program-for-external-experts/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/uk-launches-vulnerability-research-program-for-external-experts/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

AAKL2025 Imperva Bad Bot Report: How AI is Supercharging the Bot Threat <a href="https://www.imperva.com/blog/2025-imperva-bad-bot-report-how-ai-is-supercharging-the-bot-threat/" rel="nofollow noopener" translate="no" target="_blank">https://www.imperva.com/blog/2025-imperva-bad-bot-report-how-ai-is-supercharging-the-bot-threat/</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a>

ℒӱḏɩę :blahaj:I finally stumbled upon a real <a href="https://tech.lgbt/tags/ClickFix" class="mention hashtag" rel="nofollow noopener" target="_blank">#ClickFix</a> attack in the wild. My favorite weather page presented the screen as shown. It doesn't take much tech knowledge to know these instructions are pure bullshit.Now here's what's interesting. I reloaded the page, normal page came up. Cleared the cookies, normal page. Tried a different browser, normal page. So is it random? Should I alert the site owner?<a href="https://tech.lgbt/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://tech.lgbt/tags/phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#phishing</a> <a href="https://tech.lgbt/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://tech.lgbt/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://tech.lgbt/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudflare</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/Episource" class="mention hashtag" rel="nofollow noopener" target="_blank">#Episource</a> is notifying millions of people that their <a href="https://mastodon.thenewoil.org/tags/health" class="mention hashtag" rel="nofollow noopener" target="_blank">#health</a> data was stolen<a href="https://techcrunch.com/2025/07/14/episource-is-notifying-millions-of-people-that-their-health-data-was-stolen/" rel="nofollow noopener" translate="no" target="_blank">https://techcrunch.com/2025/07/14/episource-is-notifying-millions-of-people-that-their-health-data-was-stolen/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://mastodon.thenewoil.org/tags/DataBreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataBreach</a> <a href="https://mastodon.thenewoil.org/tags/healthcare" class="mention hashtag" rel="nofollow noopener" target="_blank">#healthcare</a>

CHERI AllianceThe CHERI Alliance is all about bringing the computing world together to adopt CHERI security technology.We’re a mix of industry partners, open-source contributors, researchers, and governments, all working to make CHERI more accessible and widely used.Check out who’s already on board: <a href="https://cheri-alliance.org/member/" rel="nofollow noopener" translate="no" target="_blank">https://cheri-alliance.org/member/</a>We’ve got active working groups tackling everything from software porting to system integration and standards - all helping the community adopt and build with CHERI more effectively. Take a look: <a href="https://cheri-alliance.org/who-we-are/working-groups/" rel="nofollow noopener" translate="no" target="_blank">https://cheri-alliance.org/who-we-are/working-groups/</a>Curious? Keen to get involved? Here’s how to join us: <a href="https://cheri-alliance.org/memberships/" rel="nofollow noopener" translate="no" target="_blank">https://cheri-alliance.org/memberships/</a><a href="https://infosec.exchange/tags/CHERI" class="mention hashtag" rel="nofollow noopener" target="_blank">#CHERI</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/MemorySafety" class="mention hashtag" rel="nofollow noopener" target="_blank">#MemorySafety</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a>

AAKLTRM, from yesterday: Abacus Market Conducts Likely Exit Scam Amid Increasingly Unstable Western Darknet Marketplace Landscape <a href="https://www.trmlabs.com/resources/blog/abacus-market-conducts-likely-exit-scam-amid-increasingly-unstable-western-darknet-marketplace-landscape" rel="nofollow noopener" translate="no" target="_blank">https://www.trmlabs.com/resources/blog/abacus-market-conducts-likely-exit-scam-amid-increasingly-unstable-western-darknet-marketplace-landscape</a> More: Infosecurity-Magazine: Experts: Abacus Market Shutters After Exit Scam <a href="https://www.infosecurity-magazine.com/news/abacus-market-shutters-exit-scam/" rel="nofollow noopener" translate="no" target="_blank">https://www.infosecurity-magazine.com/news/abacus-market-shutters-exit-scam/</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a>

Recent searches

Search options

Administered by:

Server stats:

#cybersecurity