Properly segregating environments aids in risk mitigation, adopts enhanced security practices, and aligns with secure software development life cycles.
Read more 
Recent searches
Search options
Administered by:
#infosec
429 posts229 participants2 posts today
Wonderfully bleak talk regarding the deeply challenging attack surface SMBs are presenting to threat actors (with actionable items at the end!) by @Tarah at @bsidesseattle
ALT
ALT
_duoBN4Z[A0{q(:ZL9V'
RewindFacility4Unbounded
A Brand Story from the Road to #RSAC 2025 — Featuring Akamai Technologies
Every year, as we get ready for RSA Conference, we fire up the engine and the mics—not just to cover the #tech, but to capture the #business, the strategy, and most importantly, the human side of #cybersecurity.
Our latest Brand Story does just that.
In this pre-conference conversation, we sit down with Rupesh Chokshi, SVP & GM of Application Security at #Akamai, to talk about the shifting cybersecurity landscape as we move deeper into the #AI era. From #APIattacks and #LLM scraping to hybrid infrastructures and #zerotrust environments, it’s clear that security is no longer just a barrier—it’s a business enabler.
And Akamai is right at the center of that transformation.
We explore what it means to build real #cyberresilience, how organizations can rethink their security strategy in an AI-driven world, and why this year’s #RSAC2025 Conference is set to be a defining moment for both innovation and trust.
We’ll see you in San Francisco for more conversations to share with your audience!
— Marco Ciappelli & Sean Martin, CISSP
ITSPmagazine Co-Founders
New Open-Source Tool Spotlight 
Google's GRR (GRR Rapid Response) is an open-source framework for remote live forensics and incident response. It allows security teams to investigate systems at scale without interrupting operations. Used for data collection, analysis, and hunting. #CyberSecurity #DFIR
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— 
Microsoft NTLM hash disclosure vulnerability now actively exploited
#cybersecurity #infosec #attack #activeattack
https://beyondmachines.net/event_details/microsoft-ntlm-hash-disclosure-vulnerability-now-actively-exploited-g-9-3-z-7/gD2P6Ple2L
BeyondMachinesMicrosoft NTLM hash disclosure vulnerability now actively exploitedCheckPoint reports active exploitation of CVE-2025-24054 (CVSS 6.5), a security vulnerability where malicious .library-ms files can leak NTLM authentication hashes to attacker-controlled servers with minimal user interaction, enabling credential theft and hash replay attacks.
Critical authentication vulnerability reported in Yokogawa Recorder Products
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-authentication-vulnerability-reported-in-yokogawa-recorder-products-e-m-7-e-n/gD2P6Ple2L
BeyondMachinesCritical authentication vulnerability reported in Yokogawa Recorder ProductsA critical security vulnerability (CVE-2025-1863, CVSS 9.3) in Yokogawa industrial recorder products allows unauthorized remote access to all settings and operations functions due to authentication being disabled by default on networked devices. The flaw affects multiple Yokogawa recorder product lines and versions. Yokogawa recommends mitigating the risk by enabling authentication and changing default passwords.
The Kickstarter for Digital Safety in a Dangerous World is now live!
Check it out here:
https://www.kickstarter.com/projects/kimcrawley/digital-safety-in-a-dangerous-world
- Advice for ordinary people and political activists for good opsec during politically unpredictable times.
- Reduce your big tech espionage footprint.
- Choose operating systems, applications, and online services that have better encryption and better privacy practices.
- When Microsoft, Google, etc. cannot be avoided, how to use their services and applications more securely.
- Lawful advice, written to be more accessible to laypeople. Technological concepts are defined and explained.
- Learn about Clearview AI, Boston Dynamics, Planitir, and other espionage platforms.
- Research sources include other cybersecurity researchers, at least one human rights lawyer, activists, and organizations such as the EFF.
My previous Kickstarter funded self published book project, the Ultimate Cybersecurity Careers Guide, was successful. I started working on it in December and the Kickstarter was launched at the same time. It was fully funded by February 2025. Most of my research and writing was done between January and March 2025. The eBook came out in March, and the paperback came out just a few weeks ago in April.
That was an overwhelming learning experience! It's a bit intense to do a new book Kickstarter immediately afterward. But current events have made this book more necessary than ever. I should be done the full draft by July or August.
All of my work is made by my own thinking and creativity. (Yes, even my dorky book cover art is made by myself in GIMP.) There is absolutely zero Gen AI in anything that I do. I take pride in my work.
Support human research and creativity!
Kickstarter link: https://www.kickstarter.com/projects/kimcrawley/digital-safety-in-a-dangerous-world
Pledge awards start at only $20 CAD (approximately $15 USD).
Thank you so much, everyone! If you can't back my second Kickstarter, that's fine. But in that case, please share my new Kickstarter on your social media. If my second Kickstarter is at least as successful as my first, I will be giving eBooks away to some political activists and activism groups as a public service. This cybersecurity and opsec knowledge should be shared with as many people as possible.
ALT
ALT
Boosting with hashtags:
https://grapheneos.social/@GrapheneOS/114359660453627718
> One of our two senior developers has been forcibly detained and conscripted to participate in a war. When they first went missing, we revoked their repository access as a precaution. (...) Our priority has been keeping them safe.
>
> (...)
>
> If you're an experienced AOSP developer interested in working full time on GrapheneOS in a fully remote position, see https://grapheneos.org/hiring.
(please boost original toot)
GrapheneOS MastodonGrapheneOS (@GrapheneOS@grapheneos.social)One of our two senior developers has been forcibly detained and conscripted to participate in a war. When they first went missing, we revoked their repository access as a precaution. We soon learned their disappearance was completely unrelated to GrapheneOS. Our priority has been keeping them safe.
Wow, this Node.js malware situation is pretty wild, isn't it? 
Sure, Node.js is incredibly handy, there's no denying that. But, let's be real, it can also be an open door for trouble if you're not careful with implementation. Things like PowerShell exclusions and sneaky obfuscated code are popping up – yeah, staying vigilant is absolutely key these days.
It really drives home what we're always telling our clients: Security by Design is non-negotiable! 
So, curious to hear from you all: What are *your* go-to tools for managing risks like these? And what strategies do you use to train your teams so they don't get caught out by these tactics? 
A tool to anonymise those little yellow dots your colour laser printer is probably adding to every page it prints:
V/l1pLg+;@z]P;2`z!,5
StuckUndecided5Groggy
The countdown to the weekend begins with Five for Friday, the Sherpa Intelligence roundup of #InfoSec and #DataPrivacy news you may have missed from this past week April 14-18, 2025! 
Read! Subscribe! Share!
https://sherpaintelligence.substack.com/p/five-for-friday-18-april-2025
ALT
ALT
This dumb password rule is from Vietnam Airlines.
`[[:alnum:]]{6,8}`
dumbpasswordrules.comVietnam Airlines - Dumb Password Rules`[[:alnum:]]{6,8}`
Want to feel better, help keep a Domestic Violence family housed. This month we're supporting a family to get safe housing and new devices (in the works). We're 74% to the goal already (and yes, I take refurbed devices). https://ko-fi.com/lockdownyourlife
Ko-fiSupport Lock Down Your Life on Ko-fi! ❤️. ko-fi.com/lockdownyourlifeSupport Lock Down Your Life On Ko-fi. Ko-fi lets you support the people and causes you love with small donations
ASN: AS7018
Location: Santa Clara, US
Added: 2025-03-22T05:31
Volume twelve of Scrolls is live - it's a magical one! 
https://shellsharks.com/scrolls/scroll/2025-04-18
Everyone below contributed in some way either through content they created, or stuff they found and boosted 
@disassociated @shankulkarny @hyde @askDNA @andyandy @e11e @artlung @ruben@social.kedera.nl @KurisuVanEdge @hongminhee @jbaty @hryggrbyr @axxuy @joxean @thejaymo @flan @sylvia @deadsuperhero @QueerMatters @mauricerenck @ImaginaryKarin @digitalsnow @jana @nichteric @justincox @avlcharlie @anubiarts @reiver @bradenslen @hamatti @mike_k @lianna @wafrn @mariobianchi @cwebber @selfcaregentle @jerry @bouletcorp2 @gretared @ApisNecros
shellsharks · Scroll duodecimArcane curation from the IndieWeb, Fediverse and Cybersecurity realms