Nume MacAroon @nm

**Erioldoesdesign** @erioldoesdesign@hachyderm.io · 5m

Erioldoesdesign @erioldoesdesign@hachyderm.io

"Most people don’t want to think about cookies, metadata, or threat models—they just want to feel safe."

On Terms of Service, we explored how design can make security smoother, more supportive, and empowering—without requiring everyone to become an expert.

Listen here: https://termsofservice.xyz/episodes/designing-privacy-you-can-feel-smooth-supportive-wG1hz4E7I42/

#privacy #security #design

**Stalwart Labs** @stalwartlabs@mastodon.social · 21m

21m

Stalwart Labs @stalwartlabs@mastodon.social

Stalwart joins GitHub's Open Source Secure Fund! Learn how the program is helping us strengthen our defenses and improve performance at https://stalw.art/blog/github-ossf #GitHub #OSSF #security

stalw.art · 18hStalwart Joins GitHub's Open Source Secure Fund | Stalwart LabsWe're excited to announce that Stalwart has been selected to participate in Session 2 of GitHub's Open Source Secure Fund (OSSF), a prestigious program designed to enhance security across the open source ecosystem. This recognition represents not only an acknowledgment of Stalwart's growing importance in the email infrastructure space but also our commitment to maintaining the highest security standards.

**JamesHeather** @JamesHeather@mastodon.social · 24m

24m

JamesHeather @JamesHeather@mastodon.social

The EU (still) wants to scan
your private messages and photos

#privacy #security #eu #europe

https://fightchatcontrol.eu/

fightchatcontrol.euFight Chat Control - Protect Digital Privacy in the EULearn about the EU Chat Control proposal and contact your representatives to protect digital privacy and encryption.

**Peter N. M. Hansteen** @pitrh@mastodon.social · 40m

40m

Peter N. M. Hansteen @pitrh@mastodon.social

Happy

'Logging in as users
"<"
and
">
day'

to all who celebrate!

Aug 11 12:48:53 freebeast sshd-session[32113]: Invalid user "<" from 46.246.3.247 port 36834
Aug 11 11:57:32 freebeast sshd-session[88]: Invalid user "> from 46.246.3.247 port 8731

#ssh #passwordgropers #cybercrime

**ApplSec** @applsec@infosec.exchange · 45m

45m

ApplSec @applsec@infosec.exchange

NEW BETA RELEASES

iOS 26 beta 6 (23A5318c)
iPadOS 26 beta 6 (23A5318c)
macOS 26 beta 6 (25A5338b)
tvOS 26 beta 6 (23J5339a)
visionOS 26 beta 6 (23M5322b)
watchOS 26 beta 6 (23R5340a)

#apple #cybersecurity #infosec

**Intelemodel** @intelemodel@mastodon.social · 45m

45m

Intelemodel @intelemodel@mastodon.social

Attackers weaponize OneNote & OneDrive for internal phishing. SMBs should enforce MFA, train staff, and use M365 security defaults. #Security #Phishing

https://www.bleepingcomputer.com/news/security/the-rise-of-native-phishing-microsoft-365-apps-abused-in-attacks/

**OONI** @ooni@mastodon.social · 1h

OONI @ooni@mastodon.social

OONI Security Audit: Penetration Test Report
https://ooni.org/post/ooni-security-audit/

Overall, the audit found that OONI services and architecture are securely designed.

We thank Radically Open Security for the audit, and we thank the Open Technology Fund (OTF) for supporting this important work!

#ooni #security #audit

**Brian Greenberg** @brian_greenberg@infosec.exchange · 1h

Brian Greenberg @brian_greenberg@infosec.exchange

Excited and honored to be interviewed by John Moore of TechTarget for their deep dive on the $400B annual cost of downtime. We covered why human error still tops the list, how cyber threats are shifting the landscape, and why outdated infrastructure quietly undermines resilience. My key point: resilience is never just one thing. It’s education, it’s tracking dependencies, it’s vetting SaaS and cloud providers, and it’s questioning the “common sense” strategies that may no longer work. The right mix of BCDR planning, cyber resilience, and monitoring can turn avoidable outages into rare events.

TL;DR
Human error is #1
Cyberattacks keep evolving
Legacy systems fail silently
Resilience starts with strategy

https://www.techtarget.com/searchdatabackup/feature/The-cost-of-downtime-and-how-businesses-can-avoid-it
#cybersecurity #BCDR #ITresilience #downtime #security #privacy #cloud #infosec #BIA #backup
@searchsecurity
@esg_global
@ttinthecloud
@techtargetnews

Search Data BackupThe Cost of Downtime and How Businesses Can Avoid It | TechTargetBusiness downtime leads to lost revenue and damages brand reputation. Learn how to minimize the costs associated with operational disruptions.

**Mark Wyner Won’t Comply** @markwyner@mas.to · 1h *

1h *

Mark Wyner Won’t Comply @markwyner@mas.to

Question for all the privacy/security smarties.

I was reading about those physical passkeys (like Yubico). My primary hangup is that a tiny USB stick can be easily lost/damaged. That seems like a huge risk.

What I’ve read about these passkeys seems ambiguous at best. Is there a strong argument for their use? If so, how does one backup a hardware passkey to mitigate the risk of loss/damage?

#InfoSec #OpSec #Privacy

**Tatiana Mikhaleva** @DevOpsPink@mastodon.social · 1h

Tatiana Mikhaleva @DevOpsPink@mastodon.social

Anthropic releases Security Review for Claude Code

A new AI-powered tool to help developers detect and fix vulnerabilities is now in Claude Code and on GitHub.

Run /security-review locally or integrate the GitHub Action to scan pull requests for SQLi, XSS, SSRF, RCE, and more.

AI explains the issue, points to the risky code, and suggests fixes before merge - keeping your main branch clean and secure.

https://github.com/anthropics/claude-code-security-review

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities. - anthropics/claude-code-security-review

GitHubGitHub - anthropics/claude-code-security-review: An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities. - anthropics/claude-code-security-review

#DevSecOps #InfoSec #AI

**Khalid K-1000** @khalidabuhakmeh@mastodon.social · 1h

Khalid K-1000 @khalidabuhakmeh@mastodon.social

Are you worried your #dotnet #security could be more secure? Join us for a #livestream on August 21st, 2025, to discuss FAPI 2.0, its relation to #OAuth and #OpenID, and how to harden your security posture, with our guest, Joe “Mr. Identity” DeCock.

If nothing else, join us with what is a confluence of the most unfortunately named things in a single livestream.

Boosts are always appreciated.

https://duendesoftware.com/webinars/duende-identityserver-7-3-fapi-2-0

duendesoftware.comLivestream-Duende IdentityServer v7.3 with FAPI 2.0 | DuendeLivestream: Protect data and scale with confidence. Learn how Duende IdentityServer v7.3 with FAPI 2.0 hardens security for large-scale growth.

**Accrescent** @accrescent@infosec.exchange · 1h

Accrescent @accrescent@infosec.exchange

Today is the day! Read all about our development progress, view our roadmap for the future, and check out the new projects we're releasing as open source in our new blog post!

https://blog.accrescent.app/posts/progress-update-and-roadmap/

Check out our new repositories:

https://github.com/accrescent/android-bundle
https://github.com/accrescent/directory
https://github.com/accrescent/directory-api
https://github.com/accrescent/ina

Accrescent Blog · 18hProgress Update and RoadmapIn our recent post about Accrescent’s financial future and sustainability, we announced that to build trust and transparency with our community, we’d be publishing a follow-up blog post about what we’ve been working on lately and where we’ve been setting our sights, i.e., what our roadmap is. This is that post. If you haven’t already read our post about Accrescent’s future, we highly recommend reading through it for context. The items planned on our long-term roadmap cannot be accomplished unless we reach our funding goal, so any time you spend reading or sharing our post is deeply appreciated.

#android #security #privacy

**Helma** @helma@mastodon.social · 2h

Helma @helma@mastodon.social

Ze doen hun best hoor, maar kun je niet gewoon vertellen over welke vrouwen het gaat, ik bedoel: hoe ver terug in de tijd gaan die uitslagen?
En hoezo is BSN en testuitslag in combi met naw gelekt, was dat niet gescheiden bewaard c.q. extra beveiligd? Iets met segmentatie.
#Hack #InfoSec #Privacy #Security #Datalek

Https://clinicaldiagnostics.nl/nl/onderzoek-via-bevolkingsonderzoek-nederland/

Clinical Diagnostics NederlandOnderzoek via Bevolkingsonderzoek Nederland - Clinical Diagnostics NederlandZoals u mogelijk al heeft vernomen via Bevolkingsonderzoek Nederland, is er een datalek geweest bij Bevolkingsonderzoek Nederland, welk datalek feitelijk heeft plaatsgevonden bij Clinical Diagnostics NMDL. Voor meer informatie hierover