#itsec

Who had "getting compromised through plugging an LG monitor in" on their #itsecurity 2026 bingo card? Apparently just plugging an LG monitor into a windows computer is enough for them to install spyware and steal all of your data. But hey you agree to this in their ToS (even without having to click on "I agree", it just installs). #Legal #infosec #itsec

Save the date: Saturday October 17th. #OWASP #Ottawa is pleased to announce a day of learning, community, and mentorship to celebrate the 25th Anniversary of the OWASP Foundation and the OWASP Ottawa Chapter’s selection of one of the top chapters in a constellation of over 130 Chapters. This will be a free _and_ ticketed event. Details on tickets, speakers, and other details will be made available soon. For the community. By the community. #OWASPOttawaDay2026 #Security hashtag#appsec #Itsec #Cyber #Cybersecurity

Scherz beiseite, ich benutze natürlich "--ignore-scripts" mit ganz wenigen Ausnahmen und jetzt habe ich entdeckt, dass es seit npm 11 auch eine "min-release-age" Option gibt, mit der man neue Package-Versionen erst mal ein paar Tage abhängen lassen kann. #npm #security #itsec

@shadowwwind@mastodon.social @kkarhan@mastodon.social @gdmalan@infosec.exchange @maddad@mastodon.world @ZoidbergForPresident@kolektiva.social @nakal@mastodon.social @arstechnica@mastodon.social @EUCommission@ec.social-network.europa.eu still doesn't fix the Problem that one needs to support Tech-Illiterates… Claiming 'GrapheneOS is a solution' for the masses is like expecting the average Normie to learn to build their own OpenBSD from scratch before turning on a computer for the first time: Absolutely deranged elitism!And if the masses don't adopt something, one will always stand out! https://mastodon.social/@kkarhan/116996717672902739 #Tech #TechLiteracy #TechIlliterates #GrapheneOS #OpenBSD #ITsec #ComSec #TouchGrass #InfoSec #OpSec #Normies #TechLiterates

«„Uns hackt doch keiner!“ – Der Lieblingssatz deutscher Mittelständler kurz vor dem Incident. […] Cybercrime ist heute ein professionelles, lukratives, skalierbares, zukunftsträchtiges Geschäftsmodell […]» — von @teufelswerk@social.tchncs.de Das Problem ist weltweit, dass zu viele IT-Verantwortlichen nur bis zum Bildschim ihren Blickwinkel haben und kein Stück weiter. 👉 https://teufelswerk.net/uns-hackt-doch-keiner-der-lieblingssatz-deutscher-mittelstaendler-kurz-vor-dem-incident/ #hacking #mittelstand #itsicherheit #kmu #cybercrime #itsec #unternehmen #it #sicherheit #daten #erpressung #zuklein

This will increase a lot of uncertainty in all areas: «Artificial Intelligence — Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks: Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors.» 🤜 https://www.securityweek.com/decades-old-bash-tricks-expose-ai-coding-agents-to-supply-chain-attacks/ #bash #decates #hacking #ai #bypass #itsec #itsecurity #supplychain #aicoding #supplychainattack #gnu #linux #unix #aws

A Theory of Prompt Injection (and why you should study roles) #ai #itsec #itsecurity #promtinjection

Teaser in TL: "Microsoft Scout is a new AI personal assistant built on OpenClaw" My head: F* Christ on a rollercoaster. Worst of all worlds in one sentence. #AI #ITSec #ITSecurity #DataProtection #Datenschutz

Let's Encrypt just stopped the issuance of certificates after an "incident": https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3 If anyone encounters issues today with failed certificate renewals: It's probably not your setup. #letsencrypt #itsec #devops #linux #security #tls

@libreleah@mas.to nice to see #Wayland getting adopted more. Certainly neither it nor X are the main focus of it, but it's always good to see #OpenBSD not just getting maintenance but improving.I genuinely want OpenBSD to be more successful and force eberyone else to up their game in #ITsec…

@javahippie@mainz.social @koehntopp@infosec.exchange @mewe@todon.eu ändert nix daran dass die #ITsec bei Bundedtag ujd Bundesregierung für'n Arsch ist!

@javahippie@mainz.social ja, nur ist das das geringste Problem der #ITsec ,#InfoSec, #OpSec & #ComSec dort...

Cryptographic Right Answers: Post Quantum and Rust Edition […] Cryptography is everywhere and as a developer you will need to upgrade your projects with post-quantum algorithms, whether because you care about the security of your users, or for compliance reasons. […] 🦀 https://kerkour.com/post-quantum-cryptography-recommendations-rust #rust #cryptography #rustlang #pqc #itsec #itsecurity #security #coding #PQCryptography #postquantum

@javahippie@mainz.social ändert trotzdem nix daran dass @Bundesregierung@social.bund.de miserable #ITsec, #InfoSec, #OpSec & #ComSec haben. Also wirklich miserabel…Und nein ich kann nicht ins Detail gehen. Nacher Ende ich wie Boris "Tron" Floricic…

@markus_netzpolitik@chaos.social @oldperl@mastodon.online am Ende entscheide ich das nicht. @Bundesregierung@social.bund.de & @bsi@social.bund.de steht es ja frei entsprechend Mittel für Planstellen freizuschaufeln damit nicht erst alles bei @certbund@social.bund.de aufschlägt.Gern mach' ich auch nen #Onboarding damit die #ITsec, #InfoSec, #OpSec & #ComSec nicht mehr komplett für die Tonne ist, denn das was ich an #OSINT bisher ohne #NDA rausfinden konnte ist erschreckend!So "@Lilith@chaos.social würde wahrscheinlich untertauchen müssen" - Level…

It's really a.missed chance by #Samsung that they don't use 123.45.67.89 as their own #DNS resolver & default for their devices. Cuz they actually have that one allocated by #APNIC and #WHOIS literally says it's in #Gangnam! Don't believe me? Look it up! #DNSserver #DNSresolver #Resolvers #GangnamStyle #ITsec #Meme #Memes #IT #Networkin #ItsNeverDNS #ItsAlwaysDNS #itsDNS

Stop running setenforce 0 and pretending SELinux doesn't exist. I wrote a practical guide to actually working with SELinux on Fedora and RHEL: Contexts, booleans, troubleshooting denials, container volume labels, and the commands you'll actually use. No policy theory rabbit holes. Just the stuff that gets you unstuck. https://blog.hofstede.it/selinux-a-practical-guide-for-fedora-and-rhel/ #SELinux #Fedora #RHEL #Linux #sysadmin #infosec #itsec