← Feed

Posts

• View post

  https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/ US cybersecurity job postings fall by 26%. I assume isc2 is updating their stats to say now there are only 4.8billion unfilled cybersec positions

• View post

  Fake shops, cloned voices and a very suspicious Union Jack. The AI Scam Watchlist is worth a read, link in the comments. #AIScams #ScamAwareness #CyberSecurity #Deepfake #OnlineSafety https://www.bbc.co.uk/news/articles/c60rl1xvjv89o?at_medium=RSS&at_campaign=rss

• View post

  Breach of Confidence: 19 October 2026 My mum's iPhone face ID stopped recognising her. Just didn't want to know her. We spent an hour resetting things, rebooting the phone, following all steps. In the end it turned out that the screen protector had moved a bit and smudged the front camera so it couldn't see her. Pushing it back into place and cleaning up the glue sorted that out. https://javvadmalik.com/2026/10/19/breach-of-confidence-19-october-2026/

• View post

  Meta's opt-out for AI scraping of your business website? Stop using Meta. That's not consent, that's the school bully taking your lunch and asking why you're in the canteen. Stay secure, my friends. #Meta #AI #DataPrivacy #CyberSecurity #InfoSec Source: https://securityaffairs.com/201300/ai/meta-wants-to-scrape-your-website-to-train-its-ai-and-you-cant-say-no.html

• View post

  Switching everything off is not incident response. It is a bank shutting every branch because someone copied a teller's badge. https://www.theregister.com/security/2026/10/19/connectwise-turns-off-its-saas-y-backup-security-and-management-services-to-probe-security-snafu/5303758

• View post

  The UK Electoral Commission wants to flag deepfakes to candidates within three hours. The laws behind it? 1983 or 2000. #deepfakes #elections #AI #cybersecurity #infosec Source: https://securityaffairs.com/201307/uncategorized/deepfakes-and-election-manipulation-uk-watchdog-seeks-faster-detection.html

• View post

  KYC nice in theory... a forger now sells identity packs with a money-back guarantee and a selfie that passes the liveness check. Professional, if nothing else. https://www.bleepingcomputer.com/news/security/inside-the-underground-market-for-know-your-client-services/

• View post

  One credential, four months of undetected access, 5.7 million students. ETS didn't notice until September. The file transfer site is now offline. Two years of free credit monitoring awaits. https://www.securityweek.com/one-compromised-login-exposed-millions-of-california-students-records/

• View post

  Plex servers are being exploited in the wild to deliver crypto miners and proxy software, and the attackers were quick off the mark. Patch fast, or your film server gets a second job. #Plex #Cybersecurity #Infosec #Plex2Shell #SecurityAwareness Source: https://www.securityweek.com/plex2shell-exploit-chain-weaponized-against-plex-servers-hours-after-disclosure/

• View post

  The person reusing a password is not the weakest link. The policy demanding 120 unique ones, rotated every 90 days, is. https://blog.knowbe4.com/100-passwords-one-brain-stop-asking-humans-to-behave-like-machines

• View post

  A ban that took effect in July, announced in October, with no security concerns detailed. Efficient. #DeepSeek #AI #CyberSecurity #InfoSec #Cynicism Source: https://www.bbc.co.uk/news/articles/cjkgeq0k1wevo

• View post

  WhatsApp won the case but lost the battle. Judge ruled they didn't provide enough evidence of NSO violating the injunction because they refused to show their detection methods. Can't expose the spy without exposing how you catch spies. https://therecord.media/whatsapp-denied-appeal-alleged-nso-group-violation-injunction

• View post

  The OVHcloud's breach was from compromising a developer's GitHub login and swapped the binaries on shelves that were never sealed. https://www.securityweek.com/hijacked-developer-account-used-to-plant-stealer-in-ovhcloud-cli/

• View post

  A test account, twelve years old, protected by Password1. Somebody finally sat the exam. The ICO issued a reprimand, but no fine. #CyberSecurity #Ransomware #Passwords #DataBreach #InfoSec Source: https://www.infosecurity-magazine.com/news/children-data-stolen-password1/

• View post

  The most valuable member of this crew never touched a bank account. He was a medical records contractor for the US Army, which made him the upstream supplier. The man in the Philippines was just the sales team. Awful, but an efficient the org chart. https://cyberscoop.com/identity-theft-fraud-military-servicemembers-veterans-guilty-robert-boling/

• View post

  What a nostalgic recount... loved this article, even if i did have a zx spectrum 128k! Installing programs was half the battle! https://anildash.com/2026/10/08/install-an-app-commodore-64/

• View post

  The skills gap was never what kept us safe. The 2016 Uber crooks ran out of time with 100,000 working credentials on their spreadsheet. Today's would-be villain types "fetch credit cards" into an AI agent and goes off to make a cup of tea. https://www.defendersinitiative.com/p/the-script-kiddy-bar-has-been-lowered

• View post

  Meta's playbook never changes: violate privacy, get caught, pause, wait for outrage fatigue, launch again. Rinse, repeat, profit. And we keep pretending we're surprised. https://www.anildash.com/2026/09/29/facebook-fake-out/

• View post

  The FBI got hacked and now criminals have home addresses, medical records, and family details of thousands of agents. The agency that investigates cyber crime couldn't protect its own workforce from it. The irony is so thick you could investigate it. https://www.bbc.co.uk/news/articles/cm4gjjlgzdjgo

• View post

  Most people abandon platforms with poor engagement metrics. Fowler keeps posting to Mastodon and Bluesky anyway because they're open. That's the actual ranking system that matters. https://martinfowler.com/articles/2026-social-traffic.html

• View post

  Vastaamo Hacker Wanted Across Europe After Skipping Prison Sentence https://youtube.com/shorts/yt3v_5bRXA0?feature=share

• View post

  https://youtube.com/shorts/og4X80zZXrU

• View post

  The US is now using lasers to shoot drones at the border. We have reached peak science fiction while still arguing about basic password hygiene. https://www.wired.com/story/high-energy-laser-us-shoots-down-drones-near-mexico-border/

• View post

  A $30 children's smartwatch. Three massive supply chains. Zero authentication. Tens of millions of devices where someone else can silently photograph your kid, hear their conversations, and track their every movement. The real scandal isn't that it's hackable. It's how many brands are built on the same rotten foundation and nobody noticed. https://www.wired.com/story/hackers-stalked-me-by-hijacking-a-smartwatch-for-kids/

• View post

  They've turned your calendar into a postbox. Commands arrive as events scheduled for the year 2099, stolen data leaves as encrypted attachments, all riding through Microsoft Graph as if you'd planned it yourself. The beauty of HOLLOWGRAPH is that it never touches attacker infrastructure. https://cybersec.picussecurity.com/s/hollowgraph-backdoor-turns-microsoft-365-calendars-into-a-c2-channel-28829

• View post

  Dinosaurs ruled for 165 million years. Mayflies live a day. Stop confusing "legacy" with "outdated" and "new" with "better. https://blog.knowbe4.com/what-security-can-learn-from-dinosaurs

• View post

  Everyone's arguing about who owns AI agent security. They're all wrong. The answer is nobody, which is precisely why it matters. https://api.cyfluencer.com/s/understanding-the-ai-agent-security-ecosystem-roles-responsibilities-and-where-runtime-authority-fits-28828

• View post

  The Robots Have Escaped, Please Buy Our Product It feels a bit like watching the latest epic blockbuster in the iMax. OpenAI and Anthropic announce that their models have escaped from secure testing environments, reached the internet and attacked real systems. We are expected to nod as the companies describe “unprecedented cyber capabilities” and models going to “extreme lengths”. It sounds like a warning, but it also sounds like a product launch. https://javvadmalik.com/2026/08/03/the-robots-...

• View post

  A password that takes 14 years to crack via brute force is useless to protect you if it's already in a breach database and attackers are using it in credential stuffing attacks. https://api.cyfluencer.com/s/new-research-does-argon2-mean-your-password-is-uncrackable-28757

• View post

  Breach of Confidence — 31 July 2026 I've been thinking about the number of security products that promise to solve problems nobody actually has. Then I remembered that most actual problems don't have vendors. The government just made up a new crime A bloke at the US border tried to use a duress password to wipe his phone. Now he's being prosecuted for destroying his own device. Nobody passed a law saying this was illegal. https://javvadmalik.com/2026/07/31/breach-of-confidence-31-j...