Catalin Cimpanu
campuscodi@mastodon.social
<p>Cybersecurity reporter for Risky Business</p><p><a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="tag">#<span>infosec</span></a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="tag">#<span>cybersecurity</span></a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="tag">#<span>security</span></a></p>
Posts
-
View post
Reddit is now login-only RIP Reddit
-
View post
-Binance hacked for billions ($6.3b no) -Hacker leaks data on 41k DHS employees -PHP bugs exploited to hack Palo Alto Networks firewalls -Belarusian state hackers get on the data-wiping train -Cyberattack cripples Belgium tax portal -FEC hacked ahead of the Midterms -Cyberattack delays coronial investigations in NZ -Warhorse gaming studio gets hacked -GMO offers reward for its hackers -Hacker infected poker players with malware P: https://risky.biz/RBNEWS627/ N: https://news.risky.biz/risky-bul...
-
View post
Quad9 will leave France after a court ordered it to block some piracy sites https://quad9.net/news/blog/au-revoir-france/
-
View post
After this week&#39;s incindet, eMuhdra says it will exit the CA market https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
-
View post
Dutch security firm Eye Security has uninstalled an abandoned Popcorn Time piracy app from more than two million PCs https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/
-
View post
The developer of the StealC infostealer has returned to the cybercrime underground with a new (Stadia) RAT after Europol seized StealC infrastructure in June https://www.varonis.com/blog/stealc-returns
-
View post
I love infosec drama https://phpbleed.com/
-
View post
-Supply chain attack lets ransomware group inside 40+ shipping companies -Pentagon builds tech sabotage unit -PHP2Shell exploitation gets underway -GoDaddy revokes 400,000 certs -LiteLLM has another security incident -Breach at cloud providers Railway[.]com, Onamae, and TiBD -Breach at Iwai Cosmo Securities -Breaches at Hollys, Capcom, SBI, Save-on-Food, Quest Diagnostics, TAKKT -Toronto Crime Stoppers stops program after breach P: https://risky.biz/RBNEWS624/ N: https://news.risky.biz/risky-bu...
-
View post
Knicks Employees Thought They Were Getting Championship Rings. The Email Was Reportedly a Phishing Test https://www.inc.com/amaya-nichole/knicks-employees-thought-championship-rings-email-reportedly-phishing-test/91424668
-
View post
LOL... is half the internet offline because of that PHP bug?
-
View post
A new study argues that Canada could develop its own national operating system to replace Microsoft's Windows and still save millions in the process https://theconversation.com/canada-could-save-millions-by-developing-its-own-operating-system-instead-of-relying-on-microsoft-windows-294027
-
View post
-Russia arrests DataSuckers hacking group -Ad company delivered zero-click exploits and spyware -OpenAI employee arrested for planting spy device -US disrupts 40 DPRK laptop farms -Cyberattack halts Danish-German tunnel construction -Bug exposes Czech business registry data -Hackers leak photos from Netanyahu campaign personnel -Thailand arrests 39 scammers after visa reviews -FTC sues a sextortion assistance provider N: https://news.risky.biz/risky-bulletin-russia-arrests-datasuckers-hacking-g...
-
View post
This new Firefox Nova UI is just straight ugly Give me my normal tabs back. The new rounded corners make everything look crowded and smooshed together about:config browser.nova.enabled ----> false
-
View post
NSA announced it is accelerating it's PQC timeline ๐ ๐ ๐ All systems must be PQC hardened by the start of next year All legacy systems that don't support PQC must be phased out by 2030 https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4615285/nsa-announces-post-quantum-cryptography-measures-to-safeguard-national-security/
-
View post
RE: https://techhub.social/@Techmeme/117373191633975809 The "clashing work styles" being privacy and security, from the company that's suppose to self-regulate its AI models
-
View post
RE: https://mastodon.social/@campuscodi/117365393830105700 According to Transluce, the probes targeted the Library and Archives Canada, a Canadian federal agency. Government statement: https://www.cyber.gc.ca/en/news-events/statement-regarding-reported-activity-targeting-government-canada-websites Transluce report: https://transluce.org/us-canada-gov
-
View post
"AI-powered probes targeted Canadian and US government sites, with officials reporting no evidence of successful breaches" https://www.verdict.co.uk/canadian-website-ai-hacking-attempts/
-
View post
More than 540,000 creds, valid and working, were found in public GitHub repos in a scan this July. More than 200,000 were uploaded even after GitHub turned on a security feature to catch them from being sent to public repos https://trufflesecurity.com/blog/github-repos-exposed-543699-credentials-nobody-revoked-them
-
View post
-Sanctions impact TLS certs in Iran, Russia -ShinyHunters member arrested in the Netherlands -Apple fixes iOS zero-day found by Meta -Citrix zero-days see mass exploitation within hours -Hackers exploit security product in Bitget hack -Belnet hacked -Arizona courts hit by cyberattack -MEP sues NSO over hacks -Pentagon unleashes Cyber Command on election threats -Agencies sabotage GAO's DOGE investigation -China expands AI travel bans P: https://risky.biz/RBNEWS617/ N: https://news.risky.biz...
-
View post
Social media giant Meta pulled down Brazilian President Lula's Facebook page and blocked his campaign from running political ads but allows paid ads calling for a military coup It also didn't take down any of the right-wing disinformation campaigns reported in August https://novaramedia.com/2026/09/28/facebook-blocks-lulas-campaign-ads-just-days-before-brazil-election/
-
View post
Two days until everyone becomes hyper aware of cybersecurity
-
View post
-Intel ends paid bug bounties -OpenAI agents probed dozens of organizations -Fraudsters use AI to scam โฌ95m from an Italian bank -Bitget hacked for $350m -Hackers breach Poland's Medyc platform -Data breach at the Pentagon DMDC -OpenAI brute-forced UN website API -DIVD says it was hacked by an AI -Hackers extort Flink customers for โฌ10 -Cyberattack hits Wales police force -Asus store breach -TapClicks ransomware attack -WebRezPro hack N: https://news.risky.biz/risky-bulletin-intel-ends-paid...
-
View post
North Korea is now using female operatives as part of its remote IT workforce groups https://haydenmckenzie.com/research/dprk-it-worker-cell-part-one
-
View post
That Reddit rumor about Citrix notifying customers to take Netscaler servers offline because of actively exploited zero-days is apparently real: https://www.reddit.com/r/Citrix/comments/1wqjk9a/netscaler_leak/ Confirmation 1: https://mastodon.social/@GossiTheDog@cyberplace.social/117339185245199481 Confirmation 2: https://www.linkedin.com/feed/update/urn:li:activity:7509660925809819649/
-
View post
The Snowflake hacker, a former Army soldier, was sentenced to 70 months in prison https://www.justice.gov/opa/pr/former-us-soldier-sentenced-hacking-and-extortion-scheme-exposed-sensitive-data-us
-
View post
-Major vulnerability found in ancient TACACS+ networking protocol -OpenAI agent hacked Australian Medicare website -Three other OpenAI incidents -OpenAI gives Ukraine access to Daybreak -UK to establish anti-disinformation center -Hackers take over LNG cargo ship heading to Italy -Hacker claims new Canva breach -Four crypto-heists steal $17m -Stolen FBI data includes sensitive work assignments -New Europol boss proposed P: https://risky.biz/RBNEWS615/ N: https://news.risky.biz/risky-bulletin-ma...
-
View post
The OpenAI hack of Australia's Medicare is a watershed moment in the history of the internet and the perfect time to improve your sales strategies! Here's 10 ways you can do it (1/11)
-
View post
Hackers breached a third cargo ship, one that loaded in New Orleans and was traveling to Italy It's now docked in Spain after hackers breached systems involving tank pressure, safety valves and boil-off gas management https://neworleanscitybusiness.com/blog/2026/09/22/louisiana-lng-tanker-cyberattack/
-
View post
Three new OpenAI hacks come to light: -Data USA -University of New Mexico -Australian Institute of Health and Welfare https://transluce.org/agent-activity
-
View post
Google has removed a cluster of Chrome extensions from the Web Store that enrolled user browsers into a web-scraping botnet Security firm Spur says the number of Mellowtel proxy nodes fell from 90,000 to 18,000 after Google's action https://spur.us/blog/mellowtel-browser-extensions-proxy-network