Elektrine
Log in Register

#infosec

65 posts · Last used 1d

Back to Timeline
Boosted by Greg Bell @ferrix@mastodon.online
@rk@mastodon.well.com · 1d ago
Buddy of mine is in pretty dire straits. He’s got decades in #infosec but he went through a nasty divorce and then got laid off twice in 18 months and the psychological and financial toll has been immense. He’s been looking for work for well over a year now and has gotten no bites. If anyone is looking for a CISO/infosec manager/security team architect let me know. He’s served in those kind of roles for huge orgs, small orgs, and everything in between. #getFediHired #job
View on mastodon.well.com
0
0
1
@yawnbox@disobey.net · 2d ago
hello #infosec fedi can anyone recommend any learning resources - red/purple/blue team focused - concerning reverse shells and getting through forward proxies / secure web gateways?
View on disobey.net
0
0
0
@hbrpgm@adalta.social · Mar 10, 2026

📺 https://peer.adalta.social/w/mjSYsEpL73WKQKoWsF4PPD 🔗 🇩🇪🇺🇸🇫🇷 🔗 ℹ️

The democratization of AI-powered attack tools is creating an asymmetric threat landscape that outpaces traditional defense paradigms.

#cybersecurity #infosec #security #exploit #loi

View on adalta.social
0
0
0
@hbrpgm@adalta.social · Mar 10, 2026

📺 https://peer.adalta.social/w/qTTtsvBWqXFkzWoomgx2gj 🔗 🇩🇪🇺🇸🇫🇷 🔗 ℹ️

KI-gesteuerte Bedrohungen überfordern herkömmliche Sicherheitsmodelle und erfordern eine fundamentale Neuausrichtung der Verteidigungsstrategien bis 2025.

#cybersecurity #infosec #security #exploit #loi

View on adalta.social
0
0
0
@rayglittersoft@pony.social · Mar 09, 2026
My magnum opus #mastodon #is-a #pony #mlp #hooves #pone #equestria #infosec #social #love #friendship #brexit #trump #musk #ai #aislop #thewindmills #fiction #religon #science #peace @fauli1221@hooves.social @interru@hooves.social @maze@chaos.social @Karcsesz@equestria.social @ElusivePurple@equestria.social @Shredd_Tone@equestria.social @C_Chell@equestria.social @Lapsus@mastodon.is-a.horse @corpubro@pone.social @Sun@equestria.social @OlenianDeer@equestria.social @Quilly@equestria.social .social . wwi ww2 wwII WWW @bbcbargainhunt itv.com quest3.com
View on pony.social
0
4
0
@anchore@mstdn.business · Mar 07, 2026
Open source is free like a puppy, not free like beer. 🐶 Our VP of Security, @joshbressers@infosec.exchange, applies this adage to AI-generated code in his new post on Techstrong.ai. He details the rise of "hidden dependencies," where AI copies open source functionality without creating a traceable package manifest. For teams trying to automate compliance and reduce audit findings, these hidden risks are a major challenge. Josh argues... https://techstrong.ai/contributed-content/the-curious-case-of-ai-dependencies/ #OpenSource #Infosec
View on mstdn.business
0
0
0
@markwyner@mas.to · Mar 07, 2026
Digital rights and privacy with the @privacyguides@mastodon.neat.computer Privacy Activist Toolbox. Hours of reading in there, but it’s a treasure chest. https://www.privacyguides.org/en/activism/toolbox/ #Privacy #DigitalRights #InfoSec #OpSec #Toolkit
View on mas.to
31
0
31
@hbrpgm@adalta.social · Mar 07, 2026

📺 https://peer.adalta.social/w/7a4LBDxthB35aRbvPgR2aD 🔗 🇩🇪🇺🇸🇫🇷 🔗 ℹ️

L’audit indépendant de GotaTun valide l’intégrité structurelle de l’implémentation WireGuard de Mullvad, transformant des vulnérabilités potentielles en preuves de robustesse.

#cybersecurity #infosec #security #vpn #wireguard

View on adalta.social
0
0
0
@hbrpgm@adalta.social · Mar 07, 2026

📺 https://peer.adalta.social/w/6Qd5cgQXVHUkTQwnUoTx49 🔗 🇩🇪🇺🇸🇫🇷 🔗 ℹ️

Independent code reviews are not optional but a fundamental requirement for establishing trust in privacy-critical software.

#cybersecurity #infosec #security #vpn #wireguard

View on adalta.social
0
0
0
@hbrpgm@adalta.social · Mar 07, 2026

📺 https://peer.adalta.social/w/kRngGvK3ddLYTHx5WQQ9x5 🔗 🇩🇪🇺🇸🇫🇷 🔗 ℹ️

Eine unabhängige Prüfung von Mullvads WireGuard-Implementierung GotaTun bestätigt die strukturelle Integrität, hebt jedoch die permanente Notwendigkeit externer Validierung hervor.

#cybersecurity #infosec #security #vpn #wireguard

View on adalta.social
0
0
0
Boosted by Greg Bell @ferrix@mastodon.online
@kstrlworks@techhub.social · Mar 07, 2026

Thanks to the FEC and OpenSecrets we’re able to find who’s lobbying and funding the age verification laws.

Interestingly enough it turns out the same entities are the largest funders of the UK Online Safety Act, California’s Age-Appropriate Design Code, Digital Age Assurance Act and New York’s SAFE for Kids Act. so here it is:

Oak Foundation funds:

  • 5Rights Foundation (they run the Kids Code Coalition and are UK based)
  • Fairplay
  • Common Sense Media

Oak Foundation is funded solely by Alan M. Parker the British billionaire who co-founded Duty Free Shoppers.

Common Sense Media (one of Oak’s funded orgs) is also independently funded by:

  • Bezos Family Foundation
  • Chan Zuckerberg Initiative (CZI)
  • Gates Foundation
  • Dell Foundation
  • Craig Newmark Philanthropies
  • Hewlett Foundation
  • Tom Steyer / Kat Taylor

Combined, the funding flowing into this advocacy ecosystem exceeds $100M/year.

Now you know.

#privacy #nowyouknow #infosec #identity #security #linux_gaming

View on techhub.social
30
0
51
@SecureOwl@infosec.exchange · Mar 06, 2026
a very cool technique that some #infosec salesfolk are doing now - if you have the iOS phone call screening thing turned on on your phone, they state their reason for calling as "cybersecurity breach" or "urgent breach detected" Because they know that'll go to your screen as text. And by very cool what I mean is "a very cool way of making sure I never talk to you"
View on infosec.exchange
10
0
11
@paul@oldfriends.live · Mar 06, 2026
Another round of scammers. Beware of Scammers Claiming to be Ohio Bureau of Motor Vehicles texting you saying you owe a ticket and to pay or lose your license immediately. #Phishing #Infosec #Scam The #Scam was really bad in the summer of 2025. The #Ohio Bureau of Motor Vehicles (BMV) has received reports of a possible texting scam being perpetrated on Ohioans today from scammers claiming to be from the State of Ohio. Residents have reported receiving text messages from scammers informing the recipients that they have an outstanding parking ticket. The text then instructs the recipient to pay immediately to avoid a license suspension. This particular scam is a phishing attempt that is being reported by drivers nationwide and is designed to trick residents into giving up personal or financial information. “If you receive this text, do not fall for this scam,” said Ohio BMV Registrar Charlie Norman. “Do not click any links, do not scan the QR code, and immediately delete the text. Ohio BMV will never send you a text demanding payment or requesting your personal information.”
View on oldfriends.live
0
0
2
@frenck@fosstodon.org · Mar 06, 2026
🚀 I've just opened 2 new roles in my department at the Open Home Foundation to work full-time on #HomeAssistant! 🖥️ Frontend Engineer 🔐 Security Engineer Fully remote. Full-time. #OpenSource every day. Best job in the world. Working on open source for a non-profit, building the biggest smart home platform on the planet. It changed my life; your chance to change yours. Boosts appreciated! 🙏 🔗 https://www.openhomefoundation.org/jobs #SmartHome #Hiring #RemoteWork #FOSS #InfoSec https://www.openhomefoundation.org/jobs
View on fosstodon.org
200
0
464
@anchore@mstdn.business · Mar 06, 2026
The software supply chain has a blind spot: project vitality. A dependency might lack CVEs but be completely abandoned or even "hallucinated" by code generators. Learn how to add OSS project evaluations to your threat intelligence pool. Reserve your place for March 10 at 4pm ET: https://www.brighttalk.com/webcast/21148/663295 #AppSec #InfoSec #DevSecOps
View on mstdn.business
0
0
0
@phil@fed.bajsicki.com · Mar 04, 2026

Man #Vanta is so bad…

Their Entra MFA enforcement check is horrible. It only checks if a conditional access policy exists, and if it has ‘MFA’ in the builtinControls. If it does, it’s a pass.

But it doesn’t check…

  • if any users are excluded from the policy
  • if any groups are excluded
  • if the policy covers all users even after exclusions (e.g. if the exclusions are service accounts for any reason)
  • if the geoblocking is functional
  • if any of the excluded users are privileged

Vanta is a tool designed to mislead auditors, presenting as a third-party authority with their ‘trust center’ and all the flashy shiny dashboards.

Yet the core is rotten.

I haven’t been this insulted since I found out that #vanta has a barely functional risk API (was trying to sync our risk register from our internal repo… long story).

Just… I lack words.

#infosec #cybersec #grc #privacy #compliance #fintech #informationsecurity #audit #soc2

View on fed.bajsicki.com
0
0
0
@Leah@macaw.social · Mar 03, 2026
California's AB 1043 is set to make my favorite OS "illegal" unless it includes an age-verification interface at the account level... My new project: pam_ca_compliance.so Function: A simple gate during login that forces the user to certify all non-system accounts are age-appropriate before granting a shell. 😜 j/k #Linux #FOSS #CyberSecurity #Privacy #InfoSec #PAM #CAAB1043
View on macaw.social
0
0
0
@rysiek@mstdn.social · Mar 02, 2026

Motorola announces a partnership with GrapheneOS Foundation https://motorolanews.com/motorola-three-new-b2b-solutions-at-mwc-2026/

Motorola and the GrapheneOS Foundation will work to strengthen smartphone security and collaborate on future devices engineered with GrapheneOS compatibility.

This could be a gamechanger. Congratulations to @GrapheneOS@grapheneos.social, fingers crossed this works out well!

#InfoSec #GrapheneOS

View on mstdn.social
169
0
158
@rysiek@mstdn.social · Mar 02, 2026
Heads up for any folks using @hetzner@mastodon.hetzner.social: scammers seem to be trying to exploit the recent bump in pricing by sending "unpaid invoice notification" e-mails. Easy to fall for it before morning coffee. "Update Payment Method" link obviously leads to a scam site, so not particularly hard to spot either. Be careful out there. :blobcatcoffee: P.S. yes I am aware of the shitty ways Hetzner treated a bunch of fedi instances; this is not a recommendation. #Hetzner #InfoSec #SysAdmin
View on mstdn.social
8
0
23
@monkeyninja@10base2.dev · Mar 01, 2026
The #tech industry pays well, especially if you’ve been working in it for more than a few years. I’ve often wondered if that steady paycheck makes people forget. It really seems like some folks lose sight of what living without money means, even when they grew up with food insecurity as a part of their life experience. For instance, I’ll see posts where #infosec folks absolutely lambast anyone who doesn’t use a service like Tuta or Protonmail for emails and just will not hear it when people say, “Hey, it’s a good idea you’ve got there, but the reason you know this is important is because you work in the industry and unless you can explain why it is important without being an ass, you’re not convincing anyone.” Spinning up private, encrypted Nextcloud instances sounds amazing! How do you think someone is going to do that when they are worried about access to food? You have a spare computer under your desk running your Plex server and you’re yelling at someone who doesn’t have their own internet connection and is only able to get access to the internet from the library. Knowledge is just another kind of privilege. Don’t use yours to punch down, use it to educate and elevate.
View on 10base2.dev
0
0
0