#CIO #CISO. CEO of TCE Strategy. Technology and #cybersecurity advisor. Professional speaker and #author of "Secure Enough? 20 Questions on Cybersecurity".

Minneapolis, MN
Joined October 2008
"'It does not appear that a customer can buy a new car that does not track you.' To find out what kind of driver data was being collected, and by what companies, the team of privacy researchers from Northeastern University tested 21 vehicles and..." buff.ly/GBiaPgA
14
This is genuinely a big deal. Patch PHP on your website NOW. Like, right now. Immediately. buff.ly/stvmh0C
58
This is another very novel attack vector. CAPTCHA screen that trick you into installing malware. Yikes... buff.ly/2x7oRUf
85
AI was caught submitting tips on a murder case. This is not good. "One [Anthropic AI] agent submitted a tip to the Philadelphia Police Department about an unsolved homicide despite having no information about the case." buff.ly/7fU7TJl
30
Warning, WSJ paywall: The case highlights a harsh reality for the growing number of Americans left financially devastated by scammers: Even when the government is able to seize stolen crypto, with no clear standards around who gets what, the recovery..." buff.ly/RptNj7X
1
28
1400 vulns addressed one actively exploited zero-day fixed. Patch early, patch often. buff.ly/qoAoIZ6
25
"The complaint alleges that Reiber repeatedly asserted that the company traced its ownership to Cyprus when in fact Davydov and additional Russian nationals owned and controlled the company." buff.ly/paWWUBk
35
"The data breach is thought to be the biggest in the country’s history. It follows similar cyberattacks targeting government national identity databases, including a 2016 breach affecting millions of Turkish citizens and several exposures of..." buff.ly/QHmn9bm
73
"This hacking operation, dubbed QTFY by U.S. officials, has been run since 2018 by a private company based in China, called Nanjing Xinjiuwei Network Technology, which sells access to hacked networks and stolen information to..." Warning, WSJ paywall. buff.ly/E2E5xLl
47
It had never occurred to me to use a defrost cycle to attack the food supply. Apparently it did for these cybercriminals. buff.ly/yooFsFP
23
"When their targets refused to send them money, they coerced them into making the payments using various manipulation tactics, including threats of publishing sensitive photos of the victim online." buff.ly/t7Kcz6l
54
"To their surprise, these tokens were valid on ChatGPT, and some of them belonged to OpenAI employees. The tokens could also be used to access OpenAI’s GitHub service, a software repository." buff.ly/DBAOQ7P
23
Want to know more about the inner workings of a Flock camera? Here is a very interesting look by unknown hackers and WIRED on the inner workings of the cameras. buff.ly/j0o3CjF
25
"On a macOS browser, your-domain[.]com showed a fake "MacOS Security Center" claiming 4 viruses & selling a counterfeit McAfee renewal at 55% off. On another macOS render, yoursite[.]com showed a counterfeit ZDF article advertising an investment scheme." buff.ly/IiUrFnF
32
"In our test tenant, every sign-in completed normally while our server received passwords with timestamps and source IP addresses. Resetting a captured password did not remove the rogue provider. It remained in the authentication flow and captured the..." buff.ly/kU5JkiD
22
"Using the stolen credentials and spoofed email addresses, the men redirected payments to and from victims into bank accounts they controlled. The men were stationed at Dover, Delaware Air Force base when they conducted the scams." buff.ly/xt2ukjx
46
"Cryptographers have worked furiously in recent years to devise alternative cryptosystems that aren’t vulnerable to quantum computing attacks. The new attack will further increase the urgency of completely moving away from the cryptosystem." buff.ly/ZjuEf40
19
Glad to see a level of responsibility in this, but what's stopping other companies that care less about safety from publishing their questionable models? buff.ly/sV5WEMK
20
This will be a landmark case, no question about it. Interesting that Hugging Face did not initiate it. buff.ly/xvjliUJ
21