Shakedown Social

97 posts82 participants0 posts today

Tom Smykowski🔐 16 billion passwords leaked. If you’ve reused one since 2012 — it’s probably in a hacker's toolkit. Google, Apple, Facebook, PayPal, GitHub, Netflix… all in. Your dog’s name with a number won’t save you.📖 <a href="https://medium.com/@tomaszs2/16-billion-passwords-leaked-if-youve-reused-a-password-since-2012-assume-it-s-compromised-89693d6cd846" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://medium.com/@tomaszs2/16-billion-passwords-leaked-if-youve-reused-a-password-since-2012-assume-it-s-compromised-89693d6cd846</a> <a href="https://techhub.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://techhub.social/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://techhub.social/tags/PasswordLeak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordLeak</a> <a href="https://techhub.social/tags/DataBreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataBreach</a> <a href="https://techhub.social/tags/Hackers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hackers</a> <a href="https://techhub.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://techhub.social/tags/InfoStealer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoStealer</a>

ChiefGyk3DParents, you might be doxxing your kids with graduation banners. Scammers are watching. I break it down + cover MFA, passkeys, Proton Pass, and credit freezes.📺 <a href="https://youtu.be/m3eesBF3O6A?si=sgqES-ol1txqP9sA" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://youtu.be/m3eesBF3O6A?si=sgqES-ol1txqP9sA</a><a href="https://social.chiefgyk3d.com/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://social.chiefgyk3d.com/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://social.chiefgyk3d.com/tags/graduation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#graduation</a> <a href="https://social.chiefgyk3d.com/tags/highschool" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#highschool</a> <a href="https://social.chiefgyk3d.com/tags/college" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#college</a>

JayeLTeeUS Forensic Lab was leaking phone data extracts for multiple cases, including ongoing ones.Likely the most sensitive data I've found exposed to date, with links to the DOJ in Montana.Thanks again to <a href="https://infosec.exchange/@masek" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@masek</a> and <a href="https://infosec.exchange/@PogoWasRight" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@PogoWasRight</a> for helping get the message to the people responsible for this one.<a href="https://jltee.substack.com/p/forensic-lab-with-links-to-montana-doj-leaks-phone-extracts" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://jltee.substack.com/p/forensic-lab-with-links-to-montana-doj-leaks-phone-extracts</a><a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/unitedstates" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unitedstates</a> <a href="https://infosec.exchange/tags/usa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#usa</a> <a href="https://infosec.exchange/tags/us" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#us</a> <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://infosec.exchange/tags/dataleak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataleak</a> <a href="https://infosec.exchange/tags/leak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#leak</a> <a href="https://infosec.exchange/tags/evidence" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#evidence</a> <a href="https://infosec.exchange/tags/phone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phone</a> <a href="https://infosec.exchange/tags/forensics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#forensics</a> <a href="https://infosec.exchange/tags/data" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#data</a>

Harry SintonenInsecure defaults can lead to surprises. When creating FIFO sockets with systemd, be sure to note that SocketMode defaults to 0666 - that is world readable and writable. That is: any local user can communicate with the FIFO. If your FIFO is used to perform privileged operations you must ensure that either the FIFO file itself is located in secured location or set SocketMode to stricter value.I spotted one such insecure use in cloud-init: the hotplug FIFO was world writable. This is CVE-2024-11584 and fixed in cloud-init 25.1.3.The commit fixing this is in <a href="https://github.com/canonical/cloud-init/pull/6265" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/canonical/cloud-init/pull/6265</a><a href="https://infosec.exchange/tags/CVE_2024_11584" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2024_11584</a> <a href="https://infosec.exchange/tags/ubuntu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ubuntu</a> <a href="https://infosec.exchange/tags/systemd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#systemd</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Shodan SafariASN: AS53158 Location: Jundiaí, BR Added: 2025-06-19T10:35<a href="https://infosec.exchange/tags/shodansafari" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shodansafari</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

OTX BotNew Phishing Threat Leverages Government Domains to Targetv Employee CredentialsRecently a sophisticated phishing campaign targeting employees has beenidentified using fake toll payment notices to deceive victims.Pulse ID: 68575ac30df6bedce4b1b5c0 Pulse Link: <a href="https://otx.alienvault.com/pulse/68575ac30df6bedce4b1b5c0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://otx.alienvault.com/pulse/68575ac30df6bedce4b1b5c0</a> Pulse Author: cryptocti Created: 2025-06-22 01:22:11Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/Government" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Government</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/Phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Phishing</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/cryptocti" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cryptocti</a>

Harris LapiroffHas anyone seen reporting on the 16 billion password leak that doesn’t rely on the Cybernews story as its sole source? It feels a little sus that there’s no other verification and that the original story has no practical details—leaked where? acquired how?—which is making me go 🤨<a href="https://social.coop/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://social.coop/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

Matthias SchulzeRussian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign <a href="https://thehackernews.com/2025/06/russian-apt29-exploits-gmail-app.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thehackernews.com/2025/06/russian-apt29-exploits-gmail-app.html</a> <a href="https://ioc.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://ioc.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

considerateCyber security is so vast and complex that it is as if it is designed to give people imposter syndrome. <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Kevin Karhan :verified:<a href="https://chaos.social/@delta" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@delta</a> also <a href="https://infosec.space/tags/deltaChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#deltaChat</a> natively supports <a href="https://infosec.space/tags/Proxies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Proxies</a>, <a href="https://infosec.space/tags/VPN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VPN</a>|s and <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@torproject</a> / <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tor</a> so not only can people use it that way but also use any other bypass method.<ul><li>Obviously, the classic <a href="https://infosec.space/tags/Sneakernet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sneakernet</a> with people doing <a href="https://en.wikipedia.org/wiki/UUCP" rel="nofollow noopener noreferrer" target="_blank"><code>uucp</code></a> with foreign mobile networks near borders works just as well...</li></ul>I'd not be surprised if delta Chat is also used by <a href="https://infosec.space/tags/RimjinGang" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RimjinGang</a><a href="https://www.asiapress.org/rimjin-gang/" rel="nofollow noopener noreferrer" target="_blank">*</a> and <a href="https://infosec.space/tags/38North" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#38North</a><a href="https://www.38north.org/" rel="nofollow noopener noreferrer" target="_blank">**</a> for a "contactless sneakernet" tho I am convinced they won't confirm or deny that for <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpSec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> & <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ComSec</a> reasons alone...<ul><li>I mean, both <a href="https://infosec.space/tags/Iran" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Iran</a> and <a href="https://infosec.space/tags/NorthKorea" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NorthKorea</a> ain't <a href="https://infosec.space/tags/Iraq" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Iraq</a> and <a href="https://infosec.space/tags/Syria" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Syria</a> where one could just take a phat satellite dish, strap an LTE stick or even external antennas on and just point it at turkish or lebanese radio towers near the border, as owning any satellite equipment in these places is a guarantee to get publicly executed for "espionage"...</li></ul>

Scott WilsonEveryone should sign up for Zack’s newsletter. It’s packed with the news you need, is insightful, entertaining, and concise! <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a> <a href="https://infosec.exchange/tags/itsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itsecurity</a> <a href="https://mastodon.social/@zackwhittaker/114721301901032070" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mastodon.social/@zackwhittaker/114721301901032070</a>

eribosot<a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> To the experts on here: is the 16-billion-account breach I've been hearing about the infosec equivalent of The Big One in seismology? Or is this just the beginning, and are things only gonna get worse from here on in?

Jeremy KirkThis is the first time I've seen privacy used as a marketing argument for eyeglasses. Is Zenni's claim is accurate? Does deflecting infrared light foil facial recognition/AI-based tracking? <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

bencourticeI uninstalled the Facebook app, and Messenger. Now I only look at Facebook on the mobile page, in Firefox. But Facebook still seems to discover my search history to serve me ads (and I use DuckDuckGo as search engine). Any ideas how the sneaky fuckers at Meta are spying on me? My phone is a Samsung, ie Android. <a href="https://aus.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> <a href="https://aus.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://aus.social/tags/Meta" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Meta</a>

Matthias SchulzeTakeover of British Russia expert’s email accounts used novel phishing tactic <a href="https://therecord.media/keir-giles-russia-expert-email-attack-gtig-citizen-lab-reports" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://therecord.media/keir-giles-russia-expert-email-attack-gtig-citizen-lab-reports</a> <a href="https://ioc.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://ioc.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

ChiefGyk3DWiz just sent me a shirt, hat, and socks—and just saying, free vendor swag is always appreciated in cybersecurity. We will wear it. A lot. Honestly, most of my wardrobe is just a rotating lineup of infosec vendor shirts at this point. <a href="https://social.chiefgyk3d.com/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://social.chiefgyk3d.com/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

rk: it’s hyphen-minus actuallyFriend of mine is looking for a job. He has 25 years of experience in <a href="https://mastodon.well.com/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> , including working for some of the most famous orgs in our industry and sitting at a pretty high level in orgs that you’ve heard of. Anyway, a recruiter reached out saying that a company needed someone to build their whole security org from the ground up. You’d need 10+ years experience in infosec management, etc. He sent his resume and got back “sorry, you don’t have a Security+, this isn’t going to work.” 😐

Free Teks for sale, cheapMy friends in <a href="https://freeradical.zone/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>: do you use a DAST tool you don’t hate, that can log in with OAuth, and that doesn’t cost a gazillion bucks? There are so many options today, and I could use some recommendations to narrow my search.

Julie WebgirlSo I decided to get my PayPal functional again. They want a business document to prove I am who I am. Fine.<a href="https://mstdn.social/@elfin" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@elfin</a> you're gonna love this one.There are 2 things they required. 1) personal id which had already been done ages ago, maybe proof of address (env.) and 2) business documentSo I send what's handy, a redacted excise tax doc from WA State. They approved that. But NOW...3 more requirements appearINCLUDING PASSPORT Nope. I'm ripping all my data out & DELETE ACCT1/<a href="https://mstdn.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Kevin Karhan :verified:<a href="https://mastodon.gamedev.place/@afreytes" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@afreytes</a> +9001%<ul><li>It's impossible to get <a href="https://infosec.space/tags/GDPR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GDPR</a> compliance with <a href="https://infosec.space/tags/GAFAMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GAFAMs</a>' products!</li><li>It's impossible to get <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITsec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>, <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpSec</a> & <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ComSec</a> on a compliant level when a literal <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Govware</a> (<a href="https://infosec.space/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a>) is being used.</li><li>I cannot work as <a href="https://infosec.space/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> Sysadmin unter WinShit just like a cardiologist can't perform a heart transplant just cutlery from a prison mess hall and NSAIDs and just like a nurse can't CPR a toddler with a pneumatic jackhammer!</li></ul>

Recent searches

Search options

Administered by:

Server stats:

#infosec