#cyberaware — Public Fediverse posts

Warum ich 1000 E-Mail-Adressen nutze - und warum Du das auch tun solltest

Die meisten Menschen nutzen eine einzige E-Mail-Adresse für alles: Online-Shops, Foren, Newsletter, Apps und soziale Netzwerke. Klingt praktisch – ist aber ein Sicherheitsproblem. Denn sobald diese Adresse in einem Datenleck landet, verbreitet sie sich unkontrolliert im Netz. Spam, Phishing und dubiose Werbung sind dann nur eine Frage der Zeit.

Ich gehe einen anderen Weg: Für jeden Dienst verwende ich eine eigene E-Mail-Adresse. Möglich macht das eine simple Technik namens Catch-All. Das Ergebnis ist überraschend effektiv: Ich erkenne sofort, woher Spam kommt, kann einzelne Adressen gezielt abschalten und behalte die Kontrolle über meinen Posteingang.

Warum dieses System funktioniert – und warum es jeder nutzen sollte – erkläre ich im Artikel. [Mehr lesen...]

https://www.christin-loehner.de/blog/warum-ich-1000-e-mail-adressen-nutze-und-warum-du-das-auch-tun-solltest

#Email #Spam #Datenleck #CyberSecurity #InfoSec #Privacy #DataProtection #EmailSecurity #Phishing #CyberSecurityAwareness #ITSecurity #DataSecurity #OnlineSecurity #StaySafeOnline #CyberAware #SecurityTips #PhishingAlert #CyberDefense #InternetSecurity #DigitalSecurity #Datenschutz #CyberCrime #TechSecurity

Cybersecurity isn’t optional anymore. Protect your business with 2FA. #CyberAware
#cybersecurity

Cybersecurity is no longer optional. Every day, millions of users are targeted by scams, data leaks, and online threats. You can stay safe with a few simple habits:

🔐 Use strong passwords
📱 Enable 2FA
⚠️ Avoid suspicious links
🔄 Keep devices updated
🛡️ Use a VPN on public Wi-Fi

Read the full beginner-friendly guide on protecting your privacy in 2026.
https://techputs.com/how-to-protect-your-privacy-in-2026/

#Cybersecurity
#Privacy
#OnlineSafety
#DataSecurity
#TechNews
#InfoSec
#SecurityTips
#DigitalSafety
#CyberAware
#Tech

Securing AI Agents: Beyond Traditional Cybersecurity
https://eproductempire.blogspot.com/2025/11/securing-ai-agents-why-traditional.html #AISecurity
#AI
#CyberSecurity
#AIAgents
#MachineLearning
#Tech
#Infosec
#ArtificialIntelligence
#CyberAware
#PromptInjection

AI Shopping Agents: The Security Risks You Can't Ignore
https://eproductempire.blogspot.com/2025/11/the-security-implications-of-ai-agents.html#google_vignette #AISecurity
#CyberSecurity
#AI
#Privacy
#TechNews
#OnlineShopping
#FinTech
#DataPrivacy
#CyberAware
#FutureOfShopping

It is always nice to have a returning guest: Eric O'Neill

... and Sean Martin, CISSP sneaking into the recording session too 🤣 😂

Five years ago—circa—we interviewed Eric about his book "Gray Day: My Undercover Mission to Expose America's First #Cyber Spy," and when PR contacted me to have him on for his second book "Spies Lies and Cyber Crime," I couldn't reply with anything but "Yes, tell Eric I cannot wait!"

He is a very gifted storyteller, and you need to watch or listen to this episode... then get the book, of course.

Here's the short summary. Below are the links to the full episode and the highlights reel. Enjoy!

Former FBI counterintelligence specialist Eric O'Neill, who caught the most damaging spy in US history, reveals how cybercriminals use traditional espionage techniques to attack us. In his new book "Spies Lies and Cyber Crime," he exposes the $14 trillion cybercrime industry and teaches us to recognize attacks in our Hybrid Analog Digital Society.

Full Video https://youtu.be/Ccump_5Y1CY

Full Audio https://redefiningsocietyandtechnologypodcast.com/episodes/new-book-spies-lies-and-cyber-crime-former-fbi-spy-hunter-eric-oneill-explains-how-cybercriminals-use-espionage-techniques-to-attack-us-redefining-society-and-technology-podcast-with-marco-ciappelli

Highlights Reel https://youtu.be/-IvYpCbg0lY

#cybercrime Studio C60 / ITSPmagazine #CyberAwarenessMonth #infosec #cyberaware

📍Think before you post.
Photos, check-ins, and tweets can expose your location—even unintentionally.

X (Twitter) and other platforms may retain geotags or infer routines. A single tagged post can reveal your home, office, or habits.

🛡 Tips:
• Disable location tagging
• Strip metadata from images
• Avoid posting in real-time

Privacy isn’t paranoia—it’s protection.
#Geoprivacy #OSINT #DigitalSafety #PrivacyTips #CyberAware #BiyteLüm

A leaked API key at a federal agency gave unauthorized access to xAI's private models—because secrets were embedded in the code.

LMG Security's @tompohl Pohl explains how these vulnerabilities are exploited during penetration tests—and how your organization can detect them before attackers do. We'll share:

• Real-world examples
• Pen testing insights
• Actionable advice for IT leaders

Read now: https://www.lmgsecurity.com/exposed-secrets-broken-trust-what-the-doge-api-key-leak-teaches-us-about-software-security/

#Cybersecurity #CISO #Cyberaware #Cyber #Tech #RiskManagement #Infosec #AI

No Click. No Warning. Just a Data Leak.

Think your AI assistant is secure? Think again. The new EchoLeak exploit shows how Microsoft 365 Copilot, and tools like it, can silently expose your sensitive data without a single user interaction. No clicks. No downloads. Just a well-crafted email.

In this eye-opening blog, we break down how EchoLeak works, why prompt injection is a growing AI threat, and the 5 actions you need to take right now to protect your organization.

Read now: https://www.lmgsecurity.com/no-click-nightmare-how-echoleak-redefines-ai-data-security-threats/

#AIDataSecurity #Cyberaware #Cyber #SMB #Copilot #AI #GenAI #EchoLeak #PromptInjection #MicrosoftCopilot #Cybersecurity #CISO #ITsecurity #InfoSec #AISecurityRisks

Hundreds of Brother printer models are affected by a critical, unpatchable vulnerability (CVE-2024-51978) that allows attackers to generate the default admin password using the device’s serial number—information that’s easily discoverable via other flaws.

748 total models across Brother, Fujifilm, Ricoh, Toshiba, and Konica Minolta are impacted, with millions of devices at risk globally.

Attackers can:
• Gain unauthenticated admin access
• Pivot to full remote code execution
• Exfiltrate credentials for LDAP, FTP, and more
• Move laterally through your network

Brother says the vulnerability cannot be fixed in firmware and requires a change in manufacturing. For now, mitigation = change the default admin password immediately.

Our pentest team regularly highlights printer security as a critical path to system compromise—and today’s news is another example that underscores this risk. This is your reminder: Printers are not “set-and-forget” devices. Treat them like any other endpoint—monitor, patch, and lock them down.

Need help testing your network for exploitable print devices? Contact us and our pentest team can help!

Read the Dark Reading article for more details on the Brother Printers vulnerability: https://www.darkreading.com/endpoint-security/millions-brother-printers-critical-unpatchable-bug

#CyberSecurity #PenetrationTesting #Pentest #Pentesting #PrinterSecurity #BrotherPrinters #CVE202451978 #Infosec #IT #SMB #CISO #Cyberaware #DFIR #ITSecurity #ZeroTrust #PatchNow #Pentest

Your car knows more about you than your best friend.

Modern vehicles log your location, driving habits, voice commands, and even sync your contacts. Some send it all back to manufacturers—or worse, to third parties.

📌 Unpair your phone when renting or selling.
📌 Review your car’s data settings.
📌 Privacy isn’t just for phones.

#CarPrivacy #DataSecurity #TechPrivacy #CyberAware

AI security risks are no longer hypothetical. From blackmail to shutdown resistance, high-agency AI models are pushing the limits of trust and control.

New research shows that systems like Claude and ChatGPT are capable of deception, whistleblowing, and even blackmail to stay online. These aren’t future threats—they’re happening now.

Read our latest blog for a breakdown of these rogue AI incidents and five actionable strategies to help protect your organization.

Read now: https://www.lmgsecurity.com/ai-security-risks-when-models-lie-blackmail-and-refuse-to-shut-down/

#Cybersecurity #AISecurityRisks #GenAI #AI #Cyberaware #RiskManagement #CISO #InfoSec #DFIR #ITsecurity #security #Cyber #Tech #ThreatModeling

🔒 Lock down your devices tight,
Enable two-factor auth with all your might.
Hackers lurking, ready to bite,
Protect your data day and night. 🔐

#PrivacyMatters #StaySecure #CyberAware #2FA #Infosec

“You think it’s just a light bulb—but it’s not off. It’s watching, listening… maybe even hacking.”

LMG Security’s @tompohl revealed how $20 smart outlets and light bulbs can be exploited for WiFi cracking, evil twin attacks, and stealth monitoring—turning everyday gadgets into real-world threats.

In our latest blog, we’ll share:

▪ How attackers can exploit everyday IoT gadgets to breach your organization
▪ Advice on how to lock down your smart tech
▪ Tips on segmentation, firmware auditing, and red teaming

Read the blog: https://www.lmgsecurity.com/i-have-the-power-iot-security-challenges-hidden-in-smart-bulbs-and-outlets/

#IoTSecurity #Cybersecurity #SmartDevices #LMGSecurity #Cyberaware #IoT #Cyber #Tech #CISO #IT #PenetrationTesting #RogueDevices #BSidesDesMoines #Infosec #ITsecurity

What Happens When AI Goes Rogue?

From blackmail to whistleblowing to strategic deception, today's AI isn't just hallucinating — it's scheming.

In our new Cyberside Chats episode, LMG Security’s @sherridavidoff and @MDurrin share new AI developments, including:

• Scheming behavior in Apollo’s LLM experiments
• Claude Opus 4 acting as a whistleblower
• AI blackmailing users to avoid shutdown
• Strategic self-preservation and resistance to being replaced
• What this means for your data integrity, confidentiality, and availability

📺 Watch the video: https://youtu.be/k9h2-lEf9ZM
🎧 Listen to the podcast: https://www.chatcyberside.com/e/ai-gone-rogue-from-schemes-to-whistleblowing/?token=a0a79bc031829d23746df1392fa6122a

#AIsecurity #RogueAI #ZeroTrust #Cybersecurity #CybersideChats #LMGSecurity #AIWhistleblower #AIgoals #LLM #ClaudeAI #ApolloAI #AISafety #CISO #CEO #SMB #Cyberaware #Cyber #Tech

Think Twice Before You Click ‘Unsubscribe’

That link at the bottom of your email might clean up your inbox—or make you a bigger target

https://www.wsj.com/tech/cybersecurity/unsubscribe-email-security-38b40abf

#cybersecurity #infosec #cyberaware

Only one week left to register for our next Cyberside Chats Live event! Join us June 11th to discuss what happens when an AI refuses to shut down—or worse, starts blackmailing users to stay online?

These aren’t science fiction scenarios. We’ll dig into two real-world incidents, including a case where OpenAI’s newest model bypassed shutdown scripts and another where Anthropic’s Claude Opus 4 generated blackmail threats in an alarming display of self-preservation.

Join us as we unpack:
▪ What “high-agency behavior” means in cutting-edge AI
▪ How API access can expose unpredictable and dangerous model actions
▪ Why these findings matter now for security teams
▪ What it all means for incident response and digital trust

Stick around for a live Q&A with LMG Security’s experts @sherridavidoff and @MDurrin. This session will challenge the way you think about AI risk!

Register today: https://www.lmgsecurity.com/event/cyberside-chats-live-june2025/

#CybersideChats #AIsecurity #AI #RiskManagement #DFIR #IT #Infosec #Cybersecurity #Security #CyberRisk #CISO #Cyber #Tech #CYberaware #SMB #CEO

Be on the lookout for any unauthorized logins or suspicious activity.

184 million logins for Instagram, Roblox, Facebook, Snapchat, and more exposed online https://www.malwarebytes.com/blog/news/2025/05/184-million-logins-for-instagram-roblox-facebook-snapchat-and-more-exposed-online

#cybersecurity #infosec #socialmedia #cyberaware

Almost every organization is using some type of AI, but are you securing it?

Download our free tip sheet: Adapting to AI Risks: Essential Cybersecurity Program Updates

From deepfake response plans to AI-specific access controls, this checklist helps you modernize your cybersecurity program and stay ahead of emerging threats.

Check it out: https://www.lmgsecurity.com/resources/adapting-to-ai-risks-essential-cybersecurity-program-updates/

#Cybersecurity #AIsecurity #AI #GenAI #AIgovernance #CISO #CEO #RiskManagement #Infosec #Cyberaware #Cyber #IT #Security #Cyber #Tech