#operationalsecurity — Public Fediverse posts

Incident Response Readiness Exposes Operational Gaps

Being incident response ready means more than just having a plan - it requires immediate visibility into identity and authentication access, including investigator-level read access to crucial systems. Without this visibility, teams are left making blind containment decisions and piecing together timelines with guesswork.

https://osintsights.com/incident-response-readiness-exposes-operational-gaps?utm_source=mastodon&utm_medium=social

#IncidentResponse #IdentityAndAccessManagement #Mfa #OperationalSecurity #EmergingThreats

Threat Actors Formalize Operational Security Playbook

Cybercrime players are now treating operational security as a sophisticated game-changer, and it's time for you to level up your security strategy beyond just using VPNs. A battle-tested three-tier infrastructure model has emerged, separating exposure, execution, and monetization to safeguard high-stakes operations.

https://osintsights.com/threat-actors-formalize-operational-security-playbook?utm_source=mastodon&utm_medium=social

#OperationalSecurity #CardingOperations #ThreatActors #Vpns #Cybercrime

Managed Detection and Response Targets Gaps in Cyber Defenses

State, local, tribal, and territorial organizations, along with their schools, are facing a perfect storm of rising cyber threats, limited staff, and tight budgets - making it tough to stay ahead of attacks. Managed Detection and Response can help bridge the gaps in their cyber defenses, providing the support…

https://osintsights.com/managed-detection-and-response-targets-gaps-in-cyber-defenses?utm_source=mastodon&utm_medium=social

#ManagedDetectionResponse #EmergingThreats #OperationalSecurity #CyberDefenses #EducationSector

New on The Sovereign Auditor.
The FBI recovered deleted Signal messages from an iPhone -- not by breaking encryption, but from Apple's push notification database. Signal had been deleted. The notifications hadn't.
The fix is one setting. But the lesson is bigger than that.
https://open.substack.com/pub/sovereignauditor/p/the-notification-trap
#Signal #Privacy #OperationalSecurity #InfoSec #OPSEC

South Korean Police Accidentally Post Cryptocurrency Wallet Password

An expensive mistake:

Someone jumped at the opportunity to steal $4.4 million in crypto assets after... https://www.schneier.com/blog/archives/2026/03/south-korean-police-accidentally-post-cryptocurrency-wallet-password.html

#operationalsecurity #cryptocurrency #Uncategorized

APT37’s Ruby Jumper campaign demonstrates a mature approach to air-gap traversal.

Observed tradecraft includes:
• LNK-based initial execution
• Embedded PowerShell payload extraction
• Ruby interpreter abuse (v3.3.0)
• Scheduled task persistence (5-minute interval)
• USB-based covert bidirectional C2
• Multi-stage backdoor deployment
Toolset: RESTLEAF, SNAKEDROPPER, THUMBSBD, VIRUSTASK, FOOTWINE, BLUELIGHT.

The removable media relay model enables:
– Command staging offline
– Data exfiltration without internet access
– Lateral spread across isolated systems
– Surveillance via Windows spyware
This reinforces a critical point:
Air-gap controls must extend beyond physical disconnection — including USB governance, device auditing, behavioral monitoring, and strict runtime execution policies.

Are critical infrastructure operators prepared for USB-mediated C2 relays?

Source: https://www.bleepingcomputer.com/news/security/apt37-hackers-use-new-malware-to-breach-air-gapped-networks/

Engage below.

Follow TechNadu for high-signal threat intelligence insights.
Repost to elevate awareness.

#Infosec #APT37 #AirGapSecurity #ThreatModeling #MalwareAnalysis #NationStateThreats #USBExfiltration #SOC #DetectionEngineering #CyberDefense #OperationalSecurity #ThreatHunting #ZeroTrustArchitecture

APT37’s Ruby Jumper campaign demonstrates a mature approach to air-gap traversal.

Observed tradecraft includes:
• LNK-based initial execution
• Embedded PowerShell payload extraction
• Ruby interpreter abuse (v3.3.0)
• Scheduled task persistence (5-minute interval)
• USB-based covert bidirectional C2
• Multi-stage backdoor deployment
Toolset: RESTLEAF, SNAKEDROPPER, THUMBSBD, VIRUSTASK, FOOTWINE, BLUELIGHT.

The removable media relay model enables:
– Command staging offline
– Data exfiltration without internet access
– Lateral spread across isolated systems
– Surveillance via Windows spyware
This reinforces a critical point:
Air-gap controls must extend beyond physical disconnection — including USB governance, device auditing, behavioral monitoring, and strict runtime execution policies.

Are critical infrastructure operators prepared for USB-mediated C2 relays?

Source: https://www.bleepingcomputer.com/news/security/apt37-hackers-use-new-malware-to-breach-air-gapped-networks/

Engage below.

Follow TechNadu for high-signal threat intelligence insights.
Repost to elevate awareness.

#Infosec #APT37 #AirGapSecurity #ThreatModeling #MalwareAnalysis #NationStateThreats #USBExfiltration #SOC #DetectionEngineering #CyberDefense #OperationalSecurity #ThreatHunting #ZeroTrustArchitecture

APT37’s Ruby Jumper campaign demonstrates a mature approach to air-gap traversal.

Observed tradecraft includes:
• LNK-based initial execution
• Embedded PowerShell payload extraction
• Ruby interpreter abuse (v3.3.0)
• Scheduled task persistence (5-minute interval)
• USB-based covert bidirectional C2
• Multi-stage backdoor deployment
Toolset: RESTLEAF, SNAKEDROPPER, THUMBSBD, VIRUSTASK, FOOTWINE, BLUELIGHT.

The removable media relay model enables:
– Command staging offline
– Data exfiltration without internet access
– Lateral spread across isolated systems
– Surveillance via Windows spyware
This reinforces a critical point:
Air-gap controls must extend beyond physical disconnection — including USB governance, device auditing, behavioral monitoring, and strict runtime execution policies.

Are critical infrastructure operators prepared for USB-mediated C2 relays?

Source: https://www.bleepingcomputer.com/news/security/apt37-hackers-use-new-malware-to-breach-air-gapped-networks/

Engage below.

Follow TechNadu for high-signal threat intelligence insights.
Repost to elevate awareness.

#Infosec #APT37 #AirGapSecurity #ThreatModeling #MalwareAnalysis #NationStateThreats #USBExfiltration #SOC #DetectionEngineering #CyberDefense #OperationalSecurity #ThreatHunting #ZeroTrustArchitecture

APT37’s Ruby Jumper campaign demonstrates a mature approach to air-gap traversal.

Observed tradecraft includes:
• LNK-based initial execution
• Embedded PowerShell payload extraction
• Ruby interpreter abuse (v3.3.0)
• Scheduled task persistence (5-minute interval)
• USB-based covert bidirectional C2
• Multi-stage backdoor deployment
Toolset: RESTLEAF, SNAKEDROPPER, THUMBSBD, VIRUSTASK, FOOTWINE, BLUELIGHT.

The removable media relay model enables:
– Command staging offline
– Data exfiltration without internet access
– Lateral spread across isolated systems
– Surveillance via Windows spyware
This reinforces a critical point:
Air-gap controls must extend beyond physical disconnection — including USB governance, device auditing, behavioral monitoring, and strict runtime execution policies.

Are critical infrastructure operators prepared for USB-mediated C2 relays?

Source: https://www.bleepingcomputer.com/news/security/apt37-hackers-use-new-malware-to-breach-air-gapped-networks/

Engage below.

Follow TechNadu for high-signal threat intelligence insights.
Repost to elevate awareness.

#Infosec #APT37 #AirGapSecurity #ThreatModeling #MalwareAnalysis #NationStateThreats #USBExfiltration #SOC #DetectionEngineering #CyberDefense #OperationalSecurity #ThreatHunting #ZeroTrustArchitecture

APT37’s Ruby Jumper campaign demonstrates a mature approach to air-gap traversal.

Observed tradecraft includes:
• LNK-based initial execution
• Embedded PowerShell payload extraction
• Ruby interpreter abuse (v3.3.0)
• Scheduled task persistence (5-minute interval)
• USB-based covert bidirectional C2
• Multi-stage backdoor deployment
Toolset: RESTLEAF, SNAKEDROPPER, THUMBSBD, VIRUSTASK, FOOTWINE, BLUELIGHT.

The removable media relay model enables:
– Command staging offline
– Data exfiltration without internet access
– Lateral spread across isolated systems
– Surveillance via Windows spyware
This reinforces a critical point:
Air-gap controls must extend beyond physical disconnection — including USB governance, device auditing, behavioral monitoring, and strict runtime execution policies.

Are critical infrastructure operators prepared for USB-mediated C2 relays?

Source: https://www.bleepingcomputer.com/news/security/apt37-hackers-use-new-malware-to-breach-air-gapped-networks/

Engage below.

Follow TechNadu for high-signal threat intelligence insights.
Repost to elevate awareness.

#Infosec #APT37 #AirGapSecurity #ThreatModeling #MalwareAnalysis #NationStateThreats #USBExfiltration #SOC #DetectionEngineering #CyberDefense #OperationalSecurity #ThreatHunting #ZeroTrustArchitecture

🔐 Secure Connectivity as Crisis Infrastructure
Internews’ 2025 findings demonstrate a clear pattern: when VPN access declines, exposure to phishing, surveillance, and account compromise increases rapidly.

With pro-bono Surfshark support:
• 100 high-risk partners protected
• 9 countries impacted
• Field-based digital security training delivered
• One-year VPN access deployed to journalists and activists

In hostile environments, encrypted traffic and secure authentication workflows directly affect operational safety.

Is the cybersecurity sector allocating sufficient resources toward safeguarding independent media?

Source: https://internews.org/wp-content/uploads/2026/02/Surfshark-Stories-of-Impact-January-2026.pdf

Share your insights below.
Follow TechNadu for continued coverage on digital risk, cyber resilience, and global privacy developments.

#InfoSec #CyberResilience #DigitalRights #VPNInfrastructure #OperationalSecurity #ThreatIntelligence #PressFreedom

🔐 Secure Connectivity as Crisis Infrastructure
Internews’ 2025 findings demonstrate a clear pattern: when VPN access declines, exposure to phishing, surveillance, and account compromise increases rapidly.

With pro-bono Surfshark support:
• 100 high-risk partners protected
• 9 countries impacted
• Field-based digital security training delivered
• One-year VPN access deployed to journalists and activists

In hostile environments, encrypted traffic and secure authentication workflows directly affect operational safety.

Is the cybersecurity sector allocating sufficient resources toward safeguarding independent media?

Source: https://internews.org/wp-content/uploads/2026/02/Surfshark-Stories-of-Impact-January-2026.pdf

Share your insights below.
Follow TechNadu for continued coverage on digital risk, cyber resilience, and global privacy developments.

#InfoSec #CyberResilience #DigitalRights #VPNInfrastructure #OperationalSecurity #ThreatIntelligence #PressFreedom

🔐 Secure Connectivity as Crisis Infrastructure
Internews’ 2025 findings demonstrate a clear pattern: when VPN access declines, exposure to phishing, surveillance, and account compromise increases rapidly.

With pro-bono Surfshark support:
• 100 high-risk partners protected
• 9 countries impacted
• Field-based digital security training delivered
• One-year VPN access deployed to journalists and activists

In hostile environments, encrypted traffic and secure authentication workflows directly affect operational safety.

Is the cybersecurity sector allocating sufficient resources toward safeguarding independent media?

Source: https://internews.org/wp-content/uploads/2026/02/Surfshark-Stories-of-Impact-January-2026.pdf

Share your insights below.
Follow TechNadu for continued coverage on digital risk, cyber resilience, and global privacy developments.

#InfoSec #CyberResilience #DigitalRights #VPNInfrastructure #OperationalSecurity #ThreatIntelligence #PressFreedom

🔐 Secure Connectivity as Crisis Infrastructure
Internews’ 2025 findings demonstrate a clear pattern: when VPN access declines, exposure to phishing, surveillance, and account compromise increases rapidly.

With pro-bono Surfshark support:
• 100 high-risk partners protected
• 9 countries impacted
• Field-based digital security training delivered
• One-year VPN access deployed to journalists and activists

In hostile environments, encrypted traffic and secure authentication workflows directly affect operational safety.

Is the cybersecurity sector allocating sufficient resources toward safeguarding independent media?

Source: https://internews.org/wp-content/uploads/2026/02/Surfshark-Stories-of-Impact-January-2026.pdf

Share your insights below.
Follow TechNadu for continued coverage on digital risk, cyber resilience, and global privacy developments.

#InfoSec #CyberResilience #DigitalRights #VPNInfrastructure #OperationalSecurity #ThreatIntelligence #PressFreedom

US Air Force Bans Meta Smart Glasses Over Operational Security https://petapixel.com/2026/02/10/us-air-force-bans-meta-smart-glasses-over-operational-security/ #ArtificialIntelligence #operationalsecurity #metasmartglasses #markzuckerberg #smartglasses #operations #usairforce #metaverse #airforce #military #security #privacy #News #meta #usaf

US Air Force Bans Meta Smart Glasses Over Operational Security https://petapixel.com/2026/02/10/us-air-force-bans-meta-smart-glasses-over-operational-security/ #ArtificialIntelligence #operationalsecurity #metasmartglasses #markzuckerberg #smartglasses #operations #usairforce #metaverse #airforce #military #security #privacy #News #meta #usaf

US Air Force Bans Meta Smart Glasses Over Operational Security https://petapixel.com/2026/02/10/us-air-force-bans-meta-smart-glasses-over-operational-security/ #ArtificialIntelligence #operationalsecurity #metasmartglasses #markzuckerberg #smartglasses #operations #usairforce #metaverse #airforce #military #security #privacy #News #meta #usaf

US Air Force Bans Meta Smart Glasses Over Operational Security https://petapixel.com/2026/02/10/us-air-force-bans-meta-smart-glasses-over-operational-security/ #ArtificialIntelligence #operationalsecurity #metasmartglasses #markzuckerberg #smartglasses #operations #usairforce #metaverse #airforce #military #security #privacy #News #meta #usaf

US Air Force Bans Meta Smart Glasses Over Operational Security https://petapixel.com/2026/02/10/us-air-force-bans-meta-smart-glasses-over-operational-security/ #ArtificialIntelligence #operationalsecurity #metasmartglasses #markzuckerberg #smartglasses #operations #usairforce #metaverse #airforce #military #security #privacy #News #meta #usaf

POV: You want to find love but also take care of your #OPSEC.

✅ Here are 5️⃣ good habits to strengthen your #OPSEC (you probably don’t know the last one):

1️⃣ Limit what you share on social media (workplace, family/friends, location) and set your personal accounts to private.

2️⃣ Avoid using the same usernames across different platforms.

3️⃣ Keep your operating system and apps up to date.

4️⃣ Use long, unique passwords and a password manager.

5️⃣ Turn on lockdown mode on your phone when attending events, conferences, or corporate gatherings.

🔎 As a reminder, OPSEC stands for #OperationalSecurity. It refers to a set of methods and best practices designed to prevent an adversary from obtaining sensitive information about you by observing, collecting, or inferring details that may seem harmless.

👉 Follow Epieos for more tips and tricks related to #OSINT.

Louvre Jewel Heist https://www.schneier.com/blog/archives/2025/10/louvre-jewel-heist.html #operationalsecurity #Uncategorized #France #theft

You are not part of the noise.
You are unique. Show it.

Don't follow the entropy.
Follow the clear signal.

Learn. Observe. Adapt - like a ghost.
Be silent. Stay private.

#BeTheSignal #CyberGhost #StayPrivate #SilentStrength #DigitalStealth #InfoSecMindset #AdaptAndOvercome #UniqueInTheNoise #OperationalSecurity #CyberWisdom

You are not part of the noise.
You are unique. Show it.

Don't follow the entropy.
Follow the clear signal.

Learn. Observe. Adapt - like a ghost.
Be silent. Stay private.

#BeTheSignal #CyberGhost #StayPrivate #SilentStrength #DigitalStealth #InfoSecMindset #AdaptAndOvercome #UniqueInTheNoise #OperationalSecurity #CyberWisdom

You are not part of the noise.
You are unique. Show it.

Don't follow the entropy.
Follow the clear signal.

Learn. Observe. Adapt - like a ghost.
Be silent. Stay private.

#BeTheSignal #CyberGhost #StayPrivate #SilentStrength #DigitalStealth #InfoSecMindset #AdaptAndOvercome #UniqueInTheNoise #OperationalSecurity #CyberWisdom

You are not part of the noise.
You are unique. Show it.

Don't follow the entropy.
Follow the clear signal.

Learn. Observe. Adapt - like a ghost.
Be silent. Stay private.

#BeTheSignal #CyberGhost #StayPrivate #SilentStrength #DigitalStealth #InfoSecMindset #AdaptAndOvercome #UniqueInTheNoise #OperationalSecurity #CyberWisdom

DeadSwitch Protocol - Ghost Papers: Shattering Trails Before They Are Found #GhostPapers #DeadSwitchProtocol #PhysicalSecurity #OperationalSecurity #CyberGhost #TomITCafe

http://tomsitcafe.com/2025/05/08/deadswitch-protocol-ghost-papers-shattering-trails-before-they-are-found/

Automating UFW Configuration with Ansible: Locking Down the Digital Fortress #Ansible #UFW #Firewall #Automation #Cybersecurity #ServerSecurity #DeadSwitch #OperationalSecurity #AnsiblePlaybook #NetworkSecurity #AutomationTools #AnsibleRoles #SystemAdministration #SecureServer #Encryption #AnsibleVault #PrivacyTools #SecurityAutomation

http://tomsitcafe.com/2025/04/16/automating-ufw-configuration-with-ansible-locking-down-the-digital-fortress/

Automating UFW Configuration with Ansible: Locking Down the Digital Fortress #Ansible #UFW #Firewall #Automation #Cybersecurity #ServerSecurity #DeadSwitch #OperationalSecurity #AnsiblePlaybook #NetworkSecurity #AutomationTools #AnsibleRoles #SystemAdministration #SecureServer #Encryption #AnsibleVault #PrivacyTools #SecurityAutomation

http://tomsitcafe.com/2025/04/16/automating-ufw-configuration-with-ansible-locking-down-the-digital-fortress/

Automating UFW Configuration with Ansible: Locking Down the Digital Fortress #Ansible #UFW #Firewall #Automation #Cybersecurity #ServerSecurity #DeadSwitch #OperationalSecurity #AnsiblePlaybook #NetworkSecurity #AutomationTools #AnsibleRoles #SystemAdministration #SecureServer #Encryption #AnsibleVault #PrivacyTools #SecurityAutomation

http://tomsitcafe.com/2025/04/16/automating-ufw-configuration-with-ansible-locking-down-the-digital-fortress/

Automating UFW Configuration with Ansible: Locking Down the Digital Fortress #Ansible #UFW #Firewall #Automation #Cybersecurity #ServerSecurity #DeadSwitch #OperationalSecurity #AnsiblePlaybook #NetworkSecurity #AutomationTools #AnsibleRoles #SystemAdministration #SecureServer #Encryption #AnsibleVault #PrivacyTools #SecurityAutomation

http://tomsitcafe.com/2025/04/16/automating-ufw-configuration-with-ansible-locking-down-the-digital-fortress/

Automating UFW Configuration with Ansible: Locking Down the Digital Fortress #Ansible #UFW #Firewall #Automation #Cybersecurity #ServerSecurity #DeadSwitch #OperationalSecurity #AnsiblePlaybook #NetworkSecurity #AutomationTools #AnsibleRoles #SystemAdministration #SecureServer #Encryption #AnsibleVault #PrivacyTools #SecurityAutomation

http://tomsitcafe.com/2025/04/16/automating-ufw-configuration-with-ansible-locking-down-the-digital-fortress/

The Android Phone: Three OPSEC Levels to Disappear Into the Shadows
#OPSEC #Android #Privacy #Cybersecurity #OperationalSecurity #DeadSwitch #PhoneSecurity #PrivacyTools #AndroidSecurity #Encryption #SecurePhone #PrivacySettings #GhostMode #MobileSecurity #DigitalAnonymity #StealthTech #TechPrivacy #PrivacyMatters #SecureYourTech

http://tomsitcafe.com/2025/04/15/the-android-phone-three-opsec-levels-to-disappear-into-the-shadows/

The Android Phone: Three OPSEC Levels to Disappear Into the Shadows
#OPSEC #Android #Privacy #Cybersecurity #OperationalSecurity #DeadSwitch #PhoneSecurity #PrivacyTools #AndroidSecurity #Encryption #SecurePhone #PrivacySettings #GhostMode #MobileSecurity #DigitalAnonymity #StealthTech #TechPrivacy #PrivacyMatters #SecureYourTech

http://tomsitcafe.com/2025/04/15/the-android-phone-three-opsec-levels-to-disappear-into-the-shadows/

The Android Phone: Three OPSEC Levels to Disappear Into the Shadows
#OPSEC #Android #Privacy #Cybersecurity #OperationalSecurity #DeadSwitch #PhoneSecurity #PrivacyTools #AndroidSecurity #Encryption #SecurePhone #PrivacySettings #GhostMode #MobileSecurity #DigitalAnonymity #StealthTech #TechPrivacy #PrivacyMatters #SecureYourTech

http://tomsitcafe.com/2025/04/15/the-android-phone-three-opsec-levels-to-disappear-into-the-shadows/

https://www.learnfly.com/posts/course_details/hardening-windows-linux-systems

#New #Cybersecurity #Course on #Hardening #Windows and #Linux #Systems #Published.

This course can be used as a #refresher or can be used for those new to cybersecurity and are willing to learn. If you’re interested, please check through the link above and purchase if required.

Thanks.

#CyberSecurity #PhysicalSecurity #OperationalSecurity #OpSec #CyberSec #InformationSecurity #InfoSec #OffensiveSecurity #OffSec #EthicalHacking #CEH

https://www.learnfly.com/posts/course_details/hardening-windows-linux-systems

#New #Cybersecurity #Course on #Hardening #Windows and #Linux #Systems #Published.

This course can be used as a #refresher or can be used for those new to cybersecurity and are willing to learn. If you’re interested, please check through the link above and purchase if required.

Thanks.

#CyberSecurity #PhysicalSecurity #OperationalSecurity #OpSec #CyberSec #InformationSecurity #InfoSec #OffensiveSecurity #OffSec #EthicalHacking #CEH

Cell Phone OPSEC for Border Crossings – Source: www.schneier.com https://ciso2ciso.com/cell-phone-opsec-for-border-crossings-source-www-schneier-com/ #rssfeedpostgeneratorecho #operationalsecurity #SchneierOnSecurity #SchneieronSecurity #CyberSecurityNews #Uncategorized #cellphones #borders

Cell Phone OPSEC for Border Crossings https://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html #operationalsecurity #Uncategorized #cellphones #borders

Cell Phone OPSEC for Border Crossings

I have heard stories of more aggressive interrogation of electronic devices at US border crossings. I know a lot about securing computers, but very little about securing phones.
Are there easy ways to delete data—files, photos, etc.&#... https://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html

#operationalsecurity #Uncategorized #cellphones #borders

The news that snr ofcls in the #Trump admin discussed plans on #Signal, a commercial messaging app, for an impending attack angered & bewildered those who have taken to the air on behalf of the #US.

The mistaken inclusion of the editor of #TheAtlantic in the chat & #Hegseth’s insistence that he did nothing wrong by disclosing the secret plans upend decades of #military doctrine about #OperationalSecurity, a dozen #AirForce & #Navy fighter pilots said.

#law #NationalSecurity #SignalGate

#MikeWaltz Left His #Venmo Friends List Public

A WIRED review shows national #security adviser Mike Waltz, #WhiteHouse chief of staff #SusieWiles , and other top officials left sensitive information exposed via Venmo—until WIRED asked about it.

> looks like these folks don’t understand the concept of basic operational #security

#opsec #operationalsecurity #privacy

https://www.wired.com/story/michael-waltz-left-his-venmo-public/

The $1.5B Bybit Hack — https://blog.trailofbits.com/2025/02/21/the-1.5b-bybit-hack-the-era-of-operational-security-failures-has-arrived/
#BybitHack #CyberSecurity #OperationalSecurity #Cryptocurrency #DataBreach

Watch it here ➫ https://youtu.be/u349u65BJLg
Two darknet markets, two outcomes: Atlas Market succeeded with competence and trust, while Vortex Market collapsed under admin mistakes. This is a clear lesson in why OPSEC and professionalism matter.
#DarknetMarkets #AtlasMarket #VortexMarket #HiddenWeb #CyberSecurity #OperationalSecurity

Watch it here ➫ https://youtu.be/u349u65BJLg
Two darknet markets, two outcomes: Atlas Market succeeded with competence and trust, while Vortex Market collapsed under admin mistakes. This is a clear lesson in why OPSEC and professionalism matter.
#DarknetMarkets #AtlasMarket #VortexMarket #HiddenWeb #CyberSecurity #OperationalSecurity

Did you miss last week's podcast with @dragosinc's @hacks4pancakes? In this episode of the Breaking Badness Cybersecurity Podcast, Lesley joins @NotTheLinux and @danonsecurity to share insights on OT challenges, incident response, and bridging the gap between cyber and operations. Don’t miss out on this enlightening discussion! 🎙️

🎧 Listen here: https://www.domaintools.com/resources/podcasts/industrial-cybersecurity-explained-with-lesley-carhart/?utm_source=Social&utm_medium=Mastodon

#cybersecurity #CyberPodcast #IncidentResponse #OperationalTechnology #OperationalSecurity

[Blog] Imperfect OpSec for your personal life

#imperfectfoods #imperfectproduce #newspaper #operationalsecurity #opsec #personallife #personalsecurity #vacation

"LockBit's Bold Return: A Threat Renewed 🚨 #CyberAlert"

Despite recent crackdowns, the notorious LockBit ransomware gang has defiantly announced a comeback, threatening new cyber onslaughts on government sectors in the UK and USA. Leveraging a previously exploited PHP vulnerability, they've bounced back, boasting updated security measures and a new dark web haunt for victim listings. This follows a brief hiatus post-Operation Cronos, highlighting the resilient and adaptive nature of cyber threats today. LockBit's strategy now includes manual decryptor releases and rewards for vulnerability reports, underlining an intensified focus on operational security to thwart future law enforcement infiltrations. Stay vigilant, stay informed. #LockBit #CyberSecurity #RansomwareResurgence #ThreatIntelligence #DigitalDefense

Source: HackRead

Tags: #APT #CyberCrime #InfoSec #SecurityAwareness #CyberThreats #GovernmentSecurity #OperationalSecurity #PHPVulnerability 🌐🔒💡

If your first instinct is to try and find blame when a security vulnerability is pointed out...

...you have already created an environment where everyone will hide issues from you.

You currently live in a fake reality where you think everything is fine and you have no idea the rot that is underneath you.

If you fire or punish a person every time a vulnerability is found, you will have no one left. Hell, fire yourself first to save us all the trouble.

Vulnerabilities exist. The world changes. Software changes. Attacks change. Business needs change.

Life is fucking impermanence.

So create an environment where folks come to you quickly and tell you what needs to be fixed as they find it.

How do you do that?! Reward vulnerability discovery. Reward mitigations. Reward patch management. Reward security improvement. Reward safety improvement.

#informationsecurity #infosec #operationalsecurity #opsec #ics #ot

Friday Squid Blogging: Influencer Accidentally Posts Restaurant Table QR Ordering Code https://www.schneier.com/blog/archives/2023/12/friday-squid-blogging-influencer-accidentally-posts-restaurant-table-qr-ordering-code.html #operationalsecurity #Uncategorized #restaurants #squid

SchneieronSecurity: Using Hacked LastPass Keys to Steal Cryptocurrency https://www.schneier.com/blog/archives/2023/09/using-hacked-lastpass-keys-to-steal-cryptocurrency.html #operationalsecurity #cryptocurrency #Uncategorized #PasswordSafe #passwords