home.social

#salttyphoon — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #salttyphoon, aggregated by home.social.

  1. Daily CyberSecurity @[email protected] ·

    T-Mobile security staff physically severed a network cable in 2024 to block Chinese state-linked Salt Typhoon hackers from reaching the carrier's infrastructure.

    #SaltTyphoon #TMobile #ChinaHack #Telecommunications #CyberEspionage

    meterpreter.org/tmobile-salt-t

    #salttyphoon #tmobile #chinahack #telecommunications #cyberespionage
  2. Fossman @[email protected] ·

    @ati1 @linmob Depends what the user wants from a personal device, how they use it and what their priorities are. If someone's priorities are a modern camera, running proprietary Android apps and their money is held hostage by banks requiring #Duopoly apps, they should check back later, perhaps when the Librem 5 "Fir" model is released.

    On the other hand, if #FreeSoftware, #privacy, #modularity, #repairability, #ecofriendliness, #decentralisation, #digitalindependence, etc. are valued above other things, the Librem 5 and the higher-spec model, the #LibertyPhone, can absolutely work in 2025 and beyond.

    I am daily driving a #Librem5 with #postmarketOS and everything important to me works: VoLTE calls and SMS (although I avoid them due to #SaltTyphoon), 4G data, Wi-Fi, camera with OK quality photos (see: #ShotOnLibrem5), GPS with #PureMaps, web browsing with #FirefoxESR, web apps (including banking) using #GNOMEWeb and #BraveBrowser, email using #Geary and #DeltaChat, audio calls on #SignalMessenger, #Matrix ( #ElementMessenger), #XMPP ( #DinoIM), #JitsiMeet, etc.

    There are occasional bugs and quirks, and the device itself has limitations but nothing that I can't work around.

    Not sure if I missed anything. Let me know if you have a specific use case that you absolutely require and I'll see if I can test...

    #digitalindependence #privacy #duopoly #freesoftware #modularity #repairability
  3. Opalsec :verified: @[email protected] ·

    Hey #CyberSecurity pros! 👋 Ready to dive into the latest threats and breaches making headlines?

    Our latest blog post is packed with need-to-know info to keep you ahead of the curve.

    🗞️ opalsec.io/daily-news-update-t

    Here's a quick rundown of what's inside:

    🕵️‍♂️ FamousSparrow's Return: The Chinese government-backed hacking group is back, targeting organizations in North America. Important distinction: ESET insists on tracking them separately from Salt Typhoon. Remember to prioritize TTPs and IOCs/IOAs accordingly!

    🗄️ RedCurl's Ransomware Twist: This corporate espionage group is now deploying "QWCrypt" ransomware, targeting Hyper-V servers. Phishing emails with malicious IMG attachments are the initial attack vector.

    😬 StreamElements Data Breach: A third-party service provider suffered a breach, exposing data of 210,000 customers.!

    🏛️ NSW Court System Data Theft: Sensitive documents, including AVOs, were stolen from the NSW Online Registry website. This could have serious consequences for victims of domestic violence.

    👨‍🎓 NYU Website Defacement: A hacker compromised NYU's website, leaking personal data of over 1 million students. Even with good intentions, the collateral damage is unacceptable.

    💰 Defense Contractor Fined: MORSE Corp will pay millions for failing to meet federal cybersecurity requirements. Third-party risk management is crucial!

    🤖 Atlantis AIO Automates Credential Stuffing: This new platform automates credential stuffing attacks against 140 online services. Stay vigilant against brute force attacks!

    🚨 Chrome Zero-Day Exploited: Google patched a zero-day vulnerability exploited in espionage campaigns targeting Russian organizations. Keep your browsers updated!

    👦 UK Warns of 'Com Networks': The UK's NCA is warning of a growing threat from online networks of teenage boys who are "dedicated to inflicting harm and committing a range of criminality." A very worrying trend that we need to be aware of.

    Ready for the full scoop? Read the full blog post here 👉 opalsec.io/daily-news-update-t

    #Cybersecurity #InfoSec #DataBreach #Ransomware #ThreatIntelligence #DataPrivacy #ZeroDay #FamousSparrow #RedCurl #StreamElements #NSWCourts #NYU #MORSECorp #AtlantisAIO #Chrome #ComNetworks #SecurityNews #CybersecurityThreats #InfoSecurity #CyberAttack #DataSecurity #PrivacyMatters #Vulnerability #Cybercrime #ThreatActor #ESET #SaltTyphoon #NIST #ZeroTrust #SaltTyphoon #CriticalInfrastructure

    #cybersecurity #infosec #databreach #ransomware #threatintelligence #dataprivacy