Learning about lockpicking this month thanks to our member Artefact doing a presentation on @deviantollam.bsky.social ‘s work! 🥰🙌🔒🔐
CyberSecSac & DC916
@cybersec916.com
Official Bluesky for Cybersecurity Sacramento & https://www.dc916.com a DEF CON Group Belonging is the very best thing there is. #hackthebeam
Another day, another reported intrusion of the US government. www.nextgov.com/cybersecurit...
‘Widespread’ breach let hackers steal employee data from FEMA and CBP
A Citrix vulnerability — suspected to have led to firings of multiple FEMA technology staff — enabled the breach, which let hackers pilfer data from FEMA servers connected to states at the southern bo...
nextgov.com
Incident reporting in an hour or less or the next one’s free 🍕 thecyberexpress.com/china-cybers...
China Imposes One-Hour Reporting Rule for Major Cybersecurity Incidents
China is ramping up its cybersecurity enforcement with new regulations requiring network operators to report severe cybersecurity incidents within one
thecyberexpress.com
That’s a wrap on the DC916 September meeting! Thank you to everyone who contributed articles, to discussions, for pizza, and for amazing community!
While serving media from your Plex server is cool, please update your password and try not to serve malware from it. 👾 www.pcmag.com/news/plex-co...
Plex Confirms Data Breach, Asks Users to Reset Passwords Immediately
An unauthorized third-party accessed one of its customer databases, which included emails, usernames, hashed passwords, and authentication data, Plex says.
pcmag.com
Officially official now, @blackbadgeraffle.bsky.social and I have launched DEF CON Group Orlando! Thank you @alethe.bsky.social and DCG!! We're on Discord welcoming new members and will have meetings starting soon! ✨ discord.gg/KyKYPBCv
a woman is laughing and saying it 's gonna be so fun !
ALT: a woman is laughing and saying it 's gonna be so fun !
media.tenor.com
www.securityalliance.org/news/2025-09... Thanks to @djcapy.com for this one. (also, lol at them only getting 5 cents) 😂🔥
Oops, No Victims: The Largest Supply Chain Attack Stole 5 Cents
The biggest financial impact expected to be the millions of dollars of SaaS contracts signed with security vendors
securityalliance.org
Largest supply chain breach ever (so far?) 😭 www.aikido.dev/blog/npm-deb... Thanks to DC916 member Slag1sh for the link! 💜
npm debug and chalk packages compromised
The popular packages debug and chalk on npm have been compromised with malicious code
aikido.dev
NIST rolling out initial AI cybersecurity papers/standards. hackread.com/nist-concept...
New NIST Concept Paper Outlines AI-Specific Cybersecurity Framework
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
hackread.com
Looking forward to seeing your faces at the DC916 meeting tonight! Virtual and in person at MADE Studio! 7pm-8:30pm PST! Dc916.com for the address/Discord! Hack the planet!
Hello friends, with less than 2 weeks to go until DEF CON 33, please enjoy our “Attending DEF CON Guide” (great for newbies/first timers) github.com/CyberSecSacr...
When AI and fast food goes wrong. 😑 🍟 www.wired.com/story/mcdona...
McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’
Basic security flaws left the personal info of tens of millions of McDonald’s job-seekers vulnerable on the “McHire” site built by AI software firm Paradox.ai.
wired.com
Regular reminder to go outside and touch grass sometimes
The @summerc0n.bsky.social vibes right now: #hackers #lucky13saloon
🎥 Missed one of my past conference talks? Let’s fix that. I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs. “Building Security Champions” 📽️ https://twp.ai/9PTkef #CyberSecurity #SecurityAwareness #appsec #securitychampions
youtu.be
Diana Initiative 2021-Tanya Janca-Building Security Champions
twp.ai
[MEETING REMINDER] ❔What: Monthly Meeting - August 🕖 When: Wednesday, August 13th @ 7PM - 8:30PM+ 📍Where: Hybrid - Join virtually on Discord or come to the Sacramento Hacker Lab / MADE Studio! [details in Discord] 👾Join our Discord by checking our landing page for the link: dc916.com
Cybersecurity Sacramento (DC916)
A DEF CON group for hackers, makers, tinkerers and security enthusiasts in the Sacramento area.
dc916.com
When a 9.6 MCP exploit drops impacting hundreds of thousands 😭 thehackernews.com/2025/07/crit...
Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads
A critical vulnerability in mcp-remote (CVE-2025-6514) allows remote code execution, affecting 437,000+ users.
thehackernews.com
HAPPY CULT OF THE DEAD COW DAY, SKEETR0NZ! Be Sure to hit-up your local 7/11 to collect the free slurpeez they're handing out to celebrate the birthday of cDc! Or, y'know, don't. We don't care. You do you, homeslice.
I’m tracking 128 active CitrixBleed 2 victims in telemetry, today, from attacker infrastructure (one threat actor group).
When a 9.6 MCP exploit drops impacting hundreds of thousands 😭 thehackernews.com/2025/07/crit...
Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads
A critical vulnerability in mcp-remote (CVE-2025-6514) allows remote code execution, affecting 437,000+ users.
thehackernews.com
It's 8:10 PM Eastern and I'm glad you're alive. Thanks for being here with me. I love you. You are worthy. #MakeKindnessNormal
Thank you so much for coming out and presenting! It was a joy having you all! @zoe-j.bsky.social presented their monthly book report and QQ presented on things to know for DEF CON first timers while Charles showed off his Geiger counter!
Additional #defconworkshops information - when registration for #defcon33 workshops goes live on July 15 it will be through Humanitix, not EventBrite. #defcon
AI PSA: Don’t make MechaH*tler. 🤖 www.rollingstone.com/culture/cult...
Elon Musk's Grok Chatbot Goes Full Nazi, Calls Itself 'MechaHitler'
Elon Musk's Grok chatbot has unleashed a slew of antisemitic commentary and praised Hitler after apparent change allowed to be 'politically incorrect'
rollingstone.com
