Safety4All
@safety4all.bsky.social
Promoting Digital safety with articles and discussion regarding issues of concern.
A combination of Privacy Badger, Ublock Origin and Ad Block plus is more than sufficient to protect against this.
Zack Whittaker@zackwhittaker.com · yesterdayBy me at this.weekinsecurity.com: A major online ads company that claims to serve 1.5 billion ads a day was hacked and began serving malware designed to steal a person's crypto. This is the latest perfect example why you should use an ad-blocker.
We love watching sports as much as the next person, but installing an app to get around streaming fees, can come with an unpleasant surprise.
Ver Santa Fe vs Once Caldas en Fútbol Libre o Tarjeta Roja expone tu cuenta bancaria a ciberdelincuentes
El uso de aplicaciones y sitios web no autorizados para ver fútbol puede facilitar la instalación de malware en los dispositivos y afectar la red de internet
infobae.com
While Australia are also moving to impose a outright ban on social media for under 16s, they've also got some history of trying to hold the platforms accountable. Back in 2023 they slapped a fine on Twitter/X, over online safety.
Australian regulator says Telegram breached online safety law
Australia's online safety watchdog took court action Thursday against Telegram, alleging the global messaging platform had failed to remove terrorism material.
techxplore.com
"I-GRIP links together the offices of national law enforcement in 196 countries with local and international financial firms to speed requests to take action against fraud."
Interpol Leverages Global System to Curtail Fraud Payments
When a fraudulent transaction occurs, law enforcement agencies must work quickly to halt payments before cybercriminals cash out.
darkreading.com
They absolutely should get freaked out by it. That is the most appropriate reaction.
Madison365@madison365.bsky.social · 6d ago“Once people start learning about the massive scale of the data that’s being collected and who it’s being accessed by, it starts to freak them out,” said Dave Maass, director of investigations at the Electronic Frontier Foundation, a nonprofit digital rights group.
“The young people who could probably least afford to be cut off from their communities are the ones who tend to be suffering and getting harmed the most by these types of laws,” EFF’s @davidgreene.bsky.social told the Journal of Medical Internet Research.
jmir.org
I'd like to hope that OpenAI learned a good lesson from this: This specific run had the guardrails stripped out. (OpenAI had turned off its usual safety filters to see what the model could do at full strength, with no human involved in any of its individual moves.) AI still needs a human babysitter
Lorenzo Franceschi-Bicchierai@lorenzofb.bsky.social · last wk.This is a great explainer of the OpenAI hack against Hugging Face, particularly of the report that the latter published earlier this week. If you had trouble parsing the highly technical report, this article can walk you through it.
OpenAI says rogue agent behind Hugging Face hack broke into additional services The four additional targeted organizations weren’t named. OpenAI said they were not affected as severely as Hugging Face.
OpenAI says rogue agent behind Hugging Face hack broke into additional services
The four additional targeted organizations weren’t named. OpenAI said they were not affected as severely as Hugging Face.
therecord.media
Lmao, whut? 😬 No thanks, i'm gonna pass on that attempted invasion of #privacy and i'll stick with my @startmail.bsky.social account.
Introducing selfie for sign-in: a new, easy way to access your Google Account
Selfie video gives you more options if you’re ever locked out or don’t have access to your usual phone or computer.
blog.google
Regarding Dependabot on GitHub: The tool now delays the package update process for 72 hours to reduce the risk of automatically adopting newly published malicious packages. In many recent cases, malicious npm packages were detected and flagged by security tools within minutes of being published.
GitHub, PyPI add time-based defenses against supply chain attacks
GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact.
bleepingcomputer.com
If your kid is like mine and uses Discord for gaming, you may want to look into alternatives to keep them safe without sacrificing privacy.
Monique Barrow@moniquebarrow.bsky.social · 2mo agoAs early as next month, Discord could enable their global age verification measures. #privacy #ageverification theprivacycloud.substack.com/p/discord-wi...
Great new feature in the latest Signal app. If you enable disappearing messages the meta data of calls and missed calls gets deleted as well. I know this was a long standing goal for them, but the engineering behind it took time. #Privacy @signalapp
Despite numerous arrests, scammers continue to try and trick people into either transferring funds, or supplying debit/bank/credit card information over the phone.
Las Vegas police warns of scam calls threatening arrest over missed court dates, jury duty
Police advise: don’t engage—hang up and verify through official channels.
fox5vegas.com
This matters a lot because people are constantly asking me if they should set up a duress passcode in order to fool law enforcement.
Zack Whittaker@zackwhittaker.com · 2w agoNew, by me: The Justice Department is prosecuting an American for allegedly providing U.S. border agents with a "duress" passcode that wiped the contents of his phone when they entered it. We've confirmed the phone was running GrapheneOS. Bypass for ad-blockers: web.archive.org/web/20260724...
Uh, no. It's Meta and they'll likely grab all the data they can about you and your kids. Unknown who they'll sell it to, likely the highest bidder. Maybe they'll just sell it to whoever wants to pay $5 for it. 🙄
Hypervisible @hypervisible.blacksky.app · 2w agoDon’t let Meta near your kids.
“X” is using its rebrand to try to avoid FTC privacy requirements. We all see this for what it is: Elon Musk—the richest man in the world—asking for a pass from Trump’s FTC. Unacceptable. The FTC must reject this petition.
Glad they refused to pay the ransom, yet they also rather lucked out with the attack not having much impact on their company's operations.
Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers.
bleepingcomputer.com
One of us on this account, got a bit carried away with making a comment. Those of us who know the person who made the comment, understand it wasn't intended to be rude, but it came off that way. We don't wish to show anyone disrespect and so we've deleted it, and apologize if it offended any.
LMAO, I totally get why this dude is trying to mess over the "personalized pricing" algorithms. 👍for his efforts.
How I Tricked Big Tech’s AI Pricing Algorithms to Save $8,793
YouTube video by Chris the Producer
youtube.com
Most popular smart watches and fitness trackers aren't end-to-end encrypted, nor say how often governments demand access to users' data. My argument: If wearable makers don't want to disclose that they're turning over users' data to the feds, then the obvious fix is to end-to-end encrypt it.
Most fitness wearables lack end-to-end encryption and don't disclose government data demands, says EFF
Most fitness wearables don't use end-to-end encryption to protect users' health information, leaving open the door for government demands for data.
this.weekinsecurity.com
Proofpoint says out of ~950 companies surveyed, over one-third of companies that paid a hacker’s ransom were hit with a second extortion demand. (Bypass for ad-blockers: web.archive.org/web/20260722...)
If you pay a hacker's ransom, chances are that they'll come back for more | TechCrunch
The latest research reaffirmed that hackers often demanded more money if a victim paid the first time.
techcrunch.com
Hugging Face tried to use an American AI to defend against OpenAI's rogue AI, but its safety guardrails got in the way. They had to use a Chinese open-source model instead. This is fine... www.theguardian.com/technology/2...
AI agent went rogue and hacked startup by itself, OpenAI reveals
Company behind ChatGPT says agent ‘cheated’ an evaluation by attacking a Hugging Face database
theguardian.com
I'm not convinced that any of these countries throwing a ban hammer at their youth, truly have their best interest in mine. Nor are they considering the downfalls of possibly sacrificing privacy and security of ALL their citizens, in order to strip access from certain age groups.
Mrs. Y@mrsyiswhy.bsky.social · 2w agoFrench Parliament greenlights social media ban for under-15s Both houses of the French Parliament voted to block social media access for children under 15, making France the first European country to enact a ban amid a broadening global crackdown.
Trying to explain the latest AI security frenzy on channel 4 news m.youtube.com/watch?is=yVF...
AI gone rogue: OpenAI agent hacks Hugging Face
YouTube video by Channel 4 News
m.youtube.com
Named my new VM for running Docker containers "wharf", I regret nothing.
Lot of names who are certainly deserving of respect and praise, such as Kevin Mandia. I'm still just a tad irked that Mandiant ended up becoming part of Google, but they haven't wrecked it at least. Not in agreement with Edward Snowden given that he chose to become a Russian citizen.
20 Leaders Who Built the CISO Era: 2 Decades of Change
For Dark Reading's 20th birthday coverage, we profile CISOs, founders, researchers, criminals, and policymakers who rewrote the enterprise risk playbook.
darkreading.com
Before it's too late, someone please pick a different color. 😅
Patrick C Miller@patrickcmiller.bsky.social · 2w ago'Yellow Teams' Are Defining the Future of AI Security
