Tom
@tom.wicked.design
CEO & founder of wicked.design ✌️, lecturer at Swiss 🇨🇭 & Ukraine 🇺🇦 universities. Cyber guy turned social scientist & system theorist 📚 🏳️🌈 (he/him) - vegan, cuz friends not food 🌱
Der Notepad++-Updater konnte umgeleitet werden und lud #Malware. Aus dem Grund kombinieren wir #Cybersecurity mit #IT-Betrieb und #Audit & #Compliance. Unsere Plattform erlaubt es tausende von Softwarepaketen einfach zu durchsuchen. Deswegen ist die Plattform auch offen für unsere Kunden:innen
#Scattered #LAPSUS$ #Hunters #SLH website shinyhunte[.]rs disapeared and is displaying a personal warning message. #ScatteredLAPSUS$Hunters #Cybercrime
#Cyber ist so lange ein IT Thema bis im Betrieb nichts mehr geht. IMHO einer der wichtigsten Punkte im neuen Bericht des @ncsc.gov.uk - und etwas was in den meisten Organisationen noch immer nicht angekommen ist. #Cybersecurity ist #Business!
#StreetParade, #MobileDeviceManagement und #Risiken - warum ein #MDM alleine nicht reicht 📲 >800k Leute feierten an der weltgrössten Techno Parade in Züri. Darunter auch einige Diebe mit Fokus Mobiltelefone. Den Geräten wurde direkt die SIM-Karte entfernt und sie in Alufolie gewickelt.
#Aeroflot airline got hacked by two pro-ukranian groups, #SilentCrow and #Cyberpartisans. 🛫🚫 🚩 7`000 servers — physical & virtual — destroyed. 🚩 Compromise of 122 hypervisors, 43 installations of ZVIRT virtualization, ~100 iLO interfaces, & 4 Proxmox clusters. #Ukraine 🇺🇦
#LockBit #ransomware got breached and leaked tonight. A hacker called "kho-kho" (allegedly from Prague 🇨🇿) breached their panel & leaked a 30MB SQL dump containing: 💶 ~ 60K BTC addresses 💬 Negotiation chats with their victims 🛠️ Build info (dating back to Dec 2024) 📈 Client lists, etc.
After some analysis the campaign appears to use Tycoon2FA Phishing Kit. The website is loading O365 assets from oktacdn[.]com This domain has been attributed to Tycoon before. Any.Run: any.run/cybersecurit... Others like JoeSandbox or Hybrid Analysis currently label it as clean
Tom@tom.wicked.design · last yr.We currently see an uprising in Adobe QR code based phishing for MS O365 creds 🎣 Recipiens are named, TA apparently did some intel: ▶️ Company name ▶️ Employee names (First and Last) #Phishing #Adobe #O365 #Microsoft #Cybersecurity #Awareness
We currently see an uprising in Adobe QR code based phishing for MS O365 creds 🎣 Recipiens are named, TA apparently did some intel: ▶️ Company name ▶️ Employee names (First and Last) #Phishing #Adobe #O365 #Microsoft #Cybersecurity #Awareness
Mit Überwachungs-Programmen wie mSpy können Privatpersonen einander ausspionieren. Wir erklären, wie man solche Angriffe aufdecken und abwehren kann. netzpolitik.org/2025/mspy-le... Alle Beiträge zum #mSpyLeak: netzpolitik.org/mspy-leak/
mSpy-Leak: So stoppt man Spionage-Apps
Mit Überwachungs-Programmen wie mSpy können Privatpersonen einander ausspionieren. Wir erklären, wie man solche Angriffe aufdecken und abwehren kann.
netzpolitik.org
DHS has terminated the memberships of everyone on its advisory committees. This includes several cyber committees, like CISA's advisory panel and the Cyber Safety Review Board, which was investigating Salt Typhoon. That review is "dead," person familiar says. www.documentcloud.org/documents/25...
US president pardons drug market founder and operator to “ honor of her [mother] and the Libertarian Movement, which supported me so strongly”. What a singal to law enforcement, law abiding citizens and everyone who works to make our society a safer and healthier place. #SilkRoad
Eliot Higgins@eliothiggins.bsky.social · 2y agoTrump pardons Ross Ulbricht, founder of Silk Road drug marketplace www.theguardian.com/us-news/2025...
Ich war in Bucha🇺🇦, habe mit den Menschen dort gesprochen, gesehen was die Russen verbrochen haben. Menschen haben mir von den Verbrechen erzählt. Und in der sicheren 🇨🇭sitzen Handlanger der Kriegsverbrecher wie Köppel. #SlavaUkraini #Ukraine
Anna Jikhareva@annajik.bsky.social · 2y agoDie Maidan-Revolution nennt er einen „Staatsstreich“, die Massaker in Butscha mit hunderten ermordeten Zivilist:innen stellt er in Frage: Wie der SVP-Journalist Roger Köppel zum nützlichen Gehilfen des russischen Regimes wurde. Unsere grosse Recherche in der @woz.ch: www.woz.ch/2503/medien-...
We had to evacuate Los Angeles. Most people I know there have also had to leave. We are safe in San Diego and our apartment is unlikely to burn down. We are very lucky. But alongside the visceral horror of the wildfires there is also the mundanity of dystopia www.404media.co/were-fine-lo...
‘We’re Fine’: Lying to Ourselves About a Climate Disaster
The dystopia of Los Angeles' fires are horrifying, mundane, and everything in between.
404media.co
Wir wissen wo dein Auto steht - Volksdaten von Volkswagen has been released on media.ccc.de https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-volksdaten-von-volkswagen https://events.ccc.de/congress/2024/hub/event/wir-wissen-wo-dein-auto-steht-volksdaten-von-volkswagen/
I love that Apple is trying to do privacy-related services, but this just appeared at the bottom of my Settings screen over the holiday break when I wasn’t paying attention. It sends data about my private photos to Apple.
cat.exe stopped working. Resource exhaustion. Chilling after Christmas 🎄 🐈 #cat #catsofbsky #christmas #AdoptDontShop #AnimalRescue #tierschutz
Die elektronische Patientenakte - ein jahrelanges Trauerspiel. Wie so oft "Es kann nicht sein was nicht sein darf!" 🙊🙈🙉 Politische Entscheidungen & ihre Auswirkungen auf unser aller (Cyber)Sicherheit. What about 🇨🇭 Elektronisches Patientendossier (EPDG) 🤔 ogy.de/rpag #38C3 #CCC #Gematik #ePA
events.ccc.de
BREAKING - A tragic vehicle-ramming attack occurred this evening at a Christmas market in Magdeburg, Germany, resulting in the deaths of two people and injuries to at least 60 others. ukdefencejournal.org.uk/lethal-car-r...
Lethal car ramming attack at German Christmas market
BREAKING - A tragic vehicle-ramming attack occurred this evening at a Christmas market in Magdeburg, Germany, resulting in the deaths of two people and injuries to at least 60 others.
ukdefencejournal.org.uk
It is this time of the year again - happy holidays 🎄, merry Christmas 🎅🏻 and a lovely festive season to all our friends, partners and clients! We don’t print physical cards or send out fancy gifts, we make a donation to an amazing organisation 👉🏻 www.limon-vergessene-seelen.de
NEW: Women experiencing pregnancy loss in states with abortion bans told us they wished they had known what to expect and how to advocate for themselves. We created this guide for anyone who finds themselves in the same position. ⤵️
If You’re Pregnant, Here’s What You Should Know About the Medical Procedures That Could Save Your Life
Women experiencing pregnancy loss in states with abortion bans told us they wished they had known what to expect and how to advocate for themselves. We created this guide for anyone who finds…
propub.li
Schwindel bei FDP-Institut: CORRECTIV enthüllt, dass die Denkfabrik Prometheus mehrfach Gelder von einem Netzwerk aus den USA annahm. Das Netzwerk unterstützt weltweit Klimaskeptiker. Bisher hatte Prometheus solche Förderungen abgestritten. Hier geht’s zur Recherche:
Prometheus: Die verheimlichten Spender des FDP-Lobbyvereins
CORRECTIV zeigt, dass das FDP-Prometheus Institut die Öffentlichkeit täuschte. Es verheimlichte Spenden von einem Netzwerk aus den USA.
correctiv.org
You should be able to message your family and friends without fear that law enforcement is reading everything you send.
“Can the Government Read My Text Messages?”
You should be able to message your family and friends without fear that law enforcement is reading everything you send. Privacy is a human right, and that’s why we break down the ways you can protect ...
eff.org
#Cellebrite allegedly used to break into phones of journalists and activists in #Serbia for deploying #spyware.
Amnesty Schweiz@schweiz.amnesty.ch · 2y agoNeue Amnesty-Untersuchung deckt geheime Überwachung in #Serbien auf. Die Regierung setzt massenhaft Spyware ein, um Journalist*innen und Umweltaktivist*innen zu überwachen. ⬇️ www.amnesty.org/en/latest/ne...
Bei jedem Meeting mit den Kollegen:innen aus der #Ukraine starten wir mit „Leben noch alle?“, „Musste jemand an die Front?“. Hier macht man sich keine Vorstellung was Krieg bedeutet. Die „Werte“ des Westens sind nur noch peinliche Fassade.
Adrienne Fichter@adfichter.eurosky.social · 2y agoAber ja es gibt die besetzten und die "sicheren" Gebiete der Ukraine... Das Schweizer Parlament soll doch ein Zugreisli machen.
The ethics of using breached or compromised data in OSINT investigations. A recent article from my collaboration with @londoncity325.bsky.social & The Coalition of Cyber Investigators - follow us on LinkedIn for future insights - tinyurl.com/CoalitionCI #OSINT #ethics #investigations #cyber
Black OSINT vs White OSINT: The Dual-Use Dilemma in Open Source Intelligence
Introduction Open Source Intelligence (OSINT), the collection and analysis of publicly available information, which has emerged as a potent tool with the potential for both good and evil, has seen an ...
linkedin.com
NEW: After reviewing leaked documents, we have found UnitedHealth is strategically limiting access to a treatment for thousands of children with autism across the country in order to cut costs. Advocates say the company’s strategy may be illegal. www.propublica.org/article/unit... 👇
UnitedHealth Is Strategically Limiting Access to Critical Treatment for Kids With Autism
Leaked internal documents show that the insurance giant is culling providers of applied behavior analysis from its network and scrutinizing the medical necessity of therapy. Advocates say the company’...
propublica.org
We were invited by @washingtonpost.com to work on this project. Incredible work by Shawn Boburg and @chrisd9r.bsky.social - I learned a lot working with Chris, especially when it comes to identifying a "FMLK", a 764 member who found Sam and "set it all up". She has since left the scene.
