det.social

Miguel Afonso Caetano"As businesses around the world have shifted their digital infrastructure over the last decade from self-hosted servers to the cloud, they’ve benefitted from the standardized, built-in security features of major cloud providers like Microsoft. But with so much riding on these systems, there can be potentially disastrous consequences at a massive scale if something goes wrong. Case in point: Security researcher Dirk-jan Mollema recently stumbled upon a pair of vulnerabilities in Microsoft Azure’s identity and access management platform that could have been exploited for a potentially cataclysmic takeover of all Azure customer accounts.Known as Entra ID, the system stores each Azure cloud customer’s user identities, sign-in access controls, applications, and subscription management tools. Mollema has studied Entra ID security in depth and published multiple studies about weaknesses in the system, which was formerly known as Azure Active Directory. But while preparing to present at the Black Hat security conference in Las Vegas in July, Mollema discovered two vulnerabilities that he realized could be used to gain global administrator privileges—essentially god mode—and compromise every Entra ID directory, or what is known as a “tenant.” Mollema says that this would have exposed nearly every Entra ID tenant in the world other than, perhaps, government cloud infrastructure.“I was just staring at my screen. I was like, ‘No, this shouldn’t really happen,’” says Mollema, who runs the Dutch cybersecurity company Outsider Security and specializes in cloud security. “It was quite bad. As bad as it gets, I would say.”"<a href="https://arstechnica.com/security/2025/09/microsofts-entra-id-vulnerabilities-could-have-been-catastrophic/" rel="nofollow noopener" translate="no" target="_blank">https://arstechnica.com/security/2025/09/microsofts-entra-id-vulnerabilities-could-have-been-catastrophic/</a><a href="https://tldr.nettime.org/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://tldr.nettime.org/tags/Cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloud</a> <a href="https://tldr.nettime.org/tags/Azure" class="mention hashtag" rel="nofollow noopener" target="_blank">#Azure</a> <a href="https://tldr.nettime.org/tags/EntraID" class="mention hashtag" rel="nofollow noopener" target="_blank">#EntraID</a> <a href="https://tldr.nettime.org/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> <a href="https://tldr.nettime.org/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a>

Cyb3rk1d🛠️ Best Cybersecurity Tools for Every Role — From Blue Team to Red Team 🚀Cybersecurity isn’t one-size-fits-all. Different roles require different tools, whether you’re defending networks, hunting threats, testing applications, or managing policies. Here’s a breakdown of the most valuable tools by role — all framed for authorized, ethical use.🔵 Blue Team (Defense & Monitoring) Defenders rely on visibility and rapid detection. Tools like Splunk, ELK, and Wazuh centralize logs, while Suricata and Zeek analyze traffic in depth. Endpoint tools like CrowdStrike or Microsoft Defender ATP provide EDR, and Security Onion ties it together for SOC workflows. 📊👀🔴 Red Team (Offense & Simulation) In authorized engagements, red teams simulate adversaries to test resilience. Metasploit and Cobalt Strike (licensed) provide frameworks for controlled exploitation, while Impacket and BloodHound help map Active Directory environments. Tools like Burp Suite and OWASP ZAP uncover web flaws in safe labs. ⚡🧪🟣 Purple Team (Collaboration) Purple teams blend red & blue to improve detection. Using MITRE ATT&CK Navigator, Atomic Red Team, and Caldera, they run adversary emulations while defenders fine-tune alerts. 🤝🛡️🔍 Threat Hunting & DFIR Analysts use Volatility and Autopsy for forensics, YARA for malware hunting, and MISP or AlienVault OTX for threat intel sharing. Sandboxes like Cuckoo and platforms like Any.Run safely analyze suspicious files. ☣️🔎☁️ Cloud & DevSecOps For cloud, Wiz, Prisma Cloud, and Trivy scan for misconfigs and vulnerabilities. Developers secure pipelines with Snyk, Checkov, and GitHub Advanced Security. 🐳☁️⚠️ Disclaimer: For educational & defensive use only. Tools should only be used in labs, on your own systems, or under explicit written permission during authorized engagements. 🚫🔒<a href="https://defcon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://defcon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://defcon.social/tags/BlueTeam" class="mention hashtag" rel="nofollow noopener" target="_blank">#BlueTeam</a> <a href="https://defcon.social/tags/RedTeam" class="mention hashtag" rel="nofollow noopener" target="_blank">#RedTeam</a> <a href="https://defcon.social/tags/PurpleTeam" class="mention hashtag" rel="nofollow noopener" target="_blank">#PurpleTeam</a> <a href="https://defcon.social/tags/SOC" class="mention hashtag" rel="nofollow noopener" target="_blank">#SOC</a> <a href="https://defcon.social/tags/DFIR" class="mention hashtag" rel="nofollow noopener" target="_blank">#DFIR</a> <a href="https://defcon.social/tags/EthicalHacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#EthicalHacking</a> <a href="https://defcon.social/tags/SecurityTools" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityTools</a> <a href="https://defcon.social/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a>

ThijsHappy to (finally) share the proof of concept code of the vulnerability I presented at <a href="https://hsnl.social/tags/WHY2025" class="mention hashtag" rel="nofollow noopener" target="_blank">#WHY2025</a>. Our paper about it got accepted to IEEE S&P '26, and was awarded a $151,515 bug bounty by Google Cloud, their highest bounty so far. <a href="https://github.com/ThijsRay/l1tf_reloaded" rel="nofollow noopener" translate="no" target="_blank">https://github.com/ThijsRay/l1tf_reloaded</a><a href="https://hsnl.social/tags/ieee" class="mention hashtag" rel="nofollow noopener" target="_blank">#ieee</a> <a href="https://hsnl.social/tags/sp" class="mention hashtag" rel="nofollow noopener" target="_blank">#sp</a> <a href="https://hsnl.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://hsnl.social/tags/googlecloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#googlecloud</a> <a href="https://hsnl.social/tags/spectre" class="mention hashtag" rel="nofollow noopener" target="_blank">#spectre</a> <a href="https://hsnl.social/tags/cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloud</a> <a href="https://hsnl.social/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudsecurity</a> <a href="https://hsnl.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://hsnl.social/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> <a href="https://hsnl.social/tags/vulnerabilityresearch" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerabilityresearch</a> <a href="https://hsnl.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

Cyb3rk1d☁️ Cloud Security Tools — Essential Toolkit for Modern Teams 🛡️🚀Cloud environments introduce new risks and require specialized tooling to secure workloads, configurations, and data. Use a mix of CSP-native and third-party tools to cover posture management, runtime protection, identity, and visibility. Key categories and examples: Cloud Security Posture Management (CSPM) — Prisma Cloud, Dome9, Wiz for misconfig & compliance checks 🔍; Cloud Workload Protection (CWPP) — CrowdStrike, Trend Micro, Aqua for container and VM runtime defense 🐳🛡️; Cloud Access Security Broker (CASB) — Netskope, Microsoft Defender for Cloud Apps for SaaS visibility & data control ☁️🔐; Identity & Access Management — AWS IAM/Azure AD hardening, BeyondTrust, Okta for strong auth & least privilege 🔑; Threat Detection & SIEM — Splunk, Sumo Logic, Datadog + cloud-native logging for alerting and forensics 📊; Vulnerability & Configuration Scanning — Qualys, Tenable, Trivy for images and infra-as-code scanning ⚙️; Secrets Management — HashiCorp Vault, AWS Secrets Manager for safe key handling 🔐; and Supply-chain & CI/CD security — Snyk, Checkov, GitHub Advanced Security to catch insecure deps and pipelines 🧩.⚠️ Disclaimer: For educational & defensive use only. Evaluate tools against your cloud provider, compliance needs, and threat model before deploying. Always test changes in staging before production. 🚫🔒<a href="https://defcon.social/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://defcon.social/tags/CSPM" class="mention hashtag" rel="nofollow noopener" target="_blank">#CSPM</a> <a href="https://defcon.social/tags/CWPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#CWPP</a> <a href="https://defcon.social/tags/IAM" class="mention hashtag" rel="nofollow noopener" target="_blank">#IAM</a> <a href="https://defcon.social/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://defcon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://defcon.social/tags/Cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloud</a> <a href="https://defcon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://defcon.social/tags/SecurityTools" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityTools</a> <a href="https://defcon.social/tags/Compliance" class="mention hashtag" rel="nofollow noopener" target="_blank">#Compliance</a> <a href="https://defcon.social/tags/ContainerSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ContainerSecurity</a> ☁️🛡️

Bytes EuropeTenable co-CEO on Australia, AI and growth <a href="https://www.byteseu.com/1392321/" rel="nofollow noopener" translate="no" target="_blank">https://www.byteseu.com/1392321/</a> <a href="https://pubeurope.com/tags/Australia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Australia</a> <a href="https://pubeurope.com/tags/BreachPrevention" class="mention hashtag" rel="nofollow noopener" target="_blank">#BreachPrevention</a> <a href="https://pubeurope.com/tags/BusinessContinuity" class="mention hashtag" rel="nofollow noopener" target="_blank">#BusinessContinuity</a> <a href="https://pubeurope.com/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://pubeurope.com/tags/CustomerExperience" class="mention hashtag" rel="nofollow noopener" target="_blank">#CustomerExperience</a>(CX) <a href="https://pubeurope.com/tags/CustomerFeedback" class="mention hashtag" rel="nofollow noopener" target="_blank">#CustomerFeedback</a> <a href="https://pubeurope.com/tags/CustomerRetention" class="mention hashtag" rel="nofollow noopener" target="_blank">#CustomerRetention</a> <a href="https://pubeurope.com/tags/CyberResilience" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberResilience</a> <a href="https://pubeurope.com/tags/CyberRisk" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberRisk</a> <a href="https://pubeurope.com/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://pubeurope.com/tags/CybersecurityStrategy" class="mention hashtag" rel="nofollow noopener" target="_blank">#CybersecurityStrategy</a> <a href="https://pubeurope.com/tags/DataIntegration" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataIntegration</a> <a href="https://pubeurope.com/tags/EnterpriseSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#EnterpriseSecurity</a> <a href="https://pubeurope.com/tags/MarketingTechnologies" class="mention hashtag" rel="nofollow noopener" target="_blank">#MarketingTechnologies</a>(MarTech) <a href="https://pubeurope.com/tags/SoftwareDevelopment" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareDevelopment</a> <a href="https://pubeurope.com/tags/Tenable" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tenable</a>

NetzpalaverCheck Point gibt Integration von Cloudguard-Network-Security in Nutanix-AOS 7.3 bekannt<a href="https://social.tchncs.de/tags/Firewall" class="mention hashtag" rel="nofollow noopener" target="_blank">#Firewall</a> @CheckPointSW <a href="https://social.tchncs.de/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://social.tchncs.de/tags/Cloudguard" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloudguard</a> <a href="https://social.tchncs.de/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://social.tchncs.de/tags/Cybersicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersicherheit</a> <a href="https://social.tchncs.de/tags/FlowNetworkSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#FlowNetworkSecurity</a> @Nutanix <a href="https://social.tchncs.de/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener" target="_blank">#ZeroTrust</a><a href="https://netzpalaver.de/2025/09/18/check-point-gibt-integration-von-cloudguard-network-security-in-nutanix-aos-7-3-bekannt/" rel="nofollow noopener" translate="no" target="_blank">https://netzpalaver.de/2025/09/18/check-point-gibt-integration-von-cloudguard-network-security-in-nutanix-aos-7-3-bekannt/</a>

Bytes EuropeTenable Report Highlights Cloud Security Risks in Hybrid Environments, AI Workloads <a href="https://www.byteseu.com/1371520/" rel="nofollow noopener" translate="no" target="_blank">https://www.byteseu.com/1371520/</a> <a href="https://pubeurope.com/tags/AIWorkloads" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIWorkloads</a> <a href="https://pubeurope.com/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://pubeurope.com/tags/environment" class="mention hashtag" rel="nofollow noopener" target="_blank">#environment</a>

NetzpalaverKI in der Cloud-Security - Was es jetzt braucht, sind Tempo, Kontext und Verantwortung<a href="https://social.tchncs.de/tags/Cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloud</a> <a href="https://social.tchncs.de/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://social.tchncs.de/tags/CloudSicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSicherheit</a> <a href="https://social.tchncs.de/tags/CybersecurityCybersicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#CybersecurityCybersicherheit</a> <a href="https://social.tchncs.de/tags/Cybersicherheitslage" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersicherheitslage</a> <a href="https://social.tchncs.de/tags/Echtzeiterkennung" class="mention hashtag" rel="nofollow noopener" target="_blank">#Echtzeiterkennung</a> <a href="https://social.tchncs.de/tags/KIAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#KIAgent</a> <a href="https://social.tchncs.de/tags/k%C3%BCnstlicheIntelligenz" class="mention hashtag" rel="nofollow noopener" target="_blank">#künstlicheIntelligenz</a> @Sysdig<a href="https://netzpalaver.de/2025/09/10/ki-in-der-cloud-security-was-es-jetzt-braucht-sind-tempo-kontext-und-verantwortung/" rel="nofollow noopener" translate="no" target="_blank">https://netzpalaver.de/2025/09/10/ki-in-der-cloud-security-was-es-jetzt-braucht-sind-tempo-kontext-und-verantwortung/</a>

InfoQ<a href="https://techhub.social/tags/CertificateTransparency" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertificateTransparency</a> (CT) creates public, append-only logs of every TLS certificate issued, helping detect rogue or mistaken certificates.Learn how CT has 𝐭𝐫𝐚𝐧𝐬𝐟𝐨𝐫𝐦𝐞𝐝 𝐢𝐧𝐭𝐞𝐫𝐧𝐞𝐭 𝐏𝐊𝐈: <a href="https://bit.ly/4gkK72Y" rel="nofollow noopener" translate="no" target="_blank">https://bit.ly/4gkK72Y</a> 📰 Read now!<a href="https://techhub.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://techhub.social/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://techhub.social/tags/Encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#Encryption</a> <a href="https://techhub.social/tags/Cryptography" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cryptography</a> <a href="https://techhub.social/tags/InfoQ" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoQ</a>

D_70WN 🌈 🏳️‍⚧️Privilege Escalation in GraphQL/REST APIs (CVE-2025-55739 & CVE-2025-55210): Hardcoded OAuth keys and improper JWT jti validation let low-privileged users forge tokens with admin-level scopes.The two privilege escalation issues can be chained together to move from a standard account to full administrator, posing significant risk for FreePBX deployments.Big thanks to the FreePBX and Sangoma team for confirming and patching these issues. <a href="https://chaos.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://chaos.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://chaos.social/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudsecurity</a> <a href="https://chaos.social/tags/cve" class="mention hashtag" rel="nofollow noopener" target="_blank">#cve</a> <a href="https://chaos.social/tags/freepbx" class="mention hashtag" rel="nofollow noopener" target="_blank">#freepbx</a>

D_70WN 🌈 🏳️‍⚧️New Vulnerabilities Discovered in FreePBX, from low privilege to full admin: three new CVEs impacting FreePBX and cloud deploymentsI recently identified and reported multiple critical vulnerabilities in the FreePBX (<a href="https://www.freepbx.org" rel="nofollow noopener" translate="no" target="_blank">https://www.freepbx.org</a>), resulting in three CVEs:Stored Cross-Site Scripting (CVE-2025-55209): Allows a low-privileged user to steal an admin session token.<a href="https://chaos.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://chaos.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://chaos.social/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudsecurity</a> <a href="https://chaos.social/tags/cve" class="mention hashtag" rel="nofollow noopener" target="_blank">#cve</a> <a href="https://chaos.social/tags/freepbx" class="mention hashtag" rel="nofollow noopener" target="_blank">#freepbx</a>

ml4denAI tools are being weaponized by threat actors in unprecedented ways. From zero-day exploits to record-breaking DDoS attacks, the cybersecurity landscape continues to evolve at an alarming pace.<a href="https://social.vivaldi.net/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.vivaldi.net/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://social.vivaldi.net/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudsecurity</a> <a href="https://social.vivaldi.net/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#ai</a> <a href="https://social.vivaldi.net/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a><a href="https://cybernewsweekly.substack.com/p/cybersecurity-news-review-week-36-6c4" rel="nofollow noopener" translate="no" target="_blank">https://cybernewsweekly.substack.com/p/cybersecurity-news-review-week-36-6c4</a>

Intellitron GenesisThe data you protect today could be exposed tomorrow. Quantum computing will break RSA & ECC—only Post-Quantum Cryptography (PQC) can secure the future.Read: <a href="https://intellitrongenesis.com/2025/08/31/post-quantum-cryptography-securing-tomorrows-data-today/" rel="nofollow noopener" translate="no" target="_blank">https://intellitrongenesis.com/2025/08/31/post-quantum-cryptography-securing-tomorrows-data-today/</a><a href="https://mastodon.social/tags/Quantum" class="mention hashtag" rel="nofollow noopener" target="_blank">#Quantum</a> <a href="https://mastodon.social/tags/computing" class="mention hashtag" rel="nofollow noopener" target="_blank">#computing</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/DataProtection" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataProtection</a> <a href="https://mastodon.social/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://mastodon.social/tags/Fintech" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fintech</a> <a href="https://mastodon.social/tags/artificialintelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#artificialintelligence</a> <a href="https://mastodon.social/tags/BigData" class="mention hashtag" rel="nofollow noopener" target="_blank">#BigData</a> <a href="https://mastodon.social/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#tech</a> <a href="https://mastodon.social/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#ai</a> <a href="https://mastodon.social/tags/technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#technology</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/business" class="mention hashtag" rel="nofollow noopener" target="_blank">#business</a> <a href="https://mastodon.social/tags/google" class="mention hashtag" rel="nofollow noopener" target="_blank">#google</a> <a href="https://mastodon.social/tags/microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#microsoft</a> <a href="https://mastodon.social/tags/future" class="mention hashtag" rel="nofollow noopener" target="_blank">#future</a> <a href="https://mastodon.social/tags/gaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#gaming</a>

InfoQ⚠️ As <a href="https://techhub.social/tags/Ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ransomware</a> attacks grow in frequency, scale, and sophistication, endpoint security & reactive backups are no longer enough.🔐 Defense has moved beyond traditional antivirus - the new focus is the storage layer: ✅ Immutable backups ✅ AI-powered detection ✅ Isolated vaults📰 Read the <a href="https://techhub.social/tags/InfoQ" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoQ</a> article by Arjun Mullick (Engineering Manager, Meta): <a href="https://bit.ly/4623E3x" rel="nofollow noopener" translate="no" target="_blank">https://bit.ly/4623E3x</a><a href="https://techhub.social/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://techhub.social/tags/ThreatDetection" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatDetection</a> <a href="https://techhub.social/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://techhub.social/tags/SecurityVulnerabilities" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityVulnerabilities</a>

InfoQMeet Veles - a new <a href="https://techhub.social/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> secret scanner as part of the OSV-SCALIBR (Software Composition Analysis LIBRary) ecosystem.Veles integrates seamlessly with other OSV-SCALIBR tools, powers secret scanning in Google Cloud, and is also available as a standalone module.👉 Read more here: <a href="https://bit.ly/45UM5SZ" rel="nofollow noopener" translate="no" target="_blank">https://bit.ly/45UM5SZ</a><a href="https://techhub.social/tags/InfoQ" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoQ</a> <a href="https://techhub.social/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#Google</a> <a href="https://techhub.social/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a>

DomainToolsFor cybersecurity practitioners looking to stay ahead of the curve, this week's reading list is for you collated by <a href="https://masto.deoan.org/@neurovagrant" class="u-url mention" rel="nofollow noopener" target="_blank">@neurovagrant</a>. Dive into new research from Black Hat and DEF CON to explore detailed investigations into cybercriminal groups like VexTrio (💡<a href="https://infosec.exchange/@InfobloxThreatIntel" class="u-url mention" rel="nofollow noopener" target="_blank">@InfobloxThreatIntel</a>) and learn from the experiences of a Kaseya hacker (🔦Analyst1). Finally, get grounded perspectives on AI's role for both defenders and attackers.The list also highlights important findings on attacker behavior (⚠️ <a href="https://infosec.exchange/@greynoise" class="u-url mention" rel="nofollow noopener" target="_blank">@greynoise</a>), cloud threat hunting (👀Recorded Future), and vulnerabilities in AI agents. Whether you're in the trenches or looking for your next role, these resources offer valuable insights to help you navigate a challenging landscape.Learn More: <a href="https://dti.domaintools.com/cybersecurity-reading-list-week-of-2025-08-25/" rel="nofollow noopener" translate="no" target="_blank">https://dti.domaintools.com/cybersecurity-reading-list-week-of-2025-08-25/</a><a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/threatintelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#threatintelligence</a> <a href="https://infosec.exchange/tags/blackhat" class="mention hashtag" rel="nofollow noopener" target="_blank">#blackhat</a> <a href="https://infosec.exchange/tags/defcon" class="mention hashtag" rel="nofollow noopener" target="_blank">#defcon</a> <a href="https://infosec.exchange/tags/ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#ransomware</a> <a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudsecurity</a> <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/threatanalysis" class="mention hashtag" rel="nofollow noopener" target="_blank">#threatanalysis</a> <a href="https://infosec.exchange/tags/cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybercrime</a>

ETBuilding a community of 50,000 security professionals wasn't easy. <a href="https://infosec.exchange/@jerry" class="u-url mention" rel="nofollow noopener" target="_blank">@jerry</a> the man behind InfosecExchange reveals how he managed the technical scaling challenges and why "moderating a community that large" proved even harder. In the latest episode of the Security Chipmunks podcast, we learn about his journey, running a Mastodon server, and how he started his journey working in a factory, to becoming an IBM Cloud security leader, as well as how running one of the largest cybersecurity podcast, Defensive Security Podcast, helped him in his career. Check out the latest episode of the Security Chipmunks podcast. Available on all of your favorite podcast platforms and YouTube.<a href="https://youtu.be/LTFYJNEcjh8" rel="nofollow noopener" translate="no" target="_blank">https://youtu.be/LTFYJNEcjh8</a><a href="https://infosec.exchange/tags/Mastodon" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mastodon</a> <a href="https://infosec.exchange/tags/CyberCommunity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberCommunity</a> <a href="https://infosec.exchange/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a>

Lenin alevski 🕵️💻New Open-Source Tool Spotlight 🚨🚨🚨TerraSchema converts Terraform `.tf` files into JSON Schema (Draft-07) for variable validation. It handles types, defaults, and validation rules directly, making `.tfvars.json` file generation seamless. Install via `go` or binaries. <a href="https://infosec.exchange/tags/Terraform" class="mention hashtag" rel="nofollow noopener" target="_blank">#Terraform</a> <a href="https://infosec.exchange/tags/JSONSchema" class="mention hashtag" rel="nofollow noopener" target="_blank">#JSONSchema</a>🔗 Project link on <a href="https://infosec.exchange/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#GitHub</a> 👉 <a href="https://github.com/HewlettPackard/terraschema" rel="nofollow noopener" translate="no" target="_blank">https://github.com/HewlettPackard/terraschema</a><a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/Software" class="mention hashtag" rel="nofollow noopener" target="_blank">#Software</a> <a href="https://infosec.exchange/tags/Technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#Technology</a> <a href="https://infosec.exchange/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#News</a> <a href="https://infosec.exchange/tags/CTF" class="mention hashtag" rel="nofollow noopener" target="_blank">#CTF</a> <a href="https://infosec.exchange/tags/Cybersecuritycareer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecuritycareer</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hacking</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/blueteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#blueteam</a> <a href="https://infosec.exchange/tags/purpleteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#purpleteam</a> <a href="https://infosec.exchange/tags/tips" class="mention hashtag" rel="nofollow noopener" target="_blank">#tips</a> <a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> <a href="https://infosec.exchange/tags/cloudsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudsecurity</a>— ✨ 🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

OWASP FoundationWe’re thrilled to welcome two visionary leaders in security as our keynote speakers for OWASP Global AppSec USA 2025!:📍 Daniel Miessler📍 Adam ShostackJoin us in Washington, D.C., November 6-7, for insights, strategies, and inspiration from two of the brightest minds in AppSec.Register today: <a href="https://owasp.glueup.com/event/131624/register/" rel="nofollow noopener" translate="no" target="_blank">https://owasp.glueup.com/event/131624/register/</a><a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/AISecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#AISecurity</a> <a href="https://infosec.exchange/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://infosec.exchange/tags/Pentesting" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pentesting</a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://infosec.exchange/tags/GlobalAppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#GlobalAppSec</a> <a href="https://infosec.exchange/tags/WashingtonDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#WashingtonDC</a>

Tarnkappe.info📬 Datenpanne bei Google: ShinyHunters hat zugeschlagen <a href="https://social.tchncs.de/tags/Datenschutz" class="mention hashtag" rel="nofollow noopener" target="_blank">#Datenschutz</a> <a href="https://social.tchncs.de/tags/ITSicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITSicherheit</a> <a href="https://social.tchncs.de/tags/CloudSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudSecurity</a> <a href="https://social.tchncs.de/tags/Datenpanne2025" class="mention hashtag" rel="nofollow noopener" target="_blank">#Datenpanne2025</a> <a href="https://social.tchncs.de/tags/GoogleDatenleck" class="mention hashtag" rel="nofollow noopener" target="_blank">#GoogleDatenleck</a> <a href="https://social.tchncs.de/tags/SalesforceHack" class="mention hashtag" rel="nofollow noopener" target="_blank">#SalesforceHack</a> <a href="https://social.tchncs.de/tags/ShinyHunters" class="mention hashtag" rel="nofollow noopener" target="_blank">#ShinyHunters</a> <a href="https://social.tchncs.de/tags/socialengineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#socialengineering</a> <a href="https://sc.tarnkappe.info/bc03d4" rel="nofollow noopener" translate="no" target="_blank">https://sc.tarnkappe.info/bc03d4</a>

Recent searches

Search options

Administered by:

Server stats:

#cloudsecurity