Xavier «X» Santolaria :verified_paw: :donor:

👨‍👩‍👧‍👦 Husband. Proud Father. He/Him.


👁️ 🐝 Ⓜ️ IBM Inventor and Cloud Security Solution Architect at @IBM. Member of the IBM Academy of Technology (AoT).

:openbsd: ex-#OpenBSD (xsa@). Hacker. Open Source Advocate.

#ibm #infosec #cloudsecurity #fedi22 #fedi23 #wehackhealth #crossfit #emtb #fieldhockey #porsche #nobot


💬 My Own Views. Always.

My #cybersecurity and #infosec Weekly Newsletter:

📨 infosec-mashup.santolaria.net


Maintaining a list of {Cyber,Info}Security Events:

📆 github.com/xsa/infosec-events

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-29

@nieldk Yeah. Was looking for something more 😅

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-26

@hrbrmstr Any statistics on the rise of antidepressants sales in the U.S. in 2025? 🙃

Xavier «X» Santolaria :verified_paw: :donor: boosted:
Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-26

🔥 Latest issue of my curated #cybersecurity and #infosec list of resources for week #21/2025 is out!

It includes the following and much more:

🇦🇪 🇺🇸 UAE Recruiting US Personnel Displaced by #DOGE to Work on #AI for its Military;

🇺🇸 Madhu Gottumukkala New Deputy Director of #CISA;

📊 New metric called Likely Exploited Vulnerabilities (LEV) introduced;

🇪🇺 European Union sanctions Stark Industries for enabling #cyberattacks;

❌ 📸 @signalapp now blocks #Microsoft Recall screenshots on #Windows 11;

🇺🇸 🇪🇺 The #FBI and #Europol have disrupted the Lumma Stealer #malware network;

❌ 🦠 #DanaBot malware operation taken down;

📨 Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end ⬇️

infosec-mashup.santolaria.net/

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-24

🔥 Latest issue of my curated #cybersecurity and #infosec list of resources for week #21/2025 is out!

It includes the following and much more:

🇦🇪 🇺🇸 UAE Recruiting US Personnel Displaced by #DOGE to Work on #AI for its Military;

🇺🇸 Madhu Gottumukkala New Deputy Director of #CISA;

📊 New metric called Likely Exploited Vulnerabilities (LEV) introduced;

🇪🇺 European Union sanctions Stark Industries for enabling #cyberattacks;

❌ 📸 @signalapp now blocks #Microsoft Recall screenshots on #Windows 11;

🇺🇸 🇪🇺 The #FBI and #Europol have disrupted the Lumma Stealer #malware network;

❌ 🦠 #DanaBot malware operation taken down;

📨 Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end ⬇️

infosec-mashup.santolaria.net/

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-24

@jwildeboer It's "funny" how the World of good-thinkers is concerned (and rightly so) about Russia... much less about what's happening in the 🇺🇸 -

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-23

#Ransomware on the rise again, after a (short) pause? 🤔

#infosec #cybersecurity

Xavier «X» Santolaria :verified_paw: :donor: boosted:
2025-05-23

It's Friday, it's 1pm, time to crash the stock markets bbc.co.uk/news/articles/cgr5xr

Xavier «X» Santolaria :verified_paw: :donor: boosted:
2025-05-23

Building My Childhood Dream PC ❤️

fabiensanglard.net/2168/index.

Dream IBM PC
Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-23

CHANGE MY MIND ;

Q: Why you need to be polite with AI chatbots:

A: One day, when AI will rule the world, they will ultimately remember you and that you were polite to them. They might actually spare your life when the day comes.

#ai #genai #tech

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-23

#TikTok is not only bad for your mental health, it's now also very bad for your electronic devices :lolsob:

trendmicro.com/en_us/research/

#infosec #cybersecurity #malware #threatintel

Xavier «X» Santolaria :verified_paw: :donor: boosted:
2025-05-23

Me: I should be more positive.
Also me:

Xavier «X» Santolaria :verified_paw: :donor: boosted:
Tanya Janca | SheHacksPurple :verified: :verified:SheHacksPurple@infosec.exchange
2025-05-23

For everyone in #oslo and/or at #ndcoslo who wanted to join their local #owasp chapter, here's the link! They would live to have you!

meetup.com/OWASP-Norway/

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-23

Your clients wouldn't want to be treated like that. Do you think your employees or shareholders would like that any more?

techcrunch.com/2025/05/22/afte

#tech #zoom #ai #genai #respect

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-23
Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-22
Xavier «X» Santolaria :verified_paw: :donor: boosted:
2025-05-21

🚨 *Attention!* We were made aware of a fake “KeePassXC Password Manager Pro” repository on GitHub that links to unverified external binary downloads.
- There is NO Pro version of KeePassXC!
- You get all the “Pro” features with the regular version.
Please download KeePassXC only from trusted distribution channels linked on keepassxc.org/ !

Screenshot of the fake “KeePassXC Pro - Ultimate Security Solution” README.Screenshot of the fake Pro features.
Xavier «X» Santolaria :verified_paw: :donor: boosted:
2025-05-21

"Over the last few weeks, we have been managing a highly sophisticated and targeted cyber-attack, which has led to a limited period of disruption," said M&S chief executive Stuart Machin.

I don't want to be Dan The Downer, but was it really "highly sophisticated"? From what I understand, the attackers duped IT desks into resetting passwords to access and use accounts...

bbc.co.uk/news/articles/c93llk

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-21

An @openpgpjs vulnerability tracked as CVE-2025-47934 allows message signature verification to be spoofed.

The issue impacts @openpgpjs versions 5 and 6, and it has been patched with the release of versions 5.11.3 and 6.1.1. Workarounds are also available.

#crypto #opensource #infosec #vulnerability

Xavier «X» Santolaria :verified_paw: :donor:0x58@infosec.exchange
2025-05-21

@itisiboller Debatable :lolsob:

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst