Rogue RDP Files Used in Latest Campaign Targeting Ukrainian Government, Military https://thecyberexpress.com/rogue-rdp-files-used-in-ukraine-cyberattacks/

Lots of people in my mentions asking about Web GPU. It's available right now in Safari Technology Preview. It shipped in version 190, in March. Please test it, and let us know if you see issues at https://bugs.webkit.org.

Ransomware that "lives off the land" and uses Bitlocker

https://securelist.com/ransomware-abuses-bitlocker/112643/

#bitlocker #ransomware #cybersecurity

More research on the group allegedly behind the MGM casino hack, this time from Mandiant/Google: https://therecord.media/scattered-spider-ransomware-attacks-hospitality-retail

The gallop towards #enshittification as propounded by @pluralistic continues unabated. This time with Duolingo. I've been using the app for years. In fact almost straight for the past 180 days. Then their recent update removed the clear, well articulated speech & replaced it with what seems to be AI generated, barely comprehensible, low quality speech that effectively makes the app (now shapp/shit app) pretty much unusable.

If you're a Duolingo user or just a lover of language in general & if you've noticed this please file regular reports about the sound quality & add a comment. Become ungovernable.

#Languages #Duolingo

Every Monday I send out a CyberSecurity Newsletter:

In this week's news: MoveIT debacle keeps going with PricewaterhouseCoopers and Ernst & Young added to the list, BlackCat hacked Reddit and is now threatening to release data unless Reddit changes its new API policy, LastPass users are locked out when changing MFA, Microsoft Teams vulnerability allows malware distribution and SiegedSec targets Texas.

https://bagheera.substack.com/p/cybersecurity-newsletter-5b8?sd=pf

#Moscow #museums close to the #Kremlin are being evacuated: #Tretyakov gallery, the #Pushkin museum, cultural centre #GES-2, and the shopping centres Mega Belaya Dacha and Kvartal

In cities across #Russia #Wagner billboards are being dismantled
#Prigozhin #putin

@fulelo @Nour thank you for this great thread about #prigozhin #wagner

Looks like #bridges getting blocked closer to the #Moscow region (judging by telegram messages) and some sightings of high calibre weapons on the outskirts of Moscow’s south-western suburbs
#Prigozhin #Putin #Russia #Wagner

First thing I’ve published since surgery seven weeks ago. That was an excruciating hour or so, but have to pay the rent. So, any and all sharing would be *hugely* appreciated.

By me at Forbes, the latest iOS update (16.5) includes fixes for three zero-days impacting most all iPhone and iPad users.

#Infosec #Apple #iphone #ipad #ios #ios165 #0days #vulnerabilities

https://www.forbes.com/sites/daveywinder/2023/05/19/ios-165-update-now-warning-issued-for-all-iphone-ipad-users/

A new version of Helix, the modal text editor written in Rust, was released yesterday :helix: :ferris:

https://github.com/helix-editor/helix/blob/master/CHANGELOG.md#2305-2023-05-18

Today, a long waited PR is merged to support multiple language servers per language:

https://github.com/helix-editor/helix/pull/2507 🚀

#Helix #HelixEditor #Rust #RustLang

Man blir ju lite glad när man stöter på en URL utan snedstreck som avslut. Det blir man ju.

Exempel:

https://github.com/protesilaos/modus-themes

@Ranty_Em Brilliant!

US cyber watchdog CISA has 'no confidence' in security of US emergency cell network, senator Ron Wyden says in a letter released today: https://www.reuters.com/world/us/us-cyber-watchdog-has-no-confidence-security-us-emergency-cell-network-senator-2023-04-12/

@mathdatech1 and they are?

US Sending Experimental Anti-Drone Weapons to Ukraine https://www.defenseone.com/defense-systems/2023/04/us-sending-experimental-anti-drone-weapons-ukraine/384801/

Interesting approach / tools for a #developer to making #CLI demos a "Breeze with Zero Stress and Zero Mistakes".

https://martinheinz.dev/blog/94

Mandiant researchers observed a new ALPHV (BlackCat) ransomware affiliate, tracked as UNC4466, targeting publicly exposed Veritas Backup Exec installations vulnerable to CVE-2021-27876, CVE-2021-27877 & CVE-2021-27878 for initial access to victim environments. https://www.mandiant.com/resources/blog/alphv-ransomware-backup

@GossiTheDog #Capita? 😆

MalwareBot has posted hash and torrent set number 465 with 42.16 GB of zipped #malware samples. Users log in at VirusShare to access torrent download links.