X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

Jeff Hall - PCIGuru :verified:

@[email protected]

Been in information security, privacy, computers, etc. since, well, since almost they have been around (i.e., a very, very long time). Based in Minneapolis, Minnesota or there about. Oh, and I write the PCI Guru blog - pciguru.blog

Open remote profile ↗
Posts

Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States. https://www.bleepingcomputer.com/news/security/ahold-delhaize-cyberattack-affects-services-across-us-and-europe/

BleepingComputerAhold Delhaize: Cyberattack affects services across US and EuropeAhold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape. https://www.theregister.com/virtualization/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to-attack-penguin-powered-networking/5303744

theregisterLinux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networkingParty like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
↩ Reply ♡ 0 · ↻ 0 ↗ Original

The order is broad, as it requires agencies to ditch "all DeepSeek and DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations." https://www.theregister.com/security/2026/10/20/deepseek-deep-sixed-at-all-us-federal-civilian-agencies/5304010

theregisterDeepSeek deep-sixed at all US federal civilian agenciesOrder disallowing use of Chinese AI service is unhelpfully vague and broad
↩ Reply ♡ 0 · ↻ 0 ↗ Original

This could be a useful tool for AWS security teams. https://kitploit.com/en/tools/github/capture0x/aws-pentest

Kitploitaws-pentest — Automated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration checks, producingAutomated AWS security assessment CLI with 30 modules covering IAM privilege escalation, S3 exposure, compute, network, logging and misconfiguration checks, producing Markdown audit reports.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

The U.S. government identified four more potential progenitors of an actually working and useful quantum computer, a defense research agency announced this month. https://www.govinfosecurity.com/darpa-nudges-quantum-computing-from-planning-to-proof-a-33121

www.govinfosecurity.comDARPA Nudges Quantum Computing From Planning to ProofDARPA has advanced Atom Computing, IonQ, Diraq and IBM in its Quantum Benchmarking Initiative, a federal effort to validate competing quantum architectures and
↩ Reply ♡ 0 · ↻ 0 ↗ Original

“The Caldwell Technology Park [...] the Stargate facility, and a bunch of other very large hyperscale facilities have gotten regulatory approvals [...] so it's not like a real pause." https://www.404media.co/it-aint-right-texas-said-it-would-halt-data-center-permits-the-state-is-pushing-ahead-anyway/

404 Media'It Ain't Right:' Texas Said It Would Halt Data Center Permits. The State is Pushing Ahead Anyway“The Caldwell Technology Park [...] the Stargate facility, and a bunch of other very large hyperscale facilities have gotten regulatory approvals [...] so it's not like a real pause."
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Not an endorsement, but this vendor article brings up an issue I had not thought of with AI. https://thehackernews.com/2026/10/from-email-to-case-to-boardroom-how.html

The Hacker NewsFrom Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for SoftwareSalesforce Agentforce workflows can route untrusted customer messages into agent prompts, exposing gaps in enterprise AI agent governance.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html

The Hacker NewsRussian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective LoaderAPT28 targeted two NATO states with HOOKEDGE and a new reflective loader, stealing credentials and establishing an SSH tunnel at a naval shipbuilder.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Four of Europe’s largest telecoms groups are exploring launching their own satellite mobile services to challenge the dominance of Elon Musk’s Starlink. https://giftarticle.ft.com/giftarticle/actions/redeem/e7d62286-009e-4ae3-b74f-70902e908efc

www.ft.comEuropean telecoms groups join forces to challenge Elon Musk’s StarlinkDeutsche Telekom, Orange, Telefónica and Vodafone to explore joint bid for spectrum to provide mobile satellite coverage
↩ Reply ♡ 0 · ↻ 0 ↗ Original