X XFediYour place in the Fediverse
XFEDI

#security

ActivityPub

Public posts with this hashtag.

🔄 208 ENTRY CHANGES 🔄

💻 macOS Golden Gate 27 - 34 added, 17 updated
https://support.apple.com/en-us/149035
📱 iOS and iPadOS 27 - 20 added, 10 updated
https://support.apple.com/en-us/149034
💻 macOS Tahoe 26.7 - 20 added, 8 updated
https://support.apple.com/en-us/149042
💻 macOS Sequoia 15.8 - 19 added, 9 updated
https://support.apple.com/en-us/149043
🥽 visionOS 27 - 14 added, 8 updated
https://support.apple.com/en-us/149038
⌚ watchOS 27 - 7 added, 9 updated
https://support.apple.com/en-us/149037
📺 tvOS 27 - 8 added, 5 updated
https://support.apple.com/en-us/149036
📱 iOS and iPadOS 26.7 - 9 added, 4 updated
https://support.apple.com/en-us/149041
🔨 Xcode 27 - 4 added
https://support.apple.com/en-us/149040
🌐 Safari 27 - 2 added, 1 updated
https://support.apple.com/en-us/149039

#apple #cybersecurity #infosec #security #ios

Apple SupportAbout the security content of macOS Golden Gate 27 - Apple SupportThis document describes the security content of macOS Golden Gate 27.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

This #Cybersecurity Agency Is Supposed to Protect U.S. #Elections. Officials Fear It’s Been Compromised by #Trump.

A few months into President Donald Trump’s second term, #political appointees at the Department of #HomelandSecurity made an unusual request of its agency focused on cybersecurity: Secretly acquire a #voting machine and #hack it.

The appointees wanted the Cybersecurity and #Infrastructure #Security Agency to procure the machine, examine it and report back the findings so they could be given to the #WhiteHouse , according to two former administration officials with knowledge of the request.
#dhs #voting #cisa

https://www.propublica.org/article/cisa-election-security-donald-trump

ProPublicaTrump Appointees Asked a Federal Cybersecurity Agency to Secretly Acquire a Voting Machine — and Hack ItThough not acted on, the request shows how the Trump administration has tried to use the Cybersecurity and Infrastructure Security Agency for its own ends while draining it of resources to help its mission of protecting the nation’s voting systems.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

$100 Million #ICE “Intelligence” Program is a Domestic #SecretPolice Agency in the Making

Administration that has ordered agencies to target #activists and #nonprofits would hire “intelligence” agents within ICE to identify “threats” and investigate “relationships”
#privacy #security

https://www.aclu.org/news/privacy-technology/ero-one

American Civil Liberties Union$100 Million ICE “Intelligence” Program is a Domestic Secret Police Agency in the Making | ACLUAdministration that has ordered agencies to target activists and nonprofits would hire “intelligence” agents within ICE to identify “threats” and investigate “relationships”
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Huge #DMV data #breach impacted current and former #Florida residents

The Florida Department of Highway Safety and Motor Vehicles (#FLHSMV ) has begun notifying victims impacted by a recent data breach of driver’s license and motor vehicle data, but not everyone whose information was stolen will receive an alert.
#privacy #security #hack

https://arstechnica.com/tech-policy/2026/10/huge-dmv-data-breach-impacted-current-and-former-florida-residents/

Ars TechnicaFlorida DMV hacked after police dept insecurely stored login infoFlorida issues alerts after statewide DMV data breach linked to ShinyHunters.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

#Hackers #Hijack D-Link, #Ubiquiti Devices To Resell Your Stolen #Bandwidth
#security #dlink

https://it.slashdot.org/story/26/10/15/2315217/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth?utm_source=rss1.0mainlinkanon&utm_medium=feed

it.slashdot.orgHackers Hijack D-Link, Ubiquiti Devices To Resell Your Stolen Bandwidth - SlashdotAn anonymous reader quotes a report from BleepingComputer: A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth-sharing application that lets use...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

#ChatGPT Can Peek At Your #Chrome Tabs Now
#ai #browser #security

https://tech.slashdot.org/story/26/10/16/1537233/chatgpt-can-peek-at-your-chrome-tabs-now?utm_source=rss1.0mainlinkanon&utm_medium=feed

tech.slashdot.orgChatGPT Can Peek At Your Chrome Tabs Now - SlashdotOpenAI has updated its ChatGPT Chrome extension to let users access information from their open browser tabs. A demo video shows the new functionality in action. The Verge reports: It's also updated ChatGPT in the sidebar, with the full power of ChatGPT and your entire conversation history in Chat ...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

This is kinda obvious, after what happened in Ukraine War and Iran War.

As the hatred towards data center by regular people will also be accelerated because sins by big techs and AI corps.

https://www.ft.com/content/15a049f3-b62e-40ed-b304-8a2452713338

#cybersecurity #security #datacenter

www.ft.comData centres need protection from drone warfareAI infrastructure designs may now need to incorporate blast-resistant concrete, jamming gear and missile-defence systems
↩ Reply ♡ 0 · ↻ 0 ↗ Original

2026-10-19 RDP #Honeypot IOCs - 8964 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
154.36.174.33 - 7245
45.154.96.17 - 1566
136.244.100.79 - 18

Top ASNs:
AS979 - 7245
AS212815 - 1566
AS396982 - 36

Top Accounts:
hello - 7278
administrator - 108
Administrator - 90

Top ISPs:
NetLab Global - 7245
Dyjix SAS - 1566
Google LLC - 36

Top Clients:
Unknown - 8964

Top Software:
Unknown - 8964

Top Keyboards:
Unknown - 8964

Top IP Classification:
Unknown - 7263
hosting - 1695
mobile - 3

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

↩ Reply ♡ 0 · ↻ 0 ↗ Original

2026-10-19 RDP #Honeypot IOCs - 5976 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
154.36.174.33 - 4830
45.154.96.17 - 1044
136.244.100.79 - 12

Top ASNs:
AS979 - 4830
AS212815 - 1044
AS396982 - 24

Top Accounts:
hello - 4852
administrator - 72
Administrator - 60

Top ISPs:
NetLab Global - 4830
Dyjix SAS - 1044
Google LLC - 24

Top Clients:
Unknown - 5976

Top Software:
Unknown - 5976

Top Keyboards:
Unknown - 5976

Top IP Classification:
Unknown - 4842
hosting - 1130
mobile - 2

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

↩ Reply ♡ 0 · ↻ 0 ↗ Original

2026-10-19 RDP #Honeypot IOCs - 2988 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
154.36.174.33 - 2415
45.154.96.17 - 522
136.244.100.79 - 6

Top ASNs:
AS979 - 2415
AS212815 - 522
AS396982 - 12

Top Accounts:
hello - 2426
administrator - 36
Administrator - 30

Top ISPs:
NetLab Global - 2415
Dyjix SAS - 522
Google LLC - 12

Top Clients:
Unknown - 2988

Top Software:
Unknown - 2988

Top Keyboards:
Unknown - 2988

Top IP Classification:
Unknown - 2421
hosting - 565
mobile - 1

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

↩ Reply ♡ 0 · ↻ 0 ↗ Original

🔒 #ONLYOFFICE 10.0 brings 40+ vulnerability fixes for the online editors and desktop app.

A few highlights:

✔️ XSS fixes to keep shared files safe

✔️ Two macro sandbox escapes closed

✔️ Hidden JavaScript in PDFs no longer runs

✔️ And more fixes

Self-hosting? Your install won't update itself, so upgrade soon.

Full details on our blog: https://www.onlyoffice.com/blog/2026/10/security-fixes-onlyoffice-10?utm_source=social&utm_medium=post&utm_campaign=fosstodon

Questions about upgrading? Drop them below!

#ONLYOFFICE #opensource #security

Media attachment
ONLYOFFICE BlogONLYOFFICE 10.0: A closer look at the latest 40 security fixesONLYOFFICE 10.0 includes 40+ security fixes for online editors and desktop apps, improving protection for documents, users, and infrastructure.
↩ Reply ♡ 0 · ↻ 0 ↗ Original