#ReconnaissanceActivities
LightNews LightNews
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures

#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#RansomwareDataBreach

#VictoriasSecret

This 👇
May 28, 2025 at 8:53 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#Google
#Qualcomm
#ZeroDayPatch
lorenzofb.bsky.social Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · Jun 3
NEW: Qualcomm says they patched three zero-days that are being actively exploited by hackers, according to Google.

Patches are out but it's now up to device manufacturers to push them to users. So many devices are still vulnerable.

techcrunch.com/2025/06/03/p...
Phone chipmaker Qualcomm fixes three zero-days exploited by hackers | TechCrunch
Google's Threat Analysis Group, which investigates government-backed hacks, was credited with the discovery of the zero-days.
techcrunch.com
June 3, 2025 at 7:12 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#Cartiers

This 👇
grahamcluley.com Graham Cluley @grahamcluley.com · Jun 2
Cartier has confirmed a data breach that exposed customers' personal information, following a security incident at a third-party service provider.

Names, contact details, and dates of birth were amongst the sensitive data accessed .
Model wearing Cartier watch
June 2, 2025 at 10:21 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#Unit26165
#APT28
#FancyBear
#ForestBlizzard
#BlueDelta

#CSOLife

This 👇 💯❗️📣⚠️
May 22, 2025 at 6:15 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

This 👇 💯❗️📣⚠️
cyberscoop.bsky.social CyberScoop @cyberscoop.bsky.social · May 21
Multi-national warning issued over Russia’s targeting of logistics, tech firms. The campaign traces back at least to early 2022, coinciding with the start of Russia’s full-scale invasion of Ukraine. via @gregotto.bsky.social cyberscoop.com/russian-apt2...
Multi-national warning issued over Russia’s targeting of logistics, tech firms
APT28, a Russian state-linked hacking group, is targeting Western logistics and tech firms supporting Ukraine.
cyberscoop.com
May 21, 2025 at 7:12 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

#URI\DFCSC

This 👇
kimzetter.bsky.social Kim Zetter @kimzetter.bsky.social · May 19
Hackers breached Rhode island's public benefits portal and remained undetected for four months, even though a Deloitte managed-services firewall sounded hundreds of alerts. "The alerts were especially active for the 18 days in November 2024 during which attackers exfiltrated gigabytes of data"
RIBridges firewall worked. But forensic report says hundreds of alarms went unnoticed. • Rhode Island Current
A forensic report looking into last year's RIBridges data breach found hackers accessed the personal data of 644,000 Rhode Islanders while raising troubling questions about vendor Deloitte's handling ...
rhodeislandcurrent.com
May 19, 2025 at 9:15 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

This 👇 🦹‍♀️💻❓️
May 16, 2025 at 11:30 AM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

This 👇 💯❗️📣⚠️
May 15, 2025 at 12:21 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#CybersecurityAdvisory

#IndicatorsOfCompromise
#ReconnaissanceActivities

"TA406 relies on freemail senders spoofing members of think tanks to convince the target to engage with the phishing email. "

www.proofpoint.com/us/blog/thre...
TA406 Pivots to the Front | Proofpoint US
What happened  In February 2025, TA406 began targeting government entities in Ukraine, delivering both credential harvesting and malware in its phishing campaigns. The aim of these
www.proofpoint.com
May 13, 2025 at 11:49 AM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

This 👇 💻🦹‍♀️⚠️
May 12, 2025 at 5:10 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

This 👇
May 12, 2025 at 3:13 PM
jaculis.bsky.social
#CybersecurityAwareness
#StrategicThreatAnalysisIntelligence
#BestPractices
#CybersecurityAdvisory

#CVEs\KEVs

#IndicatorsOfCompromise
#ReconnaissanceActivities
#AuditProcess

This 👇 🤔 💻⚠️
democracydocket.com Democracy Docket @democracydocket.com · May 10
Trump’s latest budget proposal includes nearly $500 million in cuts to the Cybersecurity and Infrastructure Security Agency, which is the main federal agency tasked with safeguarding U.S. elections from hacking.

www.democracydocket.com/news-alerts/...
Trump Administration Proposes More Drastic Election Security Cuts
Read more here.
www.democracydocket.com
May 10, 2025 at 9:06 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

#ThreatIntelligencePolicy
#CSOLife

This 👇 💻🦹‍♀️⚠️
May 9, 2025 at 9:53 AM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK
#NCSC\NZ
#CCCS
#ACSC
#AlliesMatter

This 👇
sdfstu.bsky.social Stu F. @sdfstu.bsky.social · May 1
The photograph apparently also confirms that he has a signal capture/archive app installed, so
bsky.app/profile/mdh2...
mdh2.bsky.social Mdh @mdh2.bsky.social · May 1
What the fuck is that TM SGL shit he has on his phone?
May 2, 2025 at 1:50 AM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK
#NCSC\NZ
#CCCS
#ACSC
#AlliesMatter

This 👇
kennyog.bsky.social Kenny Paterson @kennyog.bsky.social · May 1
All of this…
May 1, 2025 at 11:08 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK
#NCSC\NZ
#CCCS
#ACSC
#AlliesMatter

This 👇
tomwarren.co.uk Tom Warren @tomwarren.co.uk · May 1
Microsoft is going passwordless by default on new accounts. If you sign up for a new Microsoft Account, you'll be offered to use authentication methods like passkeys, push notifications, and security keys instead of a password www.theverge.com/news/659929/...
Microsoft goes passwordless by default on new accounts
The company is trying to get everyone to get rid of passwords, eventually.
www.theverge.com
May 1, 2025 at 11:02 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK
#NCSC\NZ
#CCCS
#ACSC
#AlliesMatter

This 👇
mdh2.bsky.social Mdh @mdh2.bsky.social · May 1
I saw this story breaking about Mike Waltz and noticed something weird about his phone in that he isn’t actually using “signal” as in the secure messaging app but is using something MUCH worse that I haven’t seen reported on yet. Quick thread but it’s an Israeli intel guy behind it
May 1, 2025 at 10:44 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK
#NCSC\NZ
#CCCS
#ACSC
#AlliesMatter

This 👇
josephcox.bsky.social Joseph Cox @josephcox.bsky.social · May 1
New from 404 Media: Mike Waltz has inadvertently revealed the obscure app the government is using to archive Signal messages. Made by a company called TeleMessage. Use of the Signal clone raises questions about how messages being secured, what classification of info

www.404media.co/mike-waltz-a...
Mike Waltz Accidentally Reveals Obscure App the Government Is Using to Archive Signal Messages
A photograph of Trump administration official Mike Waltz's phone shows him using an unofficial version of Signal designed to archive messages during a cabinet meeting.
www.404media.co
May 1, 2025 at 9:52 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK

This 👇 ⚠️❗️📣
newseye.bsky.social News Eye @newseye.bsky.social · May 1
NEW: Mike Waltz pictured checking Signal on his phone DURING the Cabinet meeting.

You can actually read some of the content of messages with Rubio and JD Vance. 🤯

Great catch by Reuters photographer, Evelyn Hockstein.
Mike Waltz in the right of the screen looking down at his phone. A close up of the phone shows a message for Waltz to verify his Signal PIN. A message with JD Vance which says “I have confirmation from my counterpart it’s turned off. He’s going to be here…
May 1, 2025 at 8:53 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#APT45
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK

www.cisa.gov/topics/cyber...
May 1, 2025 at 8:45 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK

This 👇 ⚠️❗️📣
reichlinmelnick.bsky.social Aaron Reichlin-Melnick @reichlinmelnick.bsky.social · May 1
Honestly this is just incredible content.
Tweet from Charlie Spiering @charliespiering: "Photos show Mike Waltz literally checking Signal during the cabinet meeting (via Reuters)" UNderneath is a zoomed in picture of a phone with the chats open. You can see chats with Marco Rubio, Steve Witkoff, Tulsi Gabbard, JD Vance, someone whose last name ends with "cheidt," and a group chat labeled "NSC Scheduling." You can see You can see that JD Vance's chat has a text saying "I have confirmation from my counterpart it's turned off. He is going to be here..."
May 1, 2025 at 8:11 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess
#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK

This 👇
mke-voter.bsky.social 🇺🇸 RULE of LAW made AMERICA GREAT @mke-voter.bsky.social · May 1
My understanding (which may be mistaken) is that signal, per se, is not the problem.

The phones are what is not secure.

For example, that is why one cannot take phones into SCIFs.

National Security still doesn’t seem to be a concern to these people. 🤷🏻‍♂️
May 1, 2025 at 8:11 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

#UnitedKingdomNationalCyberSecurityCentre
#NCSC\UK

This 👇
May 1, 2025 at 7:54 PM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

This 👇
May 1, 2025 at 8:48 AM
jaculis.bsky.social
#CybersecurityAwareness
#TechniquesTacticsProcedures
#TTPs
#BestPractices
#CybersecurityAdvisory

#EDR
#EndpointDetectionAndResponse
#IndicatorsOfCompromise
#IOCs
#ReconnaissanceActivities
#AuditProcess

🤔❓️

This 👇
dangoodin.bsky.social Dan Goodin @dangoodin.bsky.social · Apr 30
From the department of head scratches comes this counterintuitive news: Microsoft says it has no plans to change a remote login protocol in Windows that allows people to log in to machines using passwords that have been revoked.

arstechnica.com/security/202...
Windows RDP lets you log in using revoked passwords. Microsoft is OK with that.
Researchers say the behavior amounts to a persistent backdoor.
arstechnica.com
April 30, 2025 at 6:50 PM