Cybersecurity - Memes

It is the FreeBSD analogue of Linux’s Dirty Pipe, CopyFail, Fragnesia, and Dirty Frag — except we gave it a BETTER name, with a BETTER logo, on a BETTER website. The other bug websites? Disasters. Sad. Many people have told us this.

I knew that it was possible to spy on CRT displays due to the signals they radiate, but apparently that is a problem with HDMI too.

Context

Looking at you, Volkswagen. Don’t store billions of records in an AWS bucket that can be breached.

cross-posted from: https://sh.itjust.works/post/53663224

Sometimes I wonder whether all this “security awareness training” has any effect at all.

Context

Love it when someone falls for phishing, gives away their login, and just… says nothing. Really helpful.

References: * https://www.theregister.com/2025/04/16/homeland_security_funding_for_cve/ * https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures * https://en.wikipedia.org/wiki/Countering_Violent_Extremism_Task_Force

https://cyberinsider.com/remote-access-backdoor-discovered-in-chinese-robot-dog-unitree-go1/

cross-posted from: https://discuss.tchncs.de/post/32974661

How on earth can you both not accept the password I copied from my password safe and tell me that I cannot use the same pasaword again?

And ivanti released CVE-2025-0282, just one week into the new year.

Some of these vulnerabilities look more like backdoors

Fortinet, Palo, Checkpoint, Cisco, Sonicwall … is there any big firewall vendor that didn’t have any critical vulnerabilities last year?

And black gloves of course

cross-posted from: https://sopuli.xyz/post/17042938

Still waiting for end to end encryption…

Someone in Poland chose an interesting name for his company.

I have both done pentests and received pentest reports. My observation is that the perceived severity often varies between the tester and the customer.

Nothing tells me more that you care about my privacy than sharing my data with hundreds or thousands of companies.

Sadly, the support for passkeys is still lacking.

Anybody else working on the 2025 budget?

As AI image recognition advances, CAPTCHAs need to get more creative.

What is your favourite password rule?

Interestingly, the firewall got overload by the number of UDP packets and not by the bandwidth of traffic. See UDP Flooding on Wikipedia.

Please don’t act like the german conservative party:

To be clear, not all companies are like this.

Who could have guessed that having tested, well protected and current backups help when dealing with cyber security incidents?

This practice is not recommended anymore, yet still found in many enterprises.