Goupil

Parceque !
(mes opinions n'engagent que moi)
Ailleurs en ligne:

[LaurieWired @lauriewired]

The display you’re reading this on sucks. Your brain is just too slow to notice.

For decades, panel manufacturers have used an optical-illusion to expand the perceived color depth.

If you look closely, the artifacts (on cheaper displays) are easy to spot.

[Koen Van Impe ☕ @cudeso]

New publication by ANSSI: "Cyber Threat Overview 2024".

CERTFR-2025-CTI-004

https://t.co/AVtMwhLDJe

[CERT Orange Cyberdefense @CERTCyberdef]

🆕We publish today the result of a deep-dive investigation into a malicious campaign leveraging #ShadowPad and #PlugX to distribute a previously-undocumented ransomware, dubbed #NailaoLocker.
This campaign targeted 🇪🇺 organizations during S2 2024 and is tied to Chinese TA 🇨🇳. /🧵

[Qubes OS @QubesOS]

Qubes OS 4.2.4 has been released!

https://t.co/XF5RZCBjXR

[Communications of the ACM @CACMmag]

.@GaryMarcus discusses AI's technical problems, and explains why he thinks Large Language Models have reached a "point of diminishing returns,” in an #interview with @LeahHoffmann. https://t.co/6DS0PPuTtI

[Cybersecurity and Infrastructure Security Agency @CISAgov]

This joint advisory is in response to exploitation disclosed by #Ivanti in Sept. 2024 and is intended to share historical analysis and indicators that remain a threat to unpatched appliances.

[Microsoft Threat Intelligence @MsftSecIntel]

Seashell Blizzard, a Russia-based threat actor that has been linked to destructive attacks since the start of the war in Ukraine, has been observed conducting spear-phishing campaigns against the European energy sector. https://t.co/KEyLl1ncLV

[Florian Roth ⚡️ @cyb3rops]

I'm not sure people fully grasp the severity of this #Fortigate config dump - Kevin breaks it down in his Mastodon posts :
https://t.co/ifKojFN2il

[ANSSI @ANSSI_FR]

🟡 Au cours des derniers mois, l’ANSSI a observé de nombreux incidents de sécurité sur des équipements situés en bordure des systèmes d’information : pare-feux, passerelles VPN, passerelles de filtrage ou des gestionnaires d’équipements.

[ANSSI @ANSSI_FR]

⚠️ Vulnérabilité Fortinet.

📢 Le @CERT_FR a publié une alerte de sécurité relatif à une vulnérabilité critique affectant FortiOS et FortiProxy.

➡️Informations et recommandations sur :
https://t.co/3XlxKcTSqk

[Swapna Kumar Panda @swapnakpanda]

10 Python Books for FREE on this Christmas Eve 🎄

[Chris Wysopal @WeldPond]

Due to U.S. telco networks being compromised, today CISA is recommending:
1. Use only end-to-end encrypted communications
2. Enable Fast Identity Online (FIDO) phishing-resistant authentication
3. Migrate away from Short Message Service (SMS)-based MFA
4. Use a password manager to store all passwords
5. Set a Telco PIN
6. Regularly update software
7. Opt for the latest hardware version from your cell phone manufacturer
8. Do not use a personal virtual private network (VPN)

[Donncha Ó Cearbhaill @DonnchaC]

🚨 BREAKING: Amnesty’s latest report on digital surveillance in Serbia: new *NoviSpy* spyware discovered; zero days identified and patched; and first evidence showing use of Cellebrite UFED forensic products to unlock phones to then infect with spyware. 🧵

[Costin Raiu @craiu]

Very cool research, with IOCs, describing a previously unknown gov spyware, NoviSpy. Full report: https://t.co/K35sZCBeDS

[CERT-FR @CERT_FR]

Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://t.co/FkGIO5u9OE

[NoLimitSecu @nolimitsecu]

#Podcast #Cybersécurité

Épisode #483 consacré au fonctionnement d'un antivirus, avec Renaud Tabary (@malcat4ever)

https://t.co/zSCvah8YPS

[Goupil @FuraxFox]

@ju_hnny5 @restosducoeur bien sur