Steve Puluka

Senior Network & Security Engineer / Cantor & Religious Educator

[Steve Puluka @spuluka]

Report from Interisle finds that at least 10% of domains registered last year are malicious. And three registrars had over 80% of their domains deemed malicious and blocked.

https://t.co/sLFBtcrWz1

[Steve Puluka @spuluka]

Good news that Dutch police have arrested two suspects that were creating and selling phishing templates for scammers.

https://t.co/POuxC4340t

[Steve Puluka @spuluka]

Hackers have breached and leaked to journalists documents from the Russian disinformation operations showing how they are working against various countries.

https://t.co/yh12ixpLVn

[Steve Puluka @spuluka]

Initial report from @AnthropicAI on the 23k vulnerabilities found by the Mythos cybersecurity model. About a quarter of these are rated high or critical. Just a hint as to where #AI is taking offensive security.

https://t.co/wefY7heWHY

[Steve Puluka @spuluka]

According to scans from @censysio over 12k MCP servers are exposed to the internet and offering access to internal information stores.

https://t.co/uxftMsW6yG

[Steve Puluka @spuluka]

Good news that the Dutch NCSC took down the control system for a 17 million member botnet operation using primarily small personal devices.

https://t.co/8yM2Pe2lMt

[Steve Puluka @spuluka]

Good news that @CrowdStrike, @Google and @Shadowserver Foundation have worked together to take down Glassworm botnet infrastructure that infected open source projects to spread.

https://t.co/HNMulXEJg1

[Steve Puluka @spuluka]

Germany has published a new framework to help companies create sovereign cloud with providers in the EU as alternatives to the US based giants.

https://t.co/8Ngt2eS1qp

[Steve Puluka @spuluka]

Thanks to @HPE_Networking , Melillo Consulting and Solutional for sponsoring so far.

Register to reserve your spot. Hope to see you there.
https://t.co/GR7yYbXLQY

[Steve Puluka @spuluka]

The @us_nua is coming to Pittsburgh! (PA)NUG PGH is a great vendor neutral forum for network engineering professionals to meet and chat.

The free Inaugural event will be July 23, 2026 at the Southside Hofbräuhaus.
https://t.co/GR7yYbXLQY

[Steve Puluka @spuluka]

New Hardened images are available from the @RedHat catalog that have both minimized container images and faster patching for CVE fixes.

https://t.co/Pu7wqE2Ui1

[Steve Puluka @spuluka]

The UK has plans to update legal protections for cyber security researchers so they will not face criminal or other legal problems while doing good faith cyber security research.

https://t.co/ck6pPGzG78

[Steve Puluka @spuluka]

Eight of the largest US Telcos have created a new Cybersecurity sharing partnership in C2ISAC to help secure and prevent state level intrusions.

https://t.co/dvqOa3ExpU

[Steve Puluka @spuluka]

Interesting overview from @Cloudflare on exactly how they used the @AnthropicAI Mythos #AI model to find and exploit software vulnerabilities in their systems.

https://t.co/KLDdCTB4H9

[Steve Puluka @spuluka]

Interesting deep dive on the @Apple MacOS CVE-2026-28910 patched last month that allowed full file system access.

https://t.co/eMrvF1d9aE

[Steve Puluka @spuluka]

Looks like SBOM is coming for #AI models as the G7 have prepared the first minimum draft requirements.

https://t.co/IK5DzN9mwN

[Steve Puluka @spuluka]

The UK is fining 1M£ the Staffordshire water authority for failing to detect a systems compromised and a data breach for two years.

https://t.co/CzDlM8zfci

[Steve Puluka @spuluka]

Good outline of @Google security features coming to @Android this year with a focus on intrusion logging to provide forensic data for detection and response.

https://t.co/PanVwEM2Rz

[Steve Puluka @spuluka]

A proposed new security feature in @Linux will allow admins to disable specific kernel functions that have been compromised until a patch arrives. An apparent response to recent copy fail and Dirty Frag bugs.

https://t.co/vFqvdwvupr

[Steve Puluka @spuluka]

Interesting deep drive from @Google on how adversaries are using free #AI accounts and bypassing safeguards for their malicious efforts.

https://t.co/Asw6MW7JH8