Al Berg

Now at... @[email protected]

[Al Berg @alberg]

For those who would like to continue to see my security content as I will no longer be posting here... Follow me on LinkedIn: https://t.co/4IPgaci9jm

[Al Berg @alberg]

For those interested in my security related content, I will be continuing to post to LinkedIn.

[Al Berg @alberg]

Given the recent change in ownership at Twitter, I can’t in good conscience contribute further content and profit to something that I think will be a tool used to destroy what’s left of our democratic civil society. https://t.co/eAyI3O5lbt

[Al Berg @alberg]

If you are using OpenSSL's 3.x branch, pay very close attention to a critical patch which is set to drop on 11/1 - experts, including Bruce Schneier, warn that this vuln could be a big one... https://t.co/XPV9ZyG0vP

[Al Berg @alberg]

Attackers continue to up their game when it comes to building phishing lures - here's an attack that spoofs Google Translate in an effort to steal credentials from users. https://t.co/DvzumS6myc

[Al Berg @alberg]

LinkedIn really needs to step up and help firms address the scourge of fraudulent professional profiles which help scammers victimize individuals and attack organizations. https://t.co/GZJpK79Nra

[Al Berg @alberg]

An interesting attack vector targeting the security community - fake PoC exploit code on GitHub actually containing malware unrelated to the CVEs it claims to demonstrate... https://t.co/gmoEkAozQg

[Al Berg @alberg]

Yes, it is really important to train our colleagues to recognize phishing, but 2 hour workshops (with repeat 2 hour sessions as punishment for 'failing a phishing test' no less) are not the way to build security culture! https://t.co/4uw2nDjgar

[Al Berg @alberg]

Windows Mark of the Web Zero-Days Remain Patchless, Under Exploit https://t.co/FeoG3FgDUx

[Al Berg @alberg]

I have been seeing coverage of PayPal's new support of PassKeys all over the place for the past couple of days but cannot for the life of me figure out how to enable it - would be nice if PayPal made it easier to find in the UI... https://t.co/0ZdFgXEf7d

[Al Berg @alberg]

Hackers Actively Exploiting Cisco AnyConnect and GIGABYTE Drivers Vulnerabilities https://t.co/4jYAgWqGFn

[Al Berg @alberg]

What appears to be a major 5 year long leak of Microsoft customer data shows that even cloud providers have trouble avoiding misconfigurations leading to data breaches. And critics are not happy with Microsoft's disclosure of the "issue." https://t.co/sluz7hT7Rn

[Al Berg @alberg]

An amazing Twitter thread on a data preservation project that has been successful for hundreds of years... using wooden block technology https://t.co/Vr5HWH4tJ9

[Al Berg @alberg]

The cops join the other 32 people in the metaverse... https://t.co/1MvSjWvyde

[Al Berg @alberg]

PayPal users can now opt to use PassKeys rather than passwords to log in to the popular payments service. Is this the start of a quick death for passwords? Time will tell. https://t.co/0ZdFgXEf7d

[Al Berg @alberg]

Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero-Day Vulnerability https://t.co/mVbd5U7q6i

[Al Berg @alberg]

Dollars to Megabits, You May Be Paying 400 Times As Much As Your Neighbor for Internet Service – The Markup https://t.co/kBiwVvnEW5

[Al Berg @alberg]

Hackers Started Exploiting Critical "Text4Shell" Apache Commons Text Vulnerability https://t.co/vPCjc0HEwC

[Al Berg @alberg]

A new quantum network in Brooklyn opens the door to an untappable internet https://t.co/WGQUL30VXo

[Al Berg @alberg]

Ok… maybe the boss parenting move of the decade… watching Medea at Met Opera Live HD performance. With your kids. Can’t make this stuff up… Hope those kids are well behaved!