Bryce Austin

#CIO #CISO. CEO of TCE Strategy. Technology and #cybersecurity advisor. Professional speaker and #author of "Secure Enough? 20 Questions on Cybersecurity".

[Bryce Austin @brycea]

"'It does not appear that a customer can buy a new car that does not track you.' To find out what kind of driver data was being collected, and by what companies, the team of privacy researchers from Northeastern University tested 21 vehicles and..." https://t.co/QP36I7nrna

[Bryce Austin @brycea]

This is genuinely a big deal. Patch PHP on your website NOW. Like, right now. Immediately. https://t.co/37G6yxNCVm

[Bryce Austin @brycea]

This is another very novel attack vector. CAPTCHA screen that trick you into installing malware. Yikes... https://t.co/PsPiChToSz

[Bryce Austin @brycea]

AI was caught submitting tips on a murder case. This is not good. "One [Anthropic AI] agent submitted a tip to the Philadelphia Police Department about an unsolved homicide despite having no information about the case." https://t.co/2sCdghgJ6D

[Bryce Austin @brycea]

Warning, WSJ paywall: The case highlights a harsh reality for the growing number of Americans left financially devastated by scammers: Even when the government is able to seize stolen crypto, with no clear standards around who gets what, the recovery..." https://t.co/nWheqad3NP

[Bryce Austin @brycea]

Warning, WSJ paywall: “There’s more money being stolen with that phone than there’s ever been with a gun.” https://t.co/YfOyY7Lymr

[Bryce Austin @brycea]

1400 vulns addressed one actively exploited zero-day fixed. Patch early, patch often. https://t.co/O6ldQMXvUZ

[Bryce Austin @brycea]

"The complaint alleges that Reiber repeatedly asserted that the company traced its ownership to Cyprus when in fact Davydov and additional Russian nationals owned and controlled the company." https://t.co/Tb7tvYWOVu

[Bryce Austin @brycea]

"The data breach is thought to be the biggest in the country’s history. It follows similar cyberattacks targeting government national identity databases, including a 2016 breach affecting millions of Turkish citizens and several exposures of..." https://t.co/asmRnBdFHm

[Bryce Austin @brycea]

"This hacking operation, dubbed QTFY by U.S. officials, has been run since 2018 by a private company based in China, called Nanjing Xinjiuwei Network Technology, which sells access to hacked networks and stolen information to..." Warning, WSJ paywall. https://t.co/09u7b15KrO

[Bryce Austin @brycea]

It had never occurred to me to use a defrost cycle to attack the food supply. Apparently it did for these cybercriminals. https://t.co/iDrb4QsVye

[Bryce Austin @brycea]

"When their targets refused to send them money, they coerced them into making the payments using various manipulation tactics, including threats of publishing sensitive photos of the victim online." https://t.co/uBW9h3Fr29

[Bryce Austin @brycea]

"To their surprise, these tokens were valid on ChatGPT, and some of them belonged to OpenAI employees. The tokens could also be used to access OpenAI’s GitHub service, a software repository." https://t.co/cqm3Ps24Tr

[Bryce Austin @brycea]

Want to know more about the inner workings of a Flock camera? Here is a very interesting look by unknown hackers and WIRED on the inner workings of the cameras. https://t.co/KuAnLTNPr5

[Bryce Austin @brycea]

"On a macOS browser, your-domain[.]com showed a fake "MacOS Security Center" claiming 4 viruses & selling a counterfeit McAfee renewal at 55% off. On another macOS render, yoursite[.]com showed a counterfeit ZDF article advertising an investment scheme." https://t.co/QiWq4vcEVs

[Bryce Austin @brycea]

"In our test tenant, every sign-in completed normally while our server received passwords with timestamps and source IP addresses. Resetting a captured password did not remove the rogue provider. It remained in the authentication flow and captured the..." https://t.co/uEGXycAVzg

[Bryce Austin @brycea]

"Using the stolen credentials and spoofed email addresses, the men redirected payments to and from victims into bank accounts they controlled. The men were stationed at Dover, Delaware Air Force base when they conducted the scams." https://t.co/S8XNwgn0bU

[Bryce Austin @brycea]

"Cryptographers have worked furiously in recent years to devise alternative cryptosystems that aren’t vulnerable to quantum computing attacks. The new attack will further increase the urgency of completely moving away from the cryptosystem." https://t.co/zsN3QuGfoM

[Bryce Austin @brycea]

Glad to see a level of responsibility in this, but what's stopping other companies that care less about safety from publishing their questionable models? https://t.co/vo0fzVDQeI

[Bryce Austin @brycea]

This will be a landmark case, no question about it. Interesting that Hugging Face did not initiate it. https://t.co/Win34YxPrR