Chirantha Alahakoon

Exploring tech’s potential, crafting secure solutions, and sparking innovation. Always curious, always learning

[Chirantha Alahakoon @ChiranthaYasith]

This is scary; lol ;)

[IT Guy @T3chFalcon]

Google is building a feature called "Audio Memory" for Pixel phones.

What it does: runs as a permanent background service that listens to everything around your phone. Music and "important conversations" all day, every day.

What Google says: all processing stays on-device. Nothing goes to their servers.

What Google hasn't said:
→ How long is audio or transcripts stored on your device?
→ Is this opt-in or on by default?
→ Can any of it sync to Google services later?
→ What happens if police seize your phone?

It hasn't shipped yet, but it was found hidden in Pixel 10 code. But it's coming.

Your phone already knows where you go, what you search, and who you message. Soon it may also remember every conversation you have near it.

[Telegram Messenger @telegram]

@WhatsApp stuff that happened in 2014
» this meme
» iPhone 6
» usernames on Telegram

[Chirantha Alahakoon @ChiranthaYasith]

Browser extensions are a supply-chain risk, not just a convenience layer: Microsoft removed 119 Edge extensions tied to malware hidden in images/fonts. Tip: inventory add-ons, restrict installs, and review extension permissions like you would third-party code. #CISO #GRC

[Chirantha Alahakoon @ChiranthaYasith]

Credential exposure is a major risk for 2026. CISA's latest update on Fortinet devices serves as a stark reminder: enforce MFA, audit logs, and move to PBKDF2 now. Don't wait for a breach to secure your gateway. #InfoSec #CyberAlert"

[Chirantha Alahakoon @ChiranthaYasith]

@james84_ Hello 🙊

[Chirantha Alahakoon @ChiranthaYasith]

he 'months not years' timeline for AI-driven offensive cyber capabilities is here. The Five Eyes alert on frontier AI transformation means defensive strategies must evolve faster. Are you ready? #AI #CyberDefense #InfoSec

[Chirantha Alahakoon @ChiranthaYasith]

Are you leading like a Watchmaker or a Gardener?
⚙️ Watchmaker:
Builds systems that depend on them.
🌱 Gardener:
Builds teams and environments that thrive without them.
The question isn’t who works harder.
It’s who builds something that lasts.
#CyberSecurity #Leadership #CISO

[Chirantha Alahakoon @ChiranthaYasith]

@business All good… but are you ready for post quantum cryptography⁉️ if you are not good with #Crypto agility, then you are in big RISK

[Chirantha Alahakoon @ChiranthaYasith]

Everyone is talking about quantum computing.

I’m thinking about organizational readiness.

PQC checklist:
✔️ Crypto Inventory
✔️ Crypto Agility
✔️ TPRM
✔️ Policies & Standards
✔️ Risk Assessments
#QuantumGlobalMarkets #cryptography #postquantumcryptography

[Bloomberg @business]

Quantum computers are already fulfilling tasks that would confound a conventional computer. Here's how they work, and who is leading the field https://t.co/7YJbmmJdhI

[Chirantha Alahakoon @ChiranthaYasith]

@SecurityTrybe I don’t see a camera. I see an information disclosure issue. The most valuable thing in this photo isn’t the lens, it’s the metadata someone decided to print on it.

[Chirantha Alahakoon @ChiranthaYasith]

@sec_hub93028 Human 😀… Every security tool is just an extension of human judgment 🙊

[Chirantha Alahakoon @ChiranthaYasith]

AI coding agents can be tricked into running malware from a clean-looking GitHub repo. Tip: don’t let assistants trust unknown repos by default, sandbox builds, restrict egress, and require human review before any clone/setup/exec. #CISO #GRC #CyberSecurity

[Chirantha Alahakoon @ChiranthaYasith]

Phishing no longer stops at the login page. If attackers can steal backup/recovery keys, they can restore history and take over accounts. Review MFA, recovery workflows, and vendor support paths—not just passwords. #CISO #GRC #CyberSecurity

[Chirantha Alahakoon @ChiranthaYasith]

Credential exposure is a major risk for 2026. CISA's latest update on Fortinet devices serves as a stark reminder: enforce MFA, audit logs, and move to PBKDF2 now. Don't wait for a breach to secure your gateway. #InfoSec #CyberAlert

[Chirantha Alahakoon @ChiranthaYasith]

FBI: End-of-life routers hacked for cybercrime proxy networks https://t.co/JDVMU3QSiR

[Chirantha Alahakoon @ChiranthaYasith]

Critical Langflow Flaw Added to CISA KEV List Amid Ongoing Exploitation Evidence https://t.co/2mVU7RlCjf

[Chirantha Alahakoon @ChiranthaYasith]

Sam Altman and Elon Musk are racing to build an ‘everything app’ | The Verge https://t.co/58X4tlpnFx

[Chirantha Alahakoon @ChiranthaYasith]

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware https://t.co/Im9LUTTfZk

[Chirantha Alahakoon @ChiranthaYasith]

TikTok Slammed With €530 Million GDPR Fine for Sending E.U. Data to China https://t.co/8QDbqEQf2a via @TheHackersNews

[Chirantha Alahakoon @ChiranthaYasith]

Canadian Electric Utility Hit by Cyberattack - https://t.co/PnZ6DjU7Ln