Superfresh

WA | InfoSec | Boxer | Cyber Security Professional | Mexican 🇲🇽 |

[Anthony James van Atten @AnthonyvanAtten]

almost forgot i put this out with @elsuperfresh https://t.co/40bn8DlsGy

[Superfresh @elsuperfresh]

Apple just dropped some critical security updates to address vulnerabilities across multiple devices and systems. And trust me, these aren’t the “I’ll update later” kind of updates—these are apply-now-or-risk-getting-owned kind of updates.

Here’s the situation:
If these vulnerabilities get exploited, attackers could gain control of your device. I’m talking about arbitrary code execution, bypassing security protections, and stealing sensitive data. Not good.

What’s Affected?
Here’s the quick breakdown—check if your devices are on this list and get those updates rolling:

Safari 18.2: macOS Ventura & Sonoma
iOS 18.2 & iPadOS 18.2: iPhone XS and later, modern iPads (3rd+ generation Air, 5th+ mini)
macOS Sequoia 15.2, Sonoma 14.7.2, & Ventura 13.7.2
watchOS 11.2: Apple Watch Series 6 and later
tvOS 18.2: All Apple TV HD and 4K models
visionOS 2.2: For Apple Vision Pro
iPadOS 17.7.3: For devices running iPadOS 17

Why Does This Matter?
Some of the vulnerabilities patched include:
🔹 Kernel flaws: Allowing attackers to bypass memory protections.
🔹 WebKit issues: Processing malicious content could lead to code execution (just visiting a bad link = big trouble).
🔹 AppleMobileFileIntegrity bugs: Malicious apps bypassing safeguards to snoop on your data.
🔹 libexpat (CVE-2024-45490): Could let remote attackers crash apps or run arbitrary code.

What You Should Do Right Now:
1. Update Everything: Go to Settings → General → Software Update and get those patches installed.
2. Double-Check: Once updated, verify your device is running the latest version.
3. Stay Vigilant: Keep an eye on Apple’s security updates page for any new info.

This isn’t just about protecting yourself—it’s about protecting your family, business, and digital life. These updates close doors that attackers love to pry open. So don’t hit snooze on this one.

How often do you check for updates?

[Superfresh @elsuperfresh]

Wow, this one hits close to home for anyone in the music industry.

Big Beat Records, the iconic label under Atlantic, recently got hacked. How? Someone managed to break into their https://t.co/muZFPMPvEd account—a treasure trove of unreleased music AND sensitive personal documents like musicians’ passports. Yeah, you read that right—passports.

From what’s being speculated, it sounds like the breach was due to reused passwords from another data breach. Classic case of “it won’t happen to us” until it does.

This is a wake-up call for all industries, but especially for those working with creative content and sensitive data. Here are some simple takeaways for anyone who doesn’t want to end up in this situation:

1.Stop Reusing Passwords! Seriously, it’s 2024—password managers are your best friend.

2.Enable Multi-Factor Authentication (MFA): If you don’t have MFA on your accounts, you’re basically leaving the door wide open.

3.Audit Your Data Storage: Know what’s stored in your accounts and think twice about where sensitive personal information lives.

Breaches like this aren’t just about losing content—it’s about losing trust. For a label, trust is everything: with artists, with partners, and with fans. Let’s use this as a reminder to tighten up our digital hygiene. It’s not just about security—it’s about protecting what matters most.

What steps are you taking to make sure your company avoids something like this? Let’s discuss. 👇

[Superfresh @elsuperfresh]

Just wanted to share some insights on the recent data breaches at Amazon and HSBC, both linked to the MOVEit vulnerability—a security flaw that's been making waves lately.

Amazon's Situation: Amazon recently confirmed that approximately 2.8 million lines of employee data were exposed due to the MOVEit vulnerability. This incident highlights the importance of robust security measures. 
- Lars Daniel, FORBES

HSBC's Experience: Similarly, HSBC faced a breach where employee data was compromised through the same vulnerability. This serves as a reminder that even major institutions aren't immune to such threats. 
- Sergiu Gatlan, BLEEPINGCOMPUTER

Lessons Learned: These incidents underscore the need for proactive cybersecurity practices. Regularly updating software, conducting thorough security assessments, and educating employees about potential threats are crucial steps in safeguarding sensitive information.

Stay vigilant and keep your data safe!

#CyberAwareness #MOVEit #malware

[Superfresh @elsuperfresh]

A few weeks ago, I got a notification from my MFA app—someone was trying to log into one of my personal email accounts. I knew it wasn’t me, so I quickly denied the access. After that, I took a few extra steps like changing my password to stay safe. It was a good reminder of why MFA is so important, so I thought I’d share a few thoughts on the topic today.

We’ve all heard the grumbles when MFA gets rolled out: “Why do I need this?” or “Isn’t my password enough?” But the reality is, MFA is one of the best ways to keep cyber threats at bay.

So, how can we help users understand the value of MFA and get them on board?

Here’s the trick:

1️ Explain the Why – It’s not just about following rules. Passwords get stolen all the time—MFA is that extra shield that keeps your account safe, even if your password slips out.

2️ Share Real Stories – People get it when you show them how MFA stopped a potential breach or what happened when it wasn’t in place. Real-world examples hit home!

3️ Make It Easy – No one likes complicated setups. Break it down with simple guides, and be ready to help out when they get stuck. The easier it is, the quicker they’ll warm up to it.

4️ Highlight the Perks – Remind them it’s not just about protecting company data; it’s about their own info, too. MFA keeps both work and personal accounts more secure.

Bottom line: MFA is a small step that makes a big difference. Let’s make staying secure a little less stressful—and a lot more effective!

#CyberSecurity #MFA #StaySafeOnline #InfoSec #EasySecurity

[Superfresh @elsuperfresh]

Happy birthday!

[U.S. Marines @USMC]

Happy Birthday, Marines!

Today, we celebrate 249 years of unmatched courage, unwavering dedication, and a legacy of service that has shaped our nation’s history.

[Elon Musk @elonmusk]

News should come from the people.

From those actually on the scene and those who actually are subject-matter experts!

[Elon Musk @elonmusk]

You are the media now

[Elon Musk @elonmusk]

Game, set and match

[Superfresh @elsuperfresh]

Great interview 👊🏽🔥

[Joe Rogan @joerogan]

The great and powerful @elonmusk.
If it wasn't for him we'd be fucked. He makes what I think is the most compelling case for Trump you'll hear, and I agree with him every step of the way.
For the record, yes, that's an endorsement of Trump.
Enjoy the podcast

[Superfresh @elsuperfresh]

Persistence without insight will only lead to the same outcomes.

[Superfresh @elsuperfresh]

Can you fix it? No. Then don't worry. Can you fix it? Yes. Then don't worry.

[Superfresh @elsuperfresh]

If you don't routinely push to find your limits, those limits will come and find you.

[Stirling Cooper @StirlingWisdom]

What kind of man has a celebrity crush?

I understand women having one, social proof is attractive to women.

But a full grown man crushing on a female celebrity?

Sounds sus to me.

[Superfresh @elsuperfresh]

Get off autopilot.

Show up.

[Superfresh @elsuperfresh]

When you meet stress with practical resolve instead of emotional reaction, you turn every moment into a stepping stone towards success.

[Superfresh @elsuperfresh]

@iiamtonyy Common sense is not that common sometimes lol

[Superfresh @elsuperfresh]

Starting a business often brings a haunting feeling of 'not enough'.

Don't fight it; harness it. Instead of letting it break you, let it drive you.

Use that energy task by task, day by day, and turn that doubt into determination.

😮‍💨😮‍💨

[Superfresh @elsuperfresh]

@GEEZUZMUSIC Get it!!