Joseph Lykowski

SOC Life - InfoSec - My comments are mine, all mine... -=- Please Patch -=-

[Joseph Lykowski @JosephLykowski]

Why Credentials Are The Real Attack Surface https://t.co/jKMbuliYGh

[GitHub Projects Community @GithubProjects]

Versatile Thermostat is a Home Assistant integration that turns any heating system into an intelligent, self-learning thermostat with auto-TPI algorithms.

- Plugin mechanism for extending functionality via external integrations
- Stuck valve detection and root cause diagnosis for heating failure events
- Auto-relock after unlock with configurable timing
- Automatic command resend to correct discrepancies between desired and actual device states

Explore it here:
https://t.co/M7Oyqpzb5A

[Joseph Lykowski @JosephLykowski]

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities https://t.co/5fYCTONFjQ

[Joseph Lykowski @JosephLykowski]

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication https://t.co/QOF0tWM8pE

[Joseph Lykowski @JosephLykowski]

Rethinking MDR as Attackers and Defenders Embrace AI https://t.co/RBcMkv8CPD

[Joseph Lykowski @JosephLykowski]

Cybercriminals are moving away from mass phishing campaigns - Help Net Security https://t.co/WfTAu90cL6

[Joseph Lykowski @JosephLykowski]

Why are we always fixing Michigan roads? https://t.co/gI9RqhepeQ

[Joseph Lykowski @JosephLykowski]

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade https://t.co/zhYMRbhe6x

[Joseph Lykowski @JosephLykowski]

Wind turbines were promised as clean, quiet and almost maintenance free, but high in the sky, where almost no one ever looks, a hidden issue was quietly spreading https://t.co/GxTkEzySEB

[Joseph Lykowski @JosephLykowski]

U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals https://t.co/iyuPSCp2ia

[Joseph Lykowski @JosephLykowski]

CISA directive orders agencies to prioritize vulnerability patching in a new way | CyberScoop https://t.co/LFTdqwi932

[Joseph Lykowski @JosephLykowski]

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows https://t.co/uPjGCJDEeg

[Joseph Lykowski @JosephLykowski]

Your expensive gigabit internet plan may already be crippled by outdated Wi-Fi hardware sitting inside your home | TechRadar https://t.co/AGu57Fopjr

[Joseph Lykowski @JosephLykowski]

Your expensive gigabit internet plan may already be crippled by outdated Wi-Fi hardware sitting inside your home | TechRadar https://t.co/AGu57FoX8Z

[The Hacker News @TheHackersNews]

🔥 An AI worm used a local open-weight LLM to find targets, choose attack paths, and copy itself.

> No human help.
> No OpenAI or #Anthropic API.
> No API key to shut off.

In 7 days, it replicated to 62% of a 33-host test network.
It also used fresh CVE advisories to find new attack paths.

Read full story: https://t.co/NVZZjUGZXF

[BleepingComputer @BleepinComputer]

🚨 Microsoft’s June 2026 Patch Tuesday fixes 200 flaws, including 3 publicly disclosed zero-days affecting Windows privilege escalation, HTTP.sys, and BitLocker.

⚫️33 flaws are rated Critical, including 28 RCE bugs.
⚫️Microsoft patched the new “HTTP/2 Bomb” DoS attack targeting HTTP.sys.
⚫️The BitLocker bypass dubbed YellowKey that allowed access to encrypted drives was also patched.

Read our full report: https://t.co/Vo4ygyOIt8

[BleepingComputer @BleepinComputer]

ServiceNow discloses security incident exposing customer data
https://t.co/sJNbfTKCUe

https://t.co/sJNbfTKCUe

[Joseph Lykowski @JosephLykowski]

Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws https://t.co/zIK5nWu8Ql

[Joseph Lykowski @JosephLykowski]

How a USB-connected speaker can infect a PC without ever being touched - Ars Technica https://t.co/l3Dzj77CbL

[Joseph Lykowski @JosephLykowski]

Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows - Help Net Security https://t.co/UMOoXBV45G