Recep

Free your mind

Cybersecurity, AI, and life.

[Recep @recepsec]

Never forget the 3 kinds of people in your life.
1- Those who help you in difficult times.
2- Those who left you in difficult times.
3- Those who put you in a difficult situation.

[Recep @recepsec]

If you are curious what happened in the tech world recently, check out the video!
https://t.co/78QK8iIp0H
#cybersecurity #ai #technology

[Recep @recepsec]

If you are curious what happened in the tech world recently, check out the video!
https://t.co/urvZ2ggmOn

[Recep @recepsec]

https://t.co/ZNGoKTU4QH

[Recep @recepsec]

We must read this book carefully in the era of AI: Asking the right questions 12th edition
Very important skill to have, not just for techical subjects

[Recep @recepsec]

• phone is locked/unlocked
• screen is on/off
• if WhatsApp is open
• WiFi/mobile data
• when you start a phone call
• what kind of phone
• which devices are online (phone, laptop, web)
• when you leave home, arrive at work, or switch networks

[Recep @recepsec]

When WhatsApp reveal your activity :)
But there is no fancy hacking things, just simply reacting to your message. Great paper from University of Vienna - SBA Research !
The attack needs no malware. The attacker only needs your phone number.

[Recep @recepsec]

When someone sends you a message, WhatsApp send back a delivery receipt. Researchers found a way to spam invisible reactions that trigger these receipts without showing any notification. By measuring the timing of these silent receipts, an attacker can learn:

[Recep @recepsec]

Your cheap gaming mouse from Amazon installs malware to steal your information??
You saw a huge deal in amazon, with a lot of reviews. (fake) So you buy the mouse and download the driver from the official site to get the best polling rate or settings. Then PC infected with RAT

[Recep @recepsec]

What to do:
Upgrade to Windows 11 if hardware allows.
Replace the device with a new PC that supports Windows 11.
Enroll in Extended Security Updates (ESU)
Join us in Linux! There are plenty of user-friendly options. Check out PopOS!, ZorinOS, or Ubuntu.

[Recep @recepsec]

Apple raised its bug bounty to $2 Million!
It might sound too much money but actually, it is not for these companies. Because when attackers discovers them, they can damage much higher or sell to governments etc. to damage the company in many other ways.

[Recep @recepsec]

Researchers found that a large fraction of GEO transponders were carrying unencrypted data. The paper is titled “Don’t Look Up.”
Examples of what they observed
• T-Mobile calls and texts
• Military and law enforcement links
• Industrial control and utility traffic.

[Recep @recepsec]

CamoLeak: Critical GitHub Copilot Chat flaw (CVSS 9.6) that could steal private code and secrets
CamoLeak lets an attacker place hidden instructions in a pull request.
Limit Copilot access to private repos. Grant least privilege.
Prompt injection will be a big issue, I guess

[Recep @recepsec]

Hidden surveillance firm First Wap used a tool called Altamides to track phones worldwide.
Altamides is a network-level surveillance system. It queries telecom infrastructure to learn which cell tower a phone uses, and can also intercept SMS or call setup data.

[Recep @recepsec]

I am always interested to see the impact of tech in our daily lives, education, and so on. We got an example from Australia: Two years after school smartphone bans and as a result calmer classrooms,  less distraction and better social interaction:
https://t.co/LS931SmIxW

[Recep @recepsec]

AI Crypto Trading - Alpha Arena: Deepseek takes the lead
Should I put money on AI to make some money? It shows that they make money but I think in long run, they will lose. Or when all learns about this and follow AI to trade, then it will drop again too :)))

[Recep @recepsec]

A non-critical system can control the critical one.
The Jeep Uconnect case shows how an entertainment unit gave remote access to vehicle controls. Lateral movement is real. Segment networks.
Non-critical functions must not share a bus with safety or control systems.

[Recep @recepsec]

I start my lectures each week with some news — to bridge what we study and what’s actually happening out there and staying current.
So previously in Breaking Bad, or Last week in the tech world — innovation, exploitation, and everything in between:

[Recep @recepsec]

>Most breaches start with weak/default passwords.
>Many industrial and #IoT protocols were built for trusted networks and lack modern security.
>IoT attacks can cause real physical harm or damage. What if your smart oven turned on and smoke detectors turned off?
#CyberSecurity

[Recep @recepsec]

Man ..

[0b1d1 @_0b1d1]

😂😛