Social Media Security

We focus on posting you tips & guides to keep you #staysecure across #socialmedia networks. Follow: @SocMeSec #security #StaySafeOnline

[OccupytheWeb @three_cube]

Never trust Microsoft!

They have violated your trust over and over again.

[Social Media Security @SocMeSec]

Good evening everyone.
Hope those of you in Jamaica are staying safe tonight. #Melissa

[Social Media Security @SocMeSec]

Can everyone hurry up & make these ‘Rated’ then, PRETTY PLEASE WITH CHERRIES ON TOP !

[Growth Labs @growthhub_]

Bookmark for later.

[Social Media Security @SocMeSec]

[SOCMESEC]: Catch up with our new security content, The Impact Of AI On Your Privacy https://t.co/sCgfFeYw1k

[Social Media Security @SocMeSec]

[SOCMESEC] Updated Post: Does Your Business Have a Family Digital Safety Policy ? https://t.co/Iptn485bD8

[Social Media Security @SocMeSec]

[SOCMESEC] Updated Post: Whats Wrong With My Old Smartphone ? https://t.co/kxdwsWxRsT

[vx-underground @vxunderground]

A few days ago Fortune magazine did an article about Ferrari disclosing an attempted cybersecurity breach via social engineering.

tl;dr social engineering using ai / deepfake voice

Sometime earlier this month (July, 2024) a Ferrari executive began receiving unusual text messages from an individual impersonating Ferrari Chief Executive Officer Benedetto Vigna.

Interesting, the impersonator called the (unidentified, target's name was not disclosed publicly) executive. The caller is suspected to have used AI and/or deepfake technology to mimick Benedetto Vigna. The unidentified executive stated the tone, the language, and the accent were perfect. However, some of the language seemed unusual. The executive then asked the impersonator: "Sorry, Benedetto, but I need to identify you. What was the title of the book you had just recommended to me a few days earlier?"

The individual, unable to answer the question, terminated the phone call.

This is one of the first major, and publicly disclosed, social engineering attempts via AI / deepfake technology that we're aware of. The Threat landscape is slowly shifting (as is tradition).

[ESET Research @ESETresearch]

ESETresearch discovered a zero-day exploit of #Telegram for Android allowing attackers to share malicious payloads that appear as video files via chat. We named the vulnerability being exploited #EvilVideo. https://t.co/3tWy5ae7rX @lukasstefanko 1/4

[Social Media Security @SocMeSec]

@Westy447 @UK_Daniel_Card Bingo

[Social Media Security @SocMeSec]

@troyhunt haveibeenblown ?

[Gi7w0rm @Gi7w0rm]

Nice, #Tencent basically installed a #keylogger on 450 million user devices..
Seems like text typed and application it is typed into is send to them. And they even used bad encryption to protect it, which is imo only a secondary flaw to this absolutely insane privacy breach...

[Kim Zetter @KimZetter]

Oh my. Kevin Mitnick has died. "Kevin David Mitnick, 59, died peacefully on Sunday, July 16, 2023, after valiantly battling pancreatic cancer for more than a year." https://t.co/62sqY7vxrQ

[Social Media Security @SocMeSec]

@GossiTheDog We can’t (shouldn’t) really be surprised at the lack of transparency should we.

[Social Media Security @SocMeSec]

LastPass finally admits: Those crooks who got in? They did steal your password vaults, after all…

https://t.co/PNbWumI72h

[Matthew Green @matthew_d_green]

Why Apple’s announcements today are a big deal, a thread. 1/

[Joe Stocker @ITguySoCal]

New Microsoft Feature: "forensic evidence capturing"
included in Microsoft Insider Risk Management:

"This includes mouse movement, keystrokes, and all activities defined by insider risk indicators."
👀
Documentation: https://t.co/Koz8u1dL5h

[Social Media Security @SocMeSec]

Elon Musk Provides A Glimpse Of The Do Everything Future Of Twitter https://t.co/Vlo0idm6Wh

[Social Media Security @SocMeSec]

Irish watchdog fines Meta 265M euros in latest privacy case https://t.co/W5nJgcO6xC

[Social Media Security @SocMeSec]

A hacking-for-hire group is distributing malicious Android apps through a fake SecureVPN website enabling downloads from Google Play,

Researchers discovered eight versions of the spyware using Trojanized versions of legit apps, SoftVPN and OpenVPN.
https://t.co/UJFTrRqy46