YHj

CSO, CISSP, Cybersecurity, Technology Innovation, Legal Tech, Business General, Tweets are my own

[piyokango @piyokango]

昨日注意喚起のあった気象庁なりすましメール、文中URL（everfree-inc[.]php）のリダイレクト先は日本郵政グループのJP共済生協サイトの模様（www.postlife.or[.]jp）

リダイレクト後にこのサイトから（今も）「JMA_Weather_Apps.iso」が落ちてくるためここも侵害されている可能性

[YHj @yoshi_hojo]

Yup. I actually chuckled.

[piyokango @piyokango]

【独自】政府系企業の顧問が51億円落札を指南　提案書も代筆か - FNNプライムオンライン https://t.co/JepZe4Nsyq #FNN

[@mikko @mikko]

AIG (one of the largest insurance companies in the world) lists the reasons why companies issue claims for cyber insurance policies. https://t.co/furr28LuR2 /via @japi999

[YHj @yoshi_hojo]

採用したい側としても学ぶべき事多し。
このような方をうちでも採用したいものです…
技術系セキュリティ関連職全般を対象にお仕事探されている方、いつでもDMください。

[briankrebs @briankrebs]

Major #breach found in #biometrics system used by banks, UK police and defense firms https://t.co/269QCCckuS Instead of saving a hash of the fingerprint, they reportedly stored the actual fingerprint. Biometrics firms should be held to a higher standard, IMHO. c/o @joshgnosis

[The Register @TheRegister]

WTF is Boeing on? Not just customer databases lying around on the web. 787 jetliner code, too, security bugs and al… https://t.co/WD2YahFL6o

[YHj @yoshi_hojo]

何を準備段階と言うかだけど、もうとっくに内側にいらっしゃるかと…

出遅れ感が凄すぎる。

[piyokango @piyokango]

スポンサー企業も対策急ぐ＝東京五輪のサイバー攻撃－専門家「既に準備段階」：時事ドットコムsoc https://t.co/pMom20DWDK via @jijicom

[YHj @yoshi_hojo]

@sec_trend 成人全員どころか、お亡くなりの方々のデータもね。
GDPR的にどう通知するんだと言う話も。

[YHj @yoshi_hojo]

Israeli company whose spyware hacked WhatsApp has told buyers its technology can surreptitiously scrape all of an individual’s data from the servers of Apple, Google, Facebook, Amazon and Microsoft...

https://t.co/3Dkx2KZXdb

[YHj @yoshi_hojo]

......

[Troy Hunt @troyhunt]

Yikes! “Since today all Internet providers in Kazakhstan started MITM on all encrypted HTTPS traffic. They asked end-users to install government-issued certificate authority on all devices in every browser.” https://t.co/jPMuAORBNt

[Vess @VessOnSecurity]

LOL. The arrested alleged hacker of the Bulgarian National Revenue Agency used to teach cybersecurity to the cybercrime department of the law enforcement organization for fighting organized crime - the department that arrested him.

I guess they were good students.

[YHj @yoshi_hojo]

Huge breach made by security researcher...

Security researcher arrested after data on every adult in Bulgaria hacked from government site https://t.co/tiuMgDyQJi via @gcluley

[The Hacker News @TheHackersNews]

New ➤ In a massive supply-chain attack, #Magecart credit-card hackers infected nearly 17,000 websites by modifying #JavaScript files hosted on hundreds of misconfigured #Amazon S3 Buckets.

Read: https://t.co/iVQNYYQA34

—by @Swati_THN

[piyokango @piyokango]

[PDF] 当社子会社における仮想通貨の不正流出に関するお知らせとお詫び(第一報)
株式会社リミックスポイント
2019年7月12日
https://t.co/jkXx02azZs

[YHj @yoshi_hojo]

It’s a huge amount compare to other cases like Facebook, Equifax, etc. but BA is not yet fined. It is still a Notice if Intent.

British Airways faces record £183m fine for data breach https://t.co/uLbbvVB3hc

[YHj @yoshi_hojo]

Iran Launches New Military Command And Control Unit To Withstand U.S. Cyberattack

U.S. to compromise Iran’s core command and control systems represented a material change to the battlefield dynamics...

https://t.co/94WgfqmpMF

[YHj @yoshi_hojo]

Pretty funny. Hard to imagine to see that one on iPhone n iPad.

[Jon Erlichman @JonErlichman]

First logos of Apple, Microsoft, Google & Netflix:

[Kenneth Geers @KennethGeers]

Israel recruiting hacker spies —>
From age 16
https://t.co/HRmwRZH3jf

[Law.com @lawdotcom]

Law firms—often tasked with ensuring their digital services are on the bleeding edge—are adjusting in the opposite direction in Philadelphia, where a “virus intrusion” last week led to a continuing shutdown of the website and electronic filing system https://t.co/lbO0kxqAce