Lightnews — Scholar-powered news

CyberSecSac & DC916 @cybersec916.com · 5d

Learning about lockpicking this month thanks to our member Artefact doing a presentation on @deviantollam.bsky.social ‘s work! 🥰🙌🔒🔐

2

CyberSecSac & DC916 @cybersec916.com · 12d

Another day, another reported intrusion of the US government.

www.nextgov.com/cybersecurit...

‘Widespread’ breach let hackers steal employee data from FEMA and CBP

A Citrix vulnerability — suspected to have led to firings of multiple FEMA technology staff — enabled the breach, which let hackers pilfer data from FEMA servers connected to states at the southern bo...

www.nextgov.com

1

CyberSecSac & DC916 @cybersec916.com · 22d

Enjoy pancakescon!

pancakescon.com/2025-confere...

2025 Conference Information

PancakesCon 6 stream links are as follows, and ComfyCon will be cross-streamed for the 8 hours prior to the conference on Track 1: Recordings of talks are available on our YouTube, starting approxi…

pancakescon.com

1

CyberSecSac & DC916 @cybersec916.com · 28d

Incident reporting in an hour or less or the next one’s free 🍕

thecyberexpress.com/china-cybers...

China Imposes One-Hour Reporting Rule for Major Cybersecurity Incidents

China is ramping up its cybersecurity enforcement with new regulations requiring network operators to report severe cybersecurity incidents within one

thecyberexpress.com

CyberSecSac & DC916 @cybersec916.com · Sep 13

www.cybersecuritydive.com/news/cisa-pl...

CVE's live? 🙌

CISA pledges robust support for funding, further development of CVE program

A key official from the agency said the vulnerability management program will continue with additional participation and enhancements.

www.cybersecuritydive.com

CyberSecSac & DC916 @cybersec916.com · Sep 11

The slides for this month’s presentation and @zoe-j.bsky.social ‘s book report are up on the Discord and will be up on GitHub shortly.

This months news covered NPM, AI slop, GayFemboy malware and more!

We also had a presentation on the Red Team Operations Handbook!

CyberSecSac & DC916 @cybersec916.com · Sep 11

That’s a wrap on the DC916 September meeting! Thank you to everyone who contributed articles, to discussions, for pizza, and for amazing community!

1

CyberSecSac & DC916 @cybersec916.com · Sep 10

While serving media from your Plex server is cool, please update your password and try not to serve malware from it. 👾

www.pcmag.com/news/plex-co...

Plex Confirms Data Breach, Asks Users to Reset Passwords Immediately

An unauthorized third-party accessed one of its customer databases, which included emails, usernames, hashed passwords, and authentication data, Plex says.

www.pcmag.com

CyberSecSac & DC916 @cybersec916.com · Sep 10

💜💜💜

three hamsters are sitting at a table with the words one of us

ALT: three hamsters are sitting at a table with the words one of us

media.tenor.com

1

Reposted by CyberSecSac & DC916

Edna (they/them) 🅅 @ednas.bsky.social · Sep 10

Officially official now, @blackbadgeraffle.bsky.social and I have launched DEF CON Group Orlando!
Thank you @alethe.bsky.social and DCG!!
We're on Discord welcoming new members and will have meetings starting soon! ✨
discord.gg/KyKYPBCv

a woman is laughing and saying it 's gonna be so fun !

ALT: a woman is laughing and saying it 's gonna be so fun !

media.tenor.com

3 4 6

CyberSecSac & DC916 @cybersec916.com · Sep 10

www.securityalliance.org/news/2025-09...

Thanks to @djcapy.com for this one. (also, lol at them only getting 5 cents) 😂🔥

Oops, No Victims: The Largest Supply Chain Attack Stole 5 Cents

The biggest financial impact expected to be the millions of dollars of SaaS contracts signed with security vendors

www.securityalliance.org

1

CyberSecSac & DC916 @cybersec916.com · Sep 9

Largest supply chain breach ever (so far?) 😭

www.aikido.dev/blog/npm-deb...

Thanks to DC916 member Slag1sh for the link! 💜

npm debug and chalk packages compromised

www.aikido.dev

1

CyberSecSac & DC916 @cybersec916.com · Aug 19

NIST rolling out initial AI cybersecurity papers/standards.

hackread.com/nist-concept...

New NIST Concept Paper Outlines AI-Specific Cybersecurity Framework

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

hackread.com

CyberSecSac & DC916 @cybersec916.com · Aug 13

Looking forward to seeing your faces at the DC916 meeting tonight! Virtual and in person at MADE Studio!

7pm-8:30pm PST!

Dc916.com for the address/Discord!
Hack the planet!

CyberSecSac & DC916 @cybersec916.com · Aug 9

Hope everyone is having a safe and happy DEF CON! 💜

CyberSecSac & DC916 @cybersec916.com · Jul 28

Hello friends, with less than 2 weeks to go until DEF CON 33, please enjoy our “Attending DEF CON Guide” (great for newbies/first timers)

github.com/CyberSecSacr...

1 2

CyberSecSac & DC916 @cybersec916.com · Jul 16

When AI and fast food goes wrong. 😑 🍟

www.wired.com/story/mcdona...

McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’

Basic security flaws left the personal info of tens of millions of McDonald’s job-seekers vulnerable on the “McHire” site built by AI software firm Paradox.ai.

www.wired.com

2

CyberSecSac & DC916 @cybersec916.com · Jul 15

Regular reminder to go outside and touch grass sometimes

2

CyberSecSac & DC916 @cybersec916.com · Jul 15

Planes, trains, and cybersecurity, oh my! 🚊

www.cybersecuritydive.com/news/railroa...

Major railroad-signaling vulnerability could lead to train disruptions

The high-severity flaw could let a hacker abruptly halt — and potentially derail — a train.

www.cybersecuritydive.com

3

Reposted by CyberSecSac & DC916

DCG 201 @dcg201.bsky.social · Jul 12

The @summerc0n.bsky.social vibes right now:

#hackers #lucky13saloon

1 2

Reposted by CyberSecSac & DC916

Tanya Janca | SheHacksPurple @shehackspurple.bsky.social · Jul 12

🎥 Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Building Security Champions”
📽️ https://twp.ai/9PTkef

#CyberSecurity #SecurityAwareness #appsec #securitychampions

youtu.be

Diana Initiative 2021-Tanya Janca-Building Security Champions

twp.ai

1 2

CyberSecSac & DC916 @cybersec916.com · Jul 12

Earn up to $300k to help a cursed owl yell at people!

1

CyberSecSac & DC916 @cybersec916.com · Jul 12

[MEETING REMINDER]
❔What: Monthly Meeting - August

🕖 When: Wednesday, August 13th @ 7PM - 8:30PM+

📍Where: Hybrid - Join virtually on Discord or come to the Sacramento Hacker Lab / MADE Studio!
[details in Discord]

👾Join our Discord by checking our landing page for the link: dc916.com

Cybersecurity Sacramento (DC916)

A DEF CON group for hackers, makers, tinkerers and security enthusiasts in the Sacramento area.

dc916.com

CyberSecSac & DC916 @cybersec916.com · Jul 11

nvd.nist.gov/vuln/detail/...

NVD - CVE-2025-6514

nvd.nist.gov

CyberSecSac & DC916 @cybersec916.com · Jul 11

When a 9.6 MCP exploit drops impacting hundreds of thousands 😭

thehackernews.com/2025/07/crit...

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

A critical vulnerability in mcp-remote (CVE-2025-6514) allows remote code execution, affecting 437,000+ users.

thehackernews.com

1 1