Illusion of Security
LightNews LightNews
banner
illofsec.bsky.social
Illusion of Security
@illofsec.bsky.social
25 followers 35 following 38 posts
Decipher the Cyber World
Posts Replies Media Videos
Pinned
illofsec.bsky.social
Illusion of Security @illofsec.bsky.social · Aug 31
Do you think these Big Tech companies actually care about our personal information?
a person is holding a red pill and a blue pill in their hands and says what if i told you .
ALT: a person is holding a red pill and a blue pill in their hands and says what if i told you .
media.tenor.com
illofsec.bsky.social
Your Brain on ChatGPT:
arxiv.org/pdf/2506.08872
November 11, 2025 at 4:03 AM
illofsec.bsky.social
ChatGPT Atlas Browser Exploit
thehackernews.com/2025/10/new-...
New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands
Researchers uncover a CSRF flaw in ChatGPT Atlas letting attackers inject persistent malicious code.
thehackernews.com
October 28, 2025 at 2:41 AM
illofsec.bsky.social
Passwords vs. Passphrases
thehackernews.com/2025/10/why-...
Why You Should Swap Passwords for Passphrases
Passphrases boost security and usability by prioritizing length over complexity, aligning with NIST guidance.
thehackernews.com
October 24, 2025 at 2:40 AM
illofsec.bsky.social
NSO Group blocked on Whatsapp techcrunch.com/2025/10/18/s...
Spyware maker NSO Group blocked from WhatsApp | TechCrunch
A federal judge has granted Meta-owned WhatsApp’s request for a permanent injunction blocking Israeli cyberintelligence company NSO Group from targeting the messaging app’s users. At the same time, th...
techcrunch.com
October 21, 2025 at 3:33 AM
illofsec.bsky.social
Malware Infected Wordpress Websites
thehackernews.com/2025/10/hack...
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites
UNC5142 exploits blockchain smart contracts and WordPress flaws to deliver stealer malware worldwide.
thehackernews.com
October 16, 2025 at 11:46 PM
illofsec.bsky.social
Satellites unencrypted data exposed
techcrunch.com/2025/10/14/s...
Satellites found exposing unencrypted data, including phone calls and some military comms | TechCrunch
Researchers spent the past year alerting affected organizations, including T-Mobile and AT&T, but warn that large amounts of satellite data will remain unencrypted and exposed for some years to come.
techcrunch.com
October 15, 2025 at 2:50 AM
illofsec.bsky.social
Spyware maker NSO Group acquired
techcrunch.com/2025/10/10/s...
Spyware maker NSO Group confirms acquisition by US investors | TechCrunch
NSO Group confirmed to TechCrunch that an unnamed group of American investors has taken “controlling ownership” of the surveillance tech maker.
techcrunch.com
October 13, 2025 at 7:10 PM
illofsec.bsky.social
Discord Data Breach
techcrunch.com/2025/10/09/d...
Discord data breach affects at least 70,000 users | TechCrunch
The platform said in a press release that hackers breached a third-party vendor that Discord uses for age-related appeals.
techcrunch.com
October 13, 2025 at 7:04 PM
illofsec.bsky.social
Oracle Zero-Day Bug
techcrunch.com/2025/10/06/c...
Clop hackers caught exploiting Oracle zero-day bug to steal executives' personal data | TechCrunch
Oracle fixes another security flaw that Clop hackers were using to steal sensitive personal information about executives as part of a mass-extortion campaign.
techcrunch.com
October 9, 2025 at 3:09 AM
illofsec.bsky.social
Google's New AI finds Vulnerabilities
thehackernews.com/2025/10/goog...
Google's New AI Doesn't Just Find Vulnerabilities — It Rewrites Code to Patch Them
Google’s DeepMind unveils CodeMender, an AI agent that auto-fixes code vulnerabilities and enhances software security.
thehackernews.com
October 9, 2025 at 3:05 AM
illofsec.bsky.social
Battering RAM
thehackernews.com/2025/10/50-b...
$50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections
Battering RAM lets attackers bypass Intel SGX and AMD SEV-SNP with a $50 DDR4 interposer.
thehackernews.com
October 1, 2025 at 1:45 AM
illofsec.bsky.social
Critical Flaw in Linux & Unix systems
thehackernews.com/2025/09/cisa...
CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems
CISA adds critical Sudo flaw CVE-2025-32463 and four other exploited vulnerabilities to KEV list.
thehackernews.com
October 1, 2025 at 1:44 AM
illofsec.bsky.social
On Device Identity-Checking Tech
techcrunch.com/2025/09/26/t...
TruSources to show off its on-device identity-checking tech at TechCrunch Disrupt 2025 | TechCrunch
Age-verification laws are a privacy and security nightmare. This startup performs age checks on-device, without users having to upload their IDs to the internet.
techcrunch.com
September 26, 2025 at 9:43 PM
illofsec.bsky.social
Neon Mobile pays to record users phone calls
techcrunch.com/2025/09/24/n...
Neon, the No. 2 social app on the Apple App Store, pays users to record their phone calls and sells data to AI firms | TechCrunch
A new call recording app is gaining traction for offering to pay users for voice data from calls, which is sold to AI companies.
techcrunch.com
September 26, 2025 at 2:23 AM
illofsec.bsky.social
Ransomware Attacks in E.U. cause airport disruptions
techcrunch.com/2025/09/22/e...
EU cyber agency confirms ransomware attack causing airport disruptions  | TechCrunch
A cyberattack targeting Collins Aerospace, a provider of airport check-in systems, sparked delays and disrupted flights across Europe over the weekend.
techcrunch.com
September 24, 2025 at 2:39 AM
illofsec.bsky.social
Automaker Stellantis data breach
techcrunch.com/2025/09/22/a...
Automaker giant Stellantis says customers’ personal data stolen during breach | TechCrunch
One report says, citing the hackers who took credit for the breach, that 18 million customer records were stolen from Stellantis' customer database.
techcrunch.com
September 24, 2025 at 2:33 AM
illofsec.bsky.social
Jaguar's Land Rover Pause in Production due to Cyberattack
techcrunch.com/2025/09/17/j...
Jaguar Land Rover to pause production for third week due to cyberattack  | TechCrunch
The company owned by Tata Motors is estimated to be losing millions of pounds a week due to the shutdown.
techcrunch.com
September 20, 2025 at 12:23 AM
illofsec.bsky.social
Cyber Resilience Against AI & Quantum Computing
thehackernews.com/2025/09/from...
From Quantum Hacks to AI Defenses – Expert Guide to Building Unbreakable Cyber Resilience
Join our webinar to learn how to counter Quantum AI threats and build unbreakable cyber resilience now.
thehackernews.com
September 19, 2025 at 12:22 AM
illofsec.bsky.social
Do you think all these cyberattacks are by coincidence?
September 16, 2025 at 12:21 AM
illofsec.bsky.social
Browser Based Attacks
thehackernews.com/2025/09/6-br...
6 Browser-Based Attacks Security Teams Need to Prepare For Right Now
Browser-based attacks exploiting OAuth flaws, MFA gaps, and malicious extensions drive large-scale data breaches.
thehackernews.com
September 16, 2025 at 12:18 AM
illofsec.bsky.social
Samsung fixes Zero-Day
thehackernews.com/2025/09/sams...
Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks
Samsung patched CVE-2025-21043 on Sep 2025 after zero-day Android exploits enabled code execution.
thehackernews.com
September 12, 2025 at 4:23 PM
illofsec.bsky.social
iPhone's new security feature
techcrunch.com/2025/09/11/a...
Apple's latest iPhone security feature just made life more difficult for spyware makers | TechCrunch
Apple launched a new security feature for iPhone 17 and iPhone Air designed to reduce the effect of memory corruption bugs, and in turn make spyware and zero-days more difficult to hack into iPhones.
techcrunch.com
September 12, 2025 at 12:43 AM
illofsec.bsky.social
Windows Vulnerabilities
thehackernews.com/2025/09/micr...
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
Microsoft patched 80 flaws in Sept 2025, including CVE-2025-55234 SMB bug and CVSS 10 Azure risk.
thehackernews.com
September 11, 2025 at 1:37 AM
illofsec.bsky.social
Salty2FA Phishing Kit
thehackernews.com/2025/09/watc...
Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises
Salty2FA phishing kit active since June 2025 bypasses 2FA in US and EU campaigns, fueling enterprise breaches.
thehackernews.com
September 11, 2025 at 1:36 AM
illofsec.bsky.social
Is X's encrypted messenger good?
techcrunch.com/2025/09/05/x...
X is now offering me end-to-end encrypted chat — you probably shouldn't trust it yet | TechCrunch
X's new encrypted messaging feature, XChat, has some red flags.
techcrunch.com
September 7, 2025 at 2:06 AM