Today we are going to play Potato Pirates 2 - Enter the Spudnet at work.
It's a fun board game with a little bit of cyber security mixed in.
It's a test run. I want to play that at the girls day this year. The girls (and boys) day is a special day in Germany, there kids are encouraged to experience jobs, that are biased towards certain gender. For example information technology or child care.
This is the third year my employer participates and offers a broad experience of jobs in computer science. PO, Scrum master, cyber security, developer.
So far we got very positive feedback from the young people and I hope that we can reduce the gatekeeping in these jobs.

If you are a little bit older and want to play that game or learn more about cyber security without previous experience, maybe the @OSCo is something for you.
It's an un-conference in the open space format focused on cyber security. I'm one of the organizers and our goal is to reduce gatekeeping and to create a safe space for everyone, regardless of experience, age, gender, religion, skin colour or disability.
The open security conference 2026 is scheduled for 5-8 November 2026 in the SeminarZentrum Rückersbach (Germany):
https://opensecurityconference.org/

#infosec #computerscience #cybersecurity #osco #girlsday #girlsandboysday

Today we are going to play Potato Pirates 2 - Enter the Spudnet at work.
It's a fun board game with a little bit of cyber security mixed in.
It's a test run. I want to play that at the girls day this year. The girls (and boys) day is a special day in Germany, there kids are encouraged to experience jobs, that are biased towards certain gender. For example information technology or child care.
This is the third year my employer participates and offers a broad experience of jobs in computer science. PO, Scrum master, cyber security, developer.
So far we got very positive feedback from the young people and I hope that we can reduce the gatekeeping in these jobs.

If you are a little bit older and want to play that game or learn more about cyber security without previous experience, maybe the @OSCo is something for you.
It's an un-conference in the open space format focused on cyber security. I'm one of the organizers and our goal is to reduce gatekeeping and to create a safe space for everyone, regardless of experience, age, gender, religion, skin colour or disability.
The open security conference 2026 is scheduled for 5-8 November 2026 in the SeminarZentrum Rückersbach (Germany):
https://opensecurityconference.org/

#infosec #computerscience #cybersecurity #osco #girlsday #girlsandboysday

whenever i do security audit work on site, there are two tools that always come with me these days, such are the times in which we live:

1) modified orbic hotspot running eff’s rayhunter, to flag stingray devices in proximity

2) tiny little esp32 running flock-you, the flock camera detector, so i can let folks know they are close by

https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying

https://github.com/colonelpanichacks/flock-you

two little bits of gear running great open source projects that can expose the unseen risks that may be floating around out there

#infosec

Holy shit. TIL that Janet Jackson is the only Grammy-winning artist with a CVE.

CVE-2022-38392 indicates that playing Rhythm Nation near certain hard drives will cause a crash, because the song contains a resonate frequency with a 5400RPM spinning disk of a certain diameter and construction.

Neat.

#music #infosec

The latest Quad9 Trends report with insights from our Director of #ThreatIntel for H2 2025 👉 https://quad9.net/news/blog/trends-h2-2025-cyber-insights/

#DNS #infosec #mirai #omnatour #malvertizing #crowdstrike

The latest Quad9 Trends report with insights from our Director of #ThreatIntel for H2 2025 👉 https://quad9.net/news/blog/trends-h2-2025-cyber-insights/

#DNS #infosec #mirai #omnatour #malvertizing #crowdstrike

🚀 Protect your data against harvest-now-decrypt-later attacks with PSQ!

We’ve built a lightweight, hybrid post-quantum protocol that injects HNDL security directly into your existing protocols. The easiest way to start your post-quantum transition today without rewriting your entire stack. 🛡️⚛️

Read the full announcement: https://cryspen.com/post/psq-announce/

#PostQuantum #Cryptography #Infosec #RustLang #HNDL

whenever i do security audit work on site, there are two tools that always come with me these days, such are the times in which we live:

1) modified orbic hotspot running eff’s rayhunter, to flag stingray devices in proximity

2) tiny little esp32 running flock-you, the flock camera detector, so i can let folks know they are close by

https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying

https://github.com/colonelpanichacks/flock-you

two little bits of gear running great open source projects that can expose the unseen risks that may be floating around out there

#infosec

Well that sucks - I created a new subdomain on Sunday, and even though I haven't configured a website for it yet or advertised or linked to it anywhere (it's purely in DNS records), I've already got 78 unique IPs within 24 hours, doing HTTP requests for the domain.

These are not IP scans (which I would expect), but HTTP requests that include the new domain name.

It's not even just being nosey at the root level, there are also requests for "../../../xxxxx" and login pages etc.

Only 3 of them are IPv6.

If anyone wants a list, I can provide it.

These addresses are extra ones that are not blocked by the great lists provided by
@stratosphere , as they are filtered out already.

#infoSec #blocklist #AttackerIP

"AI agents—specifically tools like Claude Code—are inherently vulnerable to a "nightmare" security flaw: Indirect Prompt Injection"

#AI #CyberSecurity #PromptInjection #AIAgents #LLM #Programming #InfoSec #TechSecurity #ClaudeCode

https://youtu.be/_3okhTwa7w4