Commented

What steps can I take to be more secure on the internet?

So recently I’ve gotten a bit more serious about my internet security, and made some changes. Here’s a short list of what I’ve done, but I’m wondering if I’m missing anything important:...

Most to least common 4-digit PINs (www.grc.com)

or why it is not a good idea to use your birthday as your pin

A Vigilante Hacker Took Down North Korea’s Internet. Now He’s Taking Off His Mask (www.wired.com)

Federal agency warns critical Linux vulnerability being actively exploited (arstechnica.com)

Cybersecurity and Infrastructure Security Agency urges affected users to update ASAP.

Microsoft Azure Hit With The Largest Data Breach In Its History; Hundreds Of Executive Accounts Compromised (techreport.com)

For the first time in the history of Microsoft, a cyberattack has left hundreds of executive accounts compromised and caused a major user data leak as Microsoft Azure was attacked....

New acoustic attack steals data from keystrokes with 95% accuracy (www.bleepingcomputer.com)

NSA Warns iPhone And Android Users To Turn It Off And On Again (www.forbes.com)

Millions of Docker repos found pushing malware, phishing sites (www.bleepingcomputer.com)

Truck-to-truck worm could infect entire US fleet (www.theregister.com)

[Question] Is this a secure way to generate passwords (sh.itjust.works)

So I’ve been trying to create more secured passwords now that I have employment where I have responsibility. They require us to change our passwords every 3 months. I used to use the same passwords for multiple sites. Then I used a password manager and got rid of those memory passwords. With this job I don’t want to mix my...

Microsoft admits Russian state hack still not contained. ‘This has tremendous national security implications’ (fortune.com)

Interesting view on this situation.

Microsoft says Russian hackers breached its systems, accessed source code (www.bleepingcomputer.com)

Microsoft reported a breach by Russian group ‘Midnight Blizzard,’ which accessed internal systems and source code using stolen authentication secrets from a January cyberattack. The unauthorized access was facilitated by a compromised non-production test account lacking multi-factor authentication and linked to an OAuth app...

Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds (thehackernews.com)

FBI says Chinese hackers preparing to attack US infrastructure (www.reuters.com)

GitHub disables XZ Repository (www.phoronix.com)

Throwback to the old days (lemmy.one)

Was digging through my draws and found these gems.

Which OS/Distro?

I’m new to the cyber-security/privacy space. I am interested in teaching myself about it, as well as dabbling in OSINT and general linux-type-stuff too. ATM this is all a hobby so while it is not crucial to have everything air-tight, I would like to do my best to follow best practices....

LastPass breach linked to theft of $4.4 million in crypto (www.bleepingcomputer.com)

Should I glue my SIM card tray shut?

I know it’s an odd question, but where I live phones get stolen often. My phone doesn’t have the option for an eSim, which is a problem because 90% of the time when a thief steals a phone they take out the SIM card immediately, meaning I wouldn’t be able to remotely lock or wipe my phone....

cybersecurity