MY mentioned, 0-clicking is our past time hobby
UPDATE: Israeli company we caught delivering zero-click infections is #1 bidder on Starlink ads in 105 countries.
Data from @trendai_RSRCH suggests worldwide surveillance op targeting @Starlink users. 1/
By @razhael
reuters.com/business/media-t…
Another lesson is the value of absolute. While keeping everything into the safest layer is good, putting it via a single provider is bad. One must review and consider feasibility (pros/cons) of having multiple avenue of safekeeping.
Even more so if you have such networth
You did everything right
You studied crypto
You accumulated RM12 million in 30s
You studied self-custody with cold wallet
You bought a hardward wallet from an Malaysian authorised reseller called Cryptobilis
But you didn’t know Cryptobilis has been sold to some shady Chinese
Result: the hardware wallet is tampered and you lost everything
rontol retweeted
Happy to share a technical analysis by @h0j3n on our recent CVE-2026-54121 a.k.a Certighost. glhf🔥
Technical analysis: gist.github.com/H0j3n/a5ef26…
POC: github.com/aniqfakhrul/CVE-2…
Ok folks, quick advisory
Score Marathon Official IG page just got hijacked
Please stay vigilante and wait for further update
#scoremarathon
#cybersecuritymalaysia
#itsecuritymalaysia
Have a guess which Endpoint 👀
One of LHDN's payment portals has a data exposure concern. Unauthorised users can harvest personal data such as IC, phone numbers, addresses and email. soyacincau.com/2023/12/13/lh…
Cloud is the future?
Cloud is impeccable?
Yet again, something is brewing at Big G - Gdrive side with people starting to realise some of their files went missing (reverted to old state?)
Google Drive appears to have lost some of it's users files per their support post with more and more people joining in the dataloss discussion.
This is a reminder that just because it's in some cloud service you pay for, you still should have a backup either on site or backed up to another service.
As a Google Workspace user I have been using Synology to backup all my data just in case, but thus far I have not been impacted by this. I do have a video showing how to use Synology for backing up both Google & Office 365 here:
youtu.be/Yb2UUUnF0hc?si=rk6r…
And here is the Google support link with users and Google discussing the situation:
support.google.com/drive/thr…
There's an advisory from a Googler for affected users while they solving the issue
support.google.com/drive/thr…
There's an update with a solution (yay!?) on 5th Dec:
'We have released a solution to help make files available to users impacted by the Drive for desktop version 84 sync issue. Please see this Help Center article for instructions'
support.google.com/drive/thr…
rontol retweeted
Cybersecurity vs cyber resilience - term at times used interchangeably. What is it and why does it differ?
linkedin.com/pulse/cybersecu…
rontol retweeted
Wargames.MY is finally open for registration! 🚀
For the first time, we've decided to open the CTF to the International audiences! 🌐 🇲🇾
Register Now: pro2023.wargames.my/
#WargamesMY_2023
Here we go!
Ending 2023 with a Bang! 💥 Get ready to elevate your skills and embrace the challenge. Registration for our CTF competition opens in 24 hours 🚀💻 - wargames.my/
rontol retweeted
Pitfalls of risk based cybersecurity
linkedin.com/pulse/ciso-seri…
rontol retweeted
We love when researchers use Censys! Check out this excellent post by @MichalKoczwara doing just that: michaelkoczwara.medium.com/t…
Do you want to further your understanding of the Internet? Think you’d benefit from researcher level access? Drop us a note! support.censys.io/hc/en-us/a…
rontol retweeted
I'm proud to be part of the The Humble Cybersecurity 2023 Book Bundle: Get 18 security ebooks for a great price, AND support a charity. humblebundle.com/books/cyber… @humble
