mastodon – PossibleThreat Articles

Patch Tuesday, June 2024 “Recall” Edition

June 11, 2024 0 Comments adam barnett, copilot, cve-2004-30080, cve-2024-30078, immersive labs, kevin beaumont, kevin breen, mastodon, microsoft message queuing, microsoft patch tuesday june 2024, patrick gray, rapid7, recall, risky business podcast, Time to Patch, Windows, windows wifi driver

Credit to Author: BrianKrebs| Date: Tue, 11 Jun 2024 22:57:35 +0000

Microsoft today released updates to fix more than 50 security vulnerabilities in Windows and related software, a relatively light Patch Tuesday this month for Windows administrators. The software giant also responded to a torrent of negative feedback on a new feature of Redmond’s flagship operating system that constantly takes screenshots of whatever users are doing on their computers, saying the feature would no longer be enabled by default.

Independent Krebs Security

Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

April 15, 2024 0 Comments domaintools.com, mastodon, matthew garrett, other, phishing, sean mcnee, twitter.com, x.com

Credit to Author: BrianKrebs| Date: Wed, 10 Apr 2024 14:28:17 +0000

On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to redirect to “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered that demonstrate how this change could be used to craft convincing phishing links — such as fedetwitter[.]com, which is currently rendered as fedex.com in tweets.

MalwareBytes Security

“TootRoot” Mastodon vulnerabilities fixed: Admins, patch now!

July 11, 2023 0 Comments CVE, Flaw, mastodon, Network, networking, Patch, personal, Server, social media, tootroot, update, vulnerability

Categories: Personal

Tags: tootroot

Tags: mastodon

Tags: server

Tags: patch

Tags: update

Tags: CVE

Tags: flaw

Tags: vulnerability

Tags: social media

Tags: network

Tags: networking

We take a look at a collection of issues (now patched) which were affecting Mastodon servers. It’s time to apply the fix for TootRoot.

Independent Krebs Security

Service Rents Email Addresses for Account Signups

June 6, 2023 0 Comments impulse scam crypto project, kopeechka, mastodon, quotpw, renaud chaput, Spam, trend micro, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Tue, 06 Jun 2023 20:09:13 +0000

One of the most expensive aspects of any cybercriminal operation is the time and effort it takes to create large numbers of new throwaway email accounts. Now a new service offers to help dramatically cut costs associated with large-scale spam and account creation campaigns, by paying people to sell their email account credentials and letting customers temporarily rent access to a vast pool of established accounts at major providers.

Independent Krebs Security

Phishing Domains Tanked After Meta Sued Freenom

May 26, 2023 0 Comments A Little Sunshine, awpg ecrime exchange, dave piscitello, freenom, interisle consulting group, mastodon, meta, namecheap, openphish, phishtank, spamhaus

Credit to Author: BrianKrebs| Date: Fri, 26 May 2023 16:37:15 +0000

The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta, which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while monetizing traffic to those abusive domains.

Independent Krebs Security

Interview With a Crypto Scam Investment Spammer

May 22, 2023 0 Comments arkose labs, Breadcrumbs, constella intelligence, domaintools, edgard011012@gmail.com, lolzteam, mastodon, mondi group, moonxtrade, msr-sergey2015@yandex.ru, Ne'er-Do-Well News, quot.pw, renaud chaput, sergey proshutinskiy, tgm, twitter, Web Fraud 2.0, ципа

Credit to Author: BrianKrebs| Date: Tue, 23 May 2023 00:15:30 +0000

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. What follows is an interview with a Russian hacker responsible for a series of aggressive crypto spam campaigns that recently prompted several large Mastodon communities to temporarily halt new registrations. According to the hacker, their spam software has been in private use until the last few weeks, when it was released as open source code.

MalwareBytes Security

Hive Social pulls the plug on itself after security flaws found

December 8, 2022 0 Comments app, hive social, mastodon, Mobile, news, Security, social media, socmed, twitter

Categories: News

Tags: Hive social

Tags: app

Tags: mobile

Tags: social media

Tags: socmed

Tags: mastodon

Tags: twitter

Tags: security

Hive was taken offline last Wednesday, after researchers found security issues which could have had major ramifications for service users.

Security Sophos

Jack Dorsey wants a decentralised Twitter

December 13, 2019 0 Comments activitypub, bluesky, decentralised, Jack Dorsey, mastodon, Social networks, twitter

Credit to Author: Danny Bradbury| Date: Fri, 13 Dec 2019 11:28:55 +0000

Twitter CEO Jack Dorsey has announced a research effort to explore a decentralised version of the microblogging platform.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/BVqq8LVgZWE” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

ACCESS Act might improve data privacy through interoperability

November 6, 2019 0 Comments access act, apple pages, Big Tech, center for democracy and technology, competition, congress, data interoperability, data portability, Data privacy, data privacy laws, data privacy legislation, ello, European Union, facebook, Facebook Messenger, GDPR, General Data Protection Regulation, Google, google docs, Instagram, interoperability, LinkedIn, Mark Zuckerberg, mastodon, Messenger, Microsoft Word, portability, Privacy, senate, the access act, twitter, us congress, US data privacy laws, US data privacy legislation, user privacy, whatsapp

Credit to Author: David Ruiz| Date: Wed, 06 Nov 2019 16:00:00 +0000

Data privacy is back in Congressional lawmakers’ sights, as proposed legislation called the ACCESS Act focuses not on data collection, storage, and selling, but on the idea that Americans should be able to easily pack up their data and take it to a competing service. But will this actually protect privacy?

Categories:

Privacy

Tags: ACCESS Act Apple Pages Big Tech Center for Democracy and Technology competition congress data interoperability data portability Data privacy data privacy laws data privacy legislation Ello European Union facebook Facebook Messenger gdpr General Data Protection Regulation Google google docs Instagram interoperability LinkedIn Mark Zuckerberg Mastodon messenger microsoft word portability Senate The ACCESS Act twitter US Congress US data privacy laws US data privacy legislation user privacy whatsapp