Posts by zackwhittaker@mastodon.social
(DIR) Post #B5VvfpMkeQi1sFvEwK by zackwhittaker@mastodon.social
0 likes, 0 repeats
A spokesperson for Vercel told me that the company has not received any communication from the threat actor, such as a demand for ransom. No word yet on the number of Vercel customers affected, though. (I asked.)https://techcrunch.com/2026/04/20/app-host-vercel-confirms-security-incident-says-customer-data-was-stolen-via-breach-at-context-ai/
(DIR) Post #B5YJcEEf20I13ysHeS by zackwhittaker@mastodon.social
0 likes, 1 repeats
So... Anthropic spent weeks claiming that it couldn't publicly release its Mythos AI model because of its alleged offensive hacking capabilities and.... some AI nerds from Discord just found it and accessed it? Anthropic is a fucking joke. https://www.bloomberg.com/news/articles/2026-04-21/anthropic-s-mythos-model-is-being-accessed-by-unauthorized-users
(DIR) Post #B5bcEIOcOMBLcWiHjs by zackwhittaker@mastodon.social
0 likes, 1 repeats
Your doctor or therapist might be using AI recording to transcribe your patient notes. Two privacy experts have nine good reasons why you should decline and opt-out. Some words by me: https://this.weekinsecurity.com/why-your-doctors-ai-recorder-can-be-bad-for-your-health-and-privacy/
(DIR) Post #B63tnWO3VLDonKi7o8 by zackwhittaker@mastodon.social
0 likes, 1 repeats
Police arrested three men accused of driving around an SMS blaster across downtown Toronto, which allegedly blasted tens of thousands of phones with spammy text messages over several months. https://techcrunch.com/2026/05/07/police-arrest-sms-blaster-crew-that-sent-malicious-messages-to-thousands-across-toronto/
(DIR) Post #B6Ki55X6Brd6xRry9w by zackwhittaker@mastodon.social
2 likes, 2 repeats
CNN's Sean Lyngaas back once again with a belter story: Iranian hackers are behind a series of breaches of systems that monitor the amount of fuel in storage tanks serving gas stations in multiple U.S. states.Per Lyngaas: the hackers "exploited automatic tank gauge systems that were sitting online and unprotected by passwords." A little louder for the folks in the back:...."UNPROTECTED BY PASSWORDS."https://www.cnn.com/2026/05/15/politics/iran-hackers-tank-readers-gas-stations
(DIR) Post #B6X0K07QjQJfa9duy0 by zackwhittaker@mastodon.social
0 likes, 0 repeats
@Gargron i agree. i feel like the ability to customize, tinker, modify, edit... even hack (gently) websites and web apps especially has been taken away over the past 10-15 years of so. editing the live HTML of a Myspace page back in the 2000s almost feels impossible without all of the guardrails put in place today. it was actually fun to grow up on the internet and with computers during the 90s and 00s!
(DIR) Post #B6aZnKB5JNl43swxYe by zackwhittaker@mastodon.social
0 likes, 1 repeats
If someone wants to leak me a copy of this app (either .apk or .ipa), please reach out on Signal — my username is zackwhittaker.1337 — and I would be keen to run this app through Burp Suite to see how it works. Happy to grant anonymity.https://www.govexec.com/management/2026/05/white-house-ordering-agencies-place-its-new-app-all-employees-government-phones/413738/
(DIR) Post #B6oC0ZnjKw50xQ0AXQ by zackwhittaker@mastodon.social
0 likes, 0 repeats
PostHog says it's currently experiencing a security incident. The analytics company said it's "rotating keys after a security research team was able to confirm an exploit in one of our AWS environments," referring to Amazon Web Services.Incident page: https://www.posthogstatus.com/incidents/01KSV6HJYKG5QJAP8HVTSQVSM1
(DIR) Post #B6sYkwBjPR5pKnZzou by zackwhittaker@mastodon.social
0 likes, 1 repeats
It's rare to see near-universal condemnation from the infosec community, but Microsoft threatening a security researcher has done it.Notable exceptions: When Keeper Security sued Ars Technica over a story (2017); NSA's mass surveillance uncovered (2013); and FBI demanding an Apple backdoor (2016).https://techcrunch.com/2026/05/29/microsoft-under-fire-for-threatening-security-researcher-with-criminal-investigation/
(DIR) Post #B6sYkxKz8W5atmutsm by zackwhittaker@mastodon.social
0 likes, 0 repeats
The brazenness of the FBI's and Keeper's bullshit, the NSA's vast scale of global hacking, and now Microsoft's veiled threats against researchers. These issues drew infosec's ire (rightfully so) because they're direct attacks on the fundamental work that infosec does — making things more secure. https://techcrunch.com/2026/05/29/microsoft-under-fire-for-threatening-security-researcher-with-criminal-investigation/
(DIR) Post #B7SNLllXTHqe8hvyLI by zackwhittaker@mastodon.social
1 likes, 2 repeats
My adorable large adult cat son Theo had high blood pressure (what reason does he have to be stressed? he's a cat, he doesn't even pay rent). After some medication, he's doing great. Still something hilarious about cats having their own blood pressure machines. His brother Toby was being very sweet.
(DIR) Post #B7SNVnJ0bKbloLMyEC by zackwhittaker@mastodon.social
0 likes, 0 repeats
@Gargron thank you. his BP is so much better. i swear he's the happiest cat in the world.
(DIR) Post #B7a2YwYVCqhaYWOB9c by zackwhittaker@mastodon.social
1 likes, 0 repeats
To anyone and everyone who also has complicated or painful feelings on days like today for Mother's or Father's Day, you are seen and you are loved.
(DIR) Post #B7cbkbH2i1yAHwnYrg by zackwhittaker@mastodon.social
0 likes, 1 repeats
In a new privacy policy, Anthropic says Claude will soon require you to upload your driver's license or passport for a variety of reasons. The ID checker is Persona, a firm funded by Trump ally Peter Thiel. As a U.S. company, Persona is also subject to gov't demands for people's verification data. 👀https://techcrunch.com/2026/06/22/anthropic-says-claude-may-want-to-see-your-id/
(DIR) Post #B7vMnSNV3obMbdOL2W by zackwhittaker@mastodon.social
0 likes, 0 repeats
@Gargron congratulations! moving country is huge -- been there, done that -- it was the best decision of my life. wishing you every success!
(DIR) Post #B83z5EwtDYALbWMe1o by zackwhittaker@mastodon.social
0 likes, 1 repeats
Layoffs are a failure of leadership.https://www.theverge.com/news/961528/microsoft-layoffs-july-2026-sales-xbox
(DIR) Post #B84sB2P4Gl57uZK0kC by zackwhittaker@mastodon.social
0 likes, 1 repeats
Took a photo of this license plate a few days ago while on vacation in Maine, seems apt today.
(DIR) Post #B8EyUwa1kSqeAwUCI4 by zackwhittaker@mastodon.social
0 likes, 1 repeats
Smart glasses with cameras and microphones built-in and facial recognition to come are the latest fad in surveillance tech.For my blog & newsletter ~ this week in security ~ I wrote about why the backlash against smart glasses — aka "pervert glasses" — is justified from a security and privacy perspective. Please read and share!More: https://this.weekinsecurity.com/reframing-smart-glasses-as-pervert-glasses/Sign up/RSS for my weekly newsletter: https://this.weekinsecurity.com
(DIR) Post #B8EyUxqN3BW25v8lP6 by zackwhittaker@mastodon.social
0 likes, 0 repeats
My hand-written cybersecurity newsletter ~ this week in security ~ goes out every Sunday with all of the major news you need to know from the week and much more, plus some levity in the happy corner of good things, and a reader-submitted cyber-cat. 🐈⬛No email open/link tracking — because I care about your privacy! Sign up/RSS for the weekly email: https://this.weekinsecurity.com/
(DIR) Post #B8PTNCGggvpsiSzdGi by zackwhittaker@mastodon.social
1 likes, 0 repeats
Today's dystopia is sponsored by BritBox, apparently.