Workaround for CVE-2024-3400 (Palo FW CVSS 10) is to disable device telemetry:
docs.paloaltonetworks.com/pan-os/11-0/pa…

All the automated scanners, million dollar AI-enabled security tools, and VC-backed solutions in the world, and at the end of the day, this was caught by a human who felt like something was off and decided to investigate.

Here's an awesome tip for helping children with their reading. Did you know that putting subtitles/captions on kids' shows massively improves their levels of literacy? Here's a little video of me explaining it. Feel free to share with your friends. #turnonthesubtitles

PROTECT YOUR PRIVACY: turn off Twitter calls.

The feature was just enabled for everyone.

Cue spam, harassment & privacy risks.

Troublingly, the feature exposes your IP address in calls.

PICS: instructions on how to turn it off.

Via:tomsguide.com/computing/chan…

From challenging vendors on whether their products are truly secure by design to turning off unneeded interfaces, portals, or services of internet-facing software, read our latest blog for the steps needed to stay ahead of attackers. Check it out now⬇️
ncsc.gov.uk/blog-post/prod…

Are fully-patched file transfer applications, firewalls and VPNs a risk on your network perimeter? Our latest blog looks at how cyber attackers are changing their tactics – including by targeting the perimeter – and what network defenders can do in response.💡

Let’s explore…🧵

LockBit disrupted by international law enforcement task force - helpnetsecurity.com/2024/02/20/loc… - National Crime Agency (NCA) Closed Door Security Socura Picus Security Inc. #LockBit #Ransomware #LawEnforcement #Cybersecurity News #InfosecNews #Cybersecurity

It is estimated that the UK cyber security sector is now worth £10.5 billion, with a workforce of over 58,000 people - an increase of 5,000 on last year.

Read more about how we're supporting the sector in our 2023 Annual Review ⤵️

ncsc.gov.uk/collection/ann…

iOS and iPadOS 17.3 add Stolen Device Protection. this disables passcode fallback and introduces delays for changing your device passcode and Apple ID password, when your phone is away from a familiar location:

support.apple.com/en-us/HT212510

🎯 FBI disrupted the BlackCat / ALPHV ransomware gang!

-FBI's decryption tool helped over 500 victims ⛑️
-It stopped victims paying ransoms and cost BlackCat approximately $68 million 💪
-They gained access to their servers and seized several websites ⚠️

justice.gov/opa/pr/justice…

🚨ACTIVE EXPLOITATION❗

Cybersecurity and Infrastructure Security Agency, FBI, MS-ISAC & @CyberGovAU released a #cybersecurity advisory on the active exploitation of CVE-2023-4966 #Citrix Bleed vulnerability by #LockBit Ransomware group & affiliates. #TTPs , #IoCs & more at cisa.gov/news-events/cy….
#StopRansomware