Dutch authorities allegedly seize VPN server without a warrant — company claims that law enforcement will return it after analyzing the device fully | Tom’s Hardware

Dutch authorities allegedly seize VPN server without a warrant — company claims that law enforcement will return it after analyzing the device fully | Tom’s Hardware Something to consider when…

Study concludes cybersecurity training doesn’t work | KPBS Public Media

Some people with training were slightly less likely to click on a phishing lure than the untrained. But some trained people were more likely to click.

Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data | WIRED

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypted.

Pentests once a year? Nope. It’s time to build an offensive SOC

In the real world, adversaries don’t operate in bursts. Their recon is continuous, their tools and tactics are always evolving, and new vulnerabilities are often reverse-engineered into working exploits within hours of a patch release.

So, if your offensive validation isn’t just as dynamic, you’re not just lagging, you’re exposed.

After $380M hack, Clorox sues its “service desk” vendor for simply giving out passwords – Ars Technica

According to The Clorox Company, which makes everything from lip balm to cat litter to charcoal to bleach, this is exactly what happened to it in 2023. But Clorox says that the “debilitating” breach was not its fault. It had outsourced the “service desk” part of its IT security operations to the massive services company Cognizant—and Clorox says that Cognizant failed to follow even the most basic agreed-upon procedures for running the service desk.

Microsoft says China-backed cybercriminals hacked into US nuclear weapons agency

“The early exploitation resembled government-sponsored activity, and then spread more widely to include hacking that ‘looks like China’,” Meyers told Bloomberg News. CrowdStrike’s investigation into the campaign remains ongoing.

Sniffnet: comfortably monitor your Internet traffic

Sniffnet is a network monitoring tool to help you easily keep track of your Internet traffic.

FAA to eliminate floppy disks & Win95 in air traffic control systems.

The head of the Federal Aviation Administration just outlined an ambitious goal to upgrade the U.S.’s air traffic control (ATC) system and bring it into the 21st century. According to NPR, most ATC towers and other facilities today feel like they’re stuck in the 20th century, with controllers using paper strips and floppy disks to transfer data, while their computers run Windows 95. While this likely saved them from the disastrous CrowdStrike outage that had a massive global impact, their age is a major risk to the nation’s critical infrastructure, with the FAA itself saying that the current state of its hardware is unsustainable.

Single Right-Click Let Hackers Gain Access To System By Exploiting 0-Day

This 0-day flaw, identified by security analysts at ClearSky Cyber Security in June 2024, allows attackers to gain unauthorized access to systems through minimal user interaction.

How To Find Listening Ports With Netstat and PowerShell

The netstat command in Windows is a useful tool for IT and Cyber professionals for tracing connections to computers. https://mshub.co.uk/find-listening-ports-netstat-and-powershell/#:~:text=To%20narrow%20down%20the%20output,often%20more%20useful%20for%20analysis.